Vulnerabilities in n8n

4 results

CVE-2026-56348MEDIUMn8n - Credential Exfiltration via Allowed HTTP Request Domains Bypass in Dynamic Node Parameters EndpointEPSS 0.3%CVE-2026-56351MEDIUMn8n - SQL Injection in MySQL, PostgreSQL, and Microsoft SQL NodesEPSS 0.2%CVE-2026-56357MEDIUMn8n - Webhook Forgery via Missing HMAC-SHA256 Signature Verification in GitHub Webhook TriggerEPSS 0.2%CVE-2026-56358MEDIUMn8n - Stored Cross-Site Scripting in Form Trigger NodeEPSS 0.1%