Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 177
Reset filtersn8n: Prototype Pollution in XML and GSuiteAdmin node parameters lead to RCE
n8n's Source Control SSH Configuration Uses StrictHostKeyChecking=no
n8n Has External Secrets Authorization Bypass in Credential Saving
n8n Has Authorization Bypass in OAuth Callback via N8N_SKIP_AUTH_ON_OAUTH_CALLBACK
n8n: LDAP Email-Based Account Linking Allows Privilege Escalation and Account Takeover
n8n is Vulnerable to Credential Theft via Name-Based Resolution and Permission Checker Bypass in Community Edition
n8n has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode
n8n has In-Process Memory Disclosure in its Task Runner
Flowise affected by Server-Side Request Forgery (SSRF) in HTTP Node Leading to Internal Network Access
n8n has Webhook Forgery on Zendesk Trigger Node
n8n has a Guardrail Node Bypass
n8n has an Authentication Bypass in its Chat Trigger Node
n8n has an SSO Enforcement Bypass in its Self-Service Settings API
n8n: Webhook Forgery on Github Webhook Trigger
n8n: SQL Injection in MySQL, PostgreSQL, and Microsoft SQL nodes
n8n Vulnerable to Stored XSS via Various Nodes
n8n: Expression Sandbox Escape Leads to RCE
n8n has Arbitrary Command Execution via File Write and Git Operations
n8n has Potential Remote Code Execution via Merge Node
n8n has a Sandbox Escape in its JavaScript Task Runner
n8n has Arbitrary File Read via Python Code Node Sandbox Escape
n8n has Unauthenticated Expression Evaluation via Form Node
n8n's domain allowlist bypass enables credential exfiltration
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.