n8n vulnerabilities (npm)
157 vulnerabilities.
n8nnpmn8n - Disk Space Exhaustion via Data-Table File Upload Endpoint5.3 Mediumn8nnpmn8n: Shared Credential Header Leak via HTTP Request Pagination Expression7.1 Highn8nnpmn8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration7.1 Highn8nnpmn8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution7.6 Highn8nnpmn8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector7.1 Highn8nnpmn8n - SQL Injection in MySQL v1 executeQuery Operation via Expression Interpolation5.3 Mediumn8nnpmn8n - Improper Authorization in Workflow Assignment to Folders5.3 Mediumn8nnpmn8n - Incorrect OAuth Scope Validation in Evaluation Test Runs Endpoints5.3 Mediumn8nnpmn8n: SecurityScorecard Node Leaks API Token to User-Controlled Host7.1 Highn8nnpmn8n: n8n MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions8.8 Highn8nnpmn8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints8.9 Highn8nnpmn8n: Credential Exfiltration via Permission Bypass8.5 Highn8nnpmn8n: Denial of Service via ZIP decompression in webhook workflow6.3 Mediumn8nnpmn8n - Authorization Bypass in Public API Execution Retry Endpoint5.3 Mediumn8nnpmn8n - AST Validator Bypass in Python Code Node5.3 Mediumn8nnpmn8n: Stored XSS in Chat Trigger Node7.0 Highn8nnpmn8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification Endpoints6.8 Mediumn8nnpmn8n: Microsoft SQL Node Prototype Pollution7.2 Highn8nnpmn8n: Merge Node SQL Mode Prototype Pollution6.0 Mediumn8nnpmn8n: Prototype Pollution enables confused-deputy execution via public webhooks6.3 Mediumn8nnpmn8n: Same-Origin XSS in Respond to Webhook Node7.0 Highn8nnpmn8n: Missing Token Validation on Microsoft Agent 365 Trigger Node6.3 Mediumn8nnpmn8n - Incorrect OAuth Scope Validation in Workflow Test Run Endpoint5.3 Mediumn8nnpmn8n: NoSQL Injection in MongoDB Node Find And Replace Operation6.5 Mediumn8nnpmn8n: SQL Injection in Postgres v1/TimesclaeDB Nodes6.5 Mediumn8nnpmn8n: Git Node Clone and Push Operations Bypass File Sandbox6.0 Mediumn8nnpmn8n: Python sandbox escape7.1 Highn8nnpmn8n - Credential Exfiltration via Allowed HTTP Request Domains Bypass in Dynamic Node Parameters Endpoint5.3 Mediumn8nnpmn8n - Arbitrary File Read and Execution via ExecuteWorkflow localFile Parameter5.3 Mediumn8nnpmn8n: Cross-user Authorization Bypass in Dynamic Credential OAuth Endpoints8.3 Highn8nnpmn8n: Source Control Pull SQL Injection8.9 Highn8nnpmn8n: XML Node Prototype Pollution Patch Bypass9.4 Criticaln8nnpmn8n: Arbitrary File Read via Git Node9.4 Criticaln8nnpmn8n: HTTP Request Node Pagination Prototype Pollution to RCE9.4 Criticaln8nnpmn8n: XML Node Prototype Pollution to RCE9.4 Criticaln8nnpmn8n: Prototype Pollution in XML Webhook Body Parser Leads to RCE9.4 Criticaln8nnpmn8n: XSS via MCP OAuth client8.8 Highn8nnpmn8n: Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key Replay7.1 Highn8nnpmn8n: Python Task Runner Sandbox Escape7.1 Highn8nnpmn8n: Public API Variables IDOR Allows Cross-Project Secret Disclosure6.0 Mediumn8nnpmn8n: Unauthenticated Denial of Service via MCP Client Registration8.7 Highn8nnpmn8n: Hijacking of Unauthenticated Chat Execution6.3 Mediumn8nnpmn8n: SQL Injection in SeaTable Node5.3 Mediumn8nnpmn8n: Open Redirect in MCP OAuth Consent Flow5.1 Mediumn8nnpmn8n: SQL Injection in Oracle Database Node via Limit Field5.3 Mediumn8nnpmn8n: SQL Injection in Snowflake and MySQL Nodes5.3 Mediumn8nnpmn8n - Cross-Site Scripting in Credential Management OAuth2 Authorization URL4.8 Mediumn8nnpmn8n - Stored Cross-Site Scripting in Chat Trigger Node Custom CSS Field5.1 Mediumn8nnpmn8n - Cross-Site Scripting and Open Redirect in Form Node5.1 Mediumn8nnpmn8n - Stored Cross-Site Scripting in Form Trigger Node5.1 Medium- Show moreLoading…