Lucene search
+L

2 matches found

OSV
OSV
added 2026/02/25 10:40 p.m.9 views

CVE-2026-27578 n8n Vulnerable to Stored XSS via Various Nodes

n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could inject arbitrary scripts into pages rendered by the n8n application using different techniques on various nodes Form Trigger...

8.5CVSS5.8AI score0.00185EPSS
SaveExploits0References6
vulnersOsv
vulnersOsv
added 2026/02/25 10:28 p.m.7 views

@regis-samurai/n8n (>=0.216.1 <=0.219.1), n8n-nodes-accelo (>=0.1.0 <=0.1.9) +11 more potentially affected by CVE-2026-27578 via n8n (>=0.138.0 <=0.93.0)

n8n NPM version =0.138.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2026-27578 Source advisory: OSV:GHSA-2P9H-RQJW-GM92...

8.5CVSS5.8AI score0.00185EPSS
SaveExploits0
Rows per page
Query Builder