n8n: Expression sandbox escape via arrow-function bodies enabling command execution

## Impact An authenticated user with permission to create or modify workflows could abuse crafted expressions using arr

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Send Email Node Arbitrary File Read and SSRF via Nodemailer Content-Object Type Confusion

## Impact The n8n Send Email node did not enforce that its message fields were strings, so a crafted untrusted non-stri

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Authenticated code execution in the n8n Git node

## Impact Authenticated n8n users with rights to create and execute workflows could achieve code execution on the n8n h

历史摘要 · 未重新核验 · GitHub Advisory

n8n: SSRF Protection Bypass via MCP Client Node

## Impact On an n8n instance with SSRF protection enabled, the MCP Client node sent requests to a user-supplied endpoin

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Git Node fetch/pull/pushTags Operations Bypass Sandbox Path Restriction

## Impact Authenticated n8n users with workflow create/execute rights could use the Git node's fetch, pull, or push-tag

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Bypass "Allowed HTTP Request Domains" Credential Restriction in Multiple AI and LLM Nodes

## Impact The credential "Allowed HTTP Request Domains" allowlist was intended to restrict which hosts a credential's s

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Account Takeover via Unverified Email Claim in Token Exchange Embed Login

## Impact In an n8n instance, when a validly-signed incoming token was matched to a local account by its email claim, t

历史摘要 · 未重新核验 · GitHub Advisory

n8n: SSO Instance-Role Provisioning Allows Privilege Escalation to Instance Owner

CVE-2026-65016

## Impact n8n's Enterprise SSO instance-role provisioning maps a role claim asserted by the configured Identity Provider

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Legacy Expression Evaluator Sanitizer Bypass Leads to Authenticated Code Execution

CVE-2026-65591

## Impact The legacy expression evaluator's computed-member sanitizer can be bypassed by an authenticated user with work

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Authenticated SSRF via Dynamic Node Parameters Endpoints Allows Internal Network Access

CVE-2026-65593

## Impact Endpoints in `/rest/dynamic-node-parameters/` lacked authorization scopes, making it reachable by any authent

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs

CVE-2026-65595

## Impact JWTs issued through the Token Exchange module were assigned all Public API key scopes, regardless of the acti

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution

CVE-2026-59208

## Impact When an n8n instance is configured with more than one trusted token-exchange issuer, external identities are r

历史摘要 · 未重新核验 · GitHub Advisory

n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector

CVE-2026-59207

## Impact The AI Agents feature did not enforce the "Allowed HTTP Request Domains" restriction configured on credentials

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration

CVE-2026-59206

## Impact An authenticated user with the default `workflow:create` permission could pollute `Object.prototype` through a

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Shared Credential Header Leak via HTTP Request Pagination Expression

CVE-2026-59209

## Impact An authenticated member with use-only editor access to a shared workflow could read credential-populated heade

历史摘要 · 未重新核验 · GitHub Advisory

From Noise to Signal: Precisely Identify Affected Packages of Known Vulnerabilities in npm Ecosystem.

该论文发表于 NDSS 2026，针对 npm 生态系统中已知漏洞的受影响包识别问题。由于 npm 依赖关系复杂，漏洞公告往往只描述漏洞本身，而难以精确判定哪些具体包版本实际包含该漏洞（即受影响的包）。现有方法要么过于保守（漏报），要么过于

历史摘要 · 未重新核验 · NDSS

fast-uri vulnerable to host confusion via literal backslash authority delimiter

CVE-2026-16221

### Impact `fast-uri` v4.1.0 and earlier do not treat a literal backslash (U+005C) as an authority delimiter. Node's na

历史摘要 · 未重新核验 · GitHub Advisory

sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591

### Impact A number of vulnerabilities, two rated as "High" severity using CVSSv4, have been discovered and fixed in th

历史摘要 · 未重新核验 · GitHub Advisory

fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limits

### Impact `fast-xml-parser` processes multiple "DOCTYPE" declarations within a single XML document. Each declaration pa

历史摘要 · 未重新核验 · GitHub Advisory

Node.js Adapter for Hono: Unauthenticated memory-leak DoS via aborted WebSocket handshake

## Summary A WebSocket upgrade request to an `upgradeWebSocket` route with a missing or malformed `Sec-WebSocket-Key` h

历史摘要 · 未重新核验 · GitHub Advisory