The vulnerability of the Buffer.allocUnsafe() and Buffer.allocUnsafeSlow() functions on the n8n platform, which allow attackers to disclose protected information.

The vulnerability of the Buffer.allocUnsafe and Buffer.allocUnsafeSlow functions in the n8n automation platform relates to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

CVE-2025-61917 n8n Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task Runner

n8n is an open source workflow automation platform. From version 1.65.0 to before 1.114.3, the use of Buffer.allocUnsafe and Buffer.allocUnsafeSlow in the task runner allowed untrusted code to allocate uninitialized memory. Such uninitialized buffers could contain residual data from within the sa...