Lucene search
+L

1 matches found

OSV
OSV
added 2026/06/16 11:1 p.m.9 views

GHSA-JQPW-QWW5-CJ4C n8n: Denial of Service via ZIP decompression in webhook workflow

Impact The Compression node's Decompress operation expanded attacker-controlled archives into memory without enforcing limits on decompressed output size. An unauthenticated attacker could send a small compressed archive to a public webhook workflow using this node, causing the n8n process to...

6.3CVSS5.4AI score0.00375EPSS
SaveExploits0References3
Rows per page
Query Builder