Latest vulnerabilities for "n8n n8n node.js" - SecAlerts

Where

Sort:

Recently updated

Recently published

-Infinity

0

n8n N8n Node.jsn8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT Header

Risk 38

Severity

5.1

First published (updated )

n8n N8n Node.jsn8n before 1.123.64 Remote Code Execution via Git Clone

Risk 72

Severity

8.9

First published (updated )

n8n N8n Node.jsn8n before 1.123.64 DOM-Based XSS via Unsandboxed iframe

Risk 52

Severity

8.2

First published (updated )

n8n N8n Node.jsn8n before 1.123.64 Credential Exfiltration via GraphQL Node

Risk 60

Severity

5.1

First published (updated )

n8n N8n Node.jsn8n before 2.29.8 and 2.30.1 Privilege Escalation via Token Exchange

Risk 76

Severity

8.9

First published (updated )

n8n N8n Node.jsn8n before 1.123.64, 2.29.8, and 2.30.1 SSRF via Dynamic Node Parameters

Risk 49

Severity

6.3

First published (updated )

n8n N8n Node.jsn8n before 2.30.1 Missing OAuth Authorization Check

Risk 38

Severity

5.1

First published (updated )

n8n N8n Node.jsn8n before 1.123.64 Stored DOM XSS via cachedResultUrl

Risk 61

Severity

8.4

First published (updated )

n8n N8n Node.jsn8n before 1.123.64 Sanitizer Bypass Remote Code Execution

Risk 76

Severity

8.9

First published (updated )

n8n N8n Node.jsn8n before 2.30.1 Shell Sandbox Bypass on Linux Windows

Risk 86

Severity

5.5

First published (updated )

n8n N8n Node.jsn8n before 1.123.64 Credential Exposure via LLM Node Execution Data

Risk 38

Severity

5.1

First published (updated )

n8n N8n Node.jsn8n before 2.30.1 Privilege Escalation via run_node_tool

Risk 79

Severity

7.2

First published (updated )

n8n N8n Node.jsn8n before 1.123.64, 2.29.8, and 2.30.1 Privilege Escalation via SSO Instance-Role

Risk 79

Severity

7.7

First published (updated )

n8n N8n Node.jsn8n before 2.28.0 Authentication Bypass via test-webhook

Risk 29

Severity

6.3

First published (updated )

n8n N8n Node.jsn8n - Permission Bypass via Expression Parser Mismatch in External Secrets

Risk 38

Severity

6

First published (updated )

n8n N8n Node.jsn8n - Authentication Bypass in Chat Trigger Node

Risk 37

Severity

6.3

First published (updated )

n8n N8n Node.jsn8n - Disk Space Exhaustion via Data-Table File Upload Endpoint

Risk 26

Severity

5.3

First published (updated )

n8n N8n Node.jsn8n - Cross-Site Scripting and Open Redirect in Form Node

Risk 34

Severity

5.1

First published (updated )

n8n N8n Node.jsn8n: Shared Credential Header Leak via HTTP Request Pagination Expression

Risk 40

Severity

7.1

First published (updated )

n8n N8n Node.jsn8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration

Risk 49

Severity

7.1

First published (updated )

n8n n8nn8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution

Risk 56

Severity

7.6

First published (updated )

n8n N8n Node.jsn8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector

Risk 46

Severity

7.1

First published (updated )

n8n N8n Node.jsn8n - SQL Injection in MySQL v1 executeQuery Operation via Expression Interpolation

Risk 79

Severity

5.3

First published (updated )

n8n n8nn8n - Improper Authorization in Workflow Assignment to Folders

Risk 26

Severity

5.3

First published (updated )

n8n N8n Node.jsn8n - Authorization Bypass in Public API Execution Retry Endpoint

Risk 39

Severity

5.3

First published (updated )

n8n n8nn8n - Incorrect OAuth Scope Validation in Workflow Test Run Endpoint

Risk 52

Severity

5.3

First published (updated )

n8n N8n Node.jsn8n - Incorrect OAuth Scope Validation in Evaluation Test Runs Endpoints

Risk 34

Severity

5.3

First published (updated )

n8n N8n Node.jsn8n - Webhook Forgery via Unsigned POST Requests in ZendeskTrigger

Risk 29

Severity

6.3

First published (updated )

n8n N8n Node.jsn8n - Cross-Site Scripting in Credential Management OAuth2 Authorization URL

Risk 34

Severity

4.8

First published (updated )

n8n N8n Node.jsn8n - AST Validator Bypass in Python Code Node

Risk 26

Severity

5.3

First published (updated )

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203