@n8n/backend-test-utils (>=1.0.0-rc.0, <=1.28.0) potentially affected by CVE-2026-59206 via @n8n/db (>=1.0.0, <=1.28.0)

@n8n/db NPM version =1.0.0, =1.0.0-rc.0, =1.28.0 Source cves: CVE-2026-59206 Source advisory: SNYK:JS-N8NDB-17954287...

CVE-2026-59206

creationtimestamp| type| source ---|---|--- 2026-07-09 15:59:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7yuuaqaf2g...

CVE-2026-59206

n8n is affected by a prototype pollution vulnerability in which an authenticated user with the default workflow:create permission could pollute Object.prototype via a crafted workflow saved, updated, or imported through the workflow API. This corruption could cause unauthenticated requests to be ...