@0xlimao/n8n-nodes-ethereum (>=1.0.0, <=1.0.1), @aayshian/n8n-aisensy-ay19 (0.0.1) +138 more potentially affected by CVE-2026-54314 via @n8n/config (>=2.0.0-rc.0, <=2.23.0)

@n8n/config NPM version =2.0.0-rc.0, =1.0.0, =0.0.1, =1.0.0, =0.0.1, =0.0.1, =0.3.6, =0.1.1, =0.1.0, =1.0.0, =0.1.4, =0.3.4 and more Source cves: CVE-2026-54314 Source advisory: SNYK:JS-N8NCONFIG-17430992...

@n8n/ai-workflow-builder (>=1.0.2-exp.0, <=1.1.1), @n8n/backend-common (>=1.0.2, <=1.1.1) +6 more potentially affected by CVE-2026-27498 via @n8n/config (>=2.0.0, <=2.0.1)

@n8n/config NPM version =2.0.0, =1.0.2-exp.0, =1.0.2, =1.0.3, =1.0.3-exp.0, =2.0.2, =2.0.2, =0.1.0, =0.11.0 Source cves: CVE-2026-27498 Source advisory: SNYK:JS-N8NCONFIG-15357607...

@klardaten/n8n-nodes-datevconnect (>=1.0.1, <=1.0.2), @n8n/ai-workflow-builder (>=0.2.0, <=0.33.2) +20 more potentially affected by CVE-2026-27498 via @n8n/config (>=1.15.0, <=1.65.1)

@n8n/config NPM version =1.15.0, =1.0.1, =0.2.0, =0.33.0, =0.26.0, =0.34.0, =1.3.0, =0.23.8, =1.51.0, =1.65.0, =1.65.0, =1.0.1, =0.3.3, =0.1.3, =0.2.0, =0.2.0, =4.1.23 and more Source cves: CVE-2026-27498 Source advisory: SNYK:JS-N8NCONFIG-15357607...

Exposed Dangerous Method or Function

Overview Affected versions of this package are vulnerable to Exposed Dangerous Method or Function in the Code node when running in legacy JavaScript execution mode. An attacker can access or modify files on the host system with the same privileges as the application process by invoking internal...

@n8n/ai-workflow-builder (>=1.0.0-rc.0, <=1.0.1), @n8n/backend-common (>=1.0.0-rc.0, <=1.0.1) +5 more potentially affected by CVE-2025-68697 via @n8n/config (>=2.0.0-rc.0, <=2.0.0-rc.1)

@n8n/config NPM version =2.0.0-rc.0, =1.0.0-rc.0, =1.0.0-rc.0, =1.0.0-rc.0, =1.0.0-rc.0, =2.0.0-rc.0, =2.0.0-rc.0, =2.0.0-rc.0, =2.0.1 Source cves: CVE-2025-68697 Source advisory: SNYK:JS-N8NCONFIG-14723278...

@klardaten/n8n-nodes-datevconnect (>=1.0.1, <=1.0.2), @n8n/ai-workflow-builder (>=0.2.0, <=0.29.0) +17 more potentially affected by CVE-2025-65964 via @n8n/config (>=1.15.0, <=1.61.0)

@n8n/config NPM version =1.15.0, =1.0.1, =0.2.0, =1.3.0, =0.23.8, =1.51.0, =1.65.0, =1.65.0, =1.0.1, =0.3.3, =0.1.3, =0.2.0, =0.2.0, =0.1.0, =0.1.1 - n8n-nodes-tiny-request 0.1.0 and more Source cves: CVE-2025-65964 Source advisory: MEND:CVE-2025-65964...

@n8n/ai-workflow-builder (0.30.0), @n8n/task-runner (1.56.0) +2 more potentially affected by CVE-2025-65964 via @n8n/config (1.62.0)

@n8n/config NPM version 1.62.0 is affected by a known vulnerability. The following packages have a transitive dependency on @n8n/config and may be impacted: - @n8n/ai-workflow-builder 0.30.0 - @n8n/task-runner 1.56.0 - n8n-core =1.119.0, =1.119.1 - n8n-node-dev 1.118.0 Source cves: CVE-2025-65964...

@klardaten/n8n-nodes-datevconnect (>=1.0.1, <=1.0.2), @n8n/ai-workflow-builder (>=0.2.0, <=0.28.0) +17 more potentially affected by CVE-2025-65964 via @n8n/config (>=1.15.0, <=1.60.0)

@n8n/config NPM version =1.15.0, =1.0.1, =0.2.0, =1.3.0, =0.23.8, =1.51.0, =1.65.0, =1.65.0, =1.0.1, =0.3.3, =0.1.3, =0.2.0, =0.2.0, =0.1.0, =0.1.1 - n8n-nodes-tiny-request 0.1.0 and more Source cves: CVE-2025-65964 Source advisory: SNYK:JS-N8NCONFIG-14222433...

@n8n/ai-workflow-builder (1.0.0-rc.0), @n8n/backend-common (1.0.0-rc.0) +5 more potentially affected by CVE-2025-68668 via @n8n/config (2.0.0-rc.0)

@n8n/config NPM version 2.0.0-rc.0 is affected by a known vulnerability. The following packages have a transitive dependency on @n8n/config and may be impacted: - @n8n/ai-workflow-builder 1.0.0-rc.0 - @n8n/backend-common 1.0.0-rc.0 - @n8n/backend-test-utils 1.0.0-rc.0 - @n8n/db 1.0.0-rc.0 -...