Lucene search
+L

621 matches found

OSV
OSV
added 2026/07/22 10:13 p.m.7 views

GHSA-HX4H-VR3M-45VH n8n: Prototype Pollution via VM Expression Engine Sandbox Escape Leads to Denial of Service

Impact An authenticated user able to create or edit a workflow expression could abuse the expression engine's array-element access to obtain a reference to a host built-in and pollute its prototype in the main n8n process, leading to a denial of service. Both self-hosted and cloud instances runni...

6.1CVSS5.4AI score
SaveExploits0References6
Rows per page
Query Builder