https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-15T07:28:38.862467+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/ghsa-rq78-r89m-86j4 GHSA-rq78-r89m-86j4 2026-11-15T07:28:38.863639+00:00

n8n before 2.38.0 and 3.x before 3.0.1 contains a missing authentication vulnerability in the Asana Trigger that accepts a new webhook verification secret from any request carrying an X-Hook-Secret header. Unauthenticated attackers who know the webhook URL can replace the secret, send forged Asana events that pass signature verification, and trigger workflows with attacker-controlled data while genuine deliveries are rejected.

 https://db.gcve.eu/vuln/wid-sec-w-2026-4192 WID-SEC-W-2026-4192 — n8n: Mehrere Schwachstellen 2026-11-15T07:28:38.863687+00:00

Ein Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen SQL-Injection Angriff durchzuführen und um Sicherheitsvorkehrungen zu umgehen.