https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-15T07:27:57.955440+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/ghsa-3r2g-799p-7565 GHSA-3r2g-799p-7565 2026-11-15T07:27:57.956575+00:00

n8n before 2.46.1 contains a credential exposure vulnerability that forwards Authorization headers and basic auth credentials on cross-origin redirects because sendCredentialsOnCrossOriginRedirect defaults to true. Attackers controlling a redirect target or an expression-fed URL in credential-using nodes can capture stored workflow credentials sent to their endpoint.

 https://db.gcve.eu/vuln/wid-sec-w-2026-4192 WID-SEC-W-2026-4192 — n8n: Mehrere Schwachstellen 2026-11-15T07:27:57.956625+00:00

Ein Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen SQL-Injection Angriff durchzuführen und um Sicherheitsvorkehrungen zu umgehen.