← All credits
tr4ce-ju
8 vulnerability records and advisories credit this contributor.
CVE-2026-110853
n8n before 1.123.83 Authorization Bypass via Execute Sub-workflow Inline JSON
CVE-2026-110845
n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log Operation
CVE-2026-103254
n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via Resume URL Generation
CVE-2026-103249
n8n before 1.123.80, 2.39.6, and 2.40.1 Stored DOM XSS via Resource Locator
CVE-2026-103260
n8n before 2.39.6 and 2.40.x before 2.40.1 Approval Bypass via Send and Wait Node
CVE-2026-77071
n8n before 1.123.69 PostgREST Filter Injection via Supabase
CVE-2026-77070
n8n before 1.123.69 NoSQL Injection via MongoDB Node
CVE-2026-56358
n8n - Stored Cross-Site Scripting in Form Trigger Node