n8n Credential Management XSS Vulnerability Disclosure (No CVE)

github.com 2026-07-08查看中文 →

Security AdvisoryMediumn8n

Affected:

n8n < 2.8.0
n8n < 2.6.4

Fixed in:

n8n >= 2.8.0
n8n >= 2.6.4

Referenced CVEs: CVE-2026-56359 · 5.4

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Easyappointments <=1.5.2 CalDAV SSRF in connect_to_server() 2026-07-15 DBI::ProfileData Unbounded Path Index Memory-Exhaustion DoS (CVE-2025-6001) 2026-07-15 MongoDB JS Query Engine Prototype Pollution Vulnerability Fix Guide 2026-07-15 @svgdotjs/svg.js Prototype Pollution via EventTarget.on() 2026-07-15 DBI DBD::File Symlink Arbitrary File Read/Write via Incomplete Fix (CVE-2014-10401/10402) 2026-07-15

Offline Archive

Offline screenshot & PDF are Pro-exclusive