Lucene search
+L

1 matches found

OSV
OSV
added 2026/07/22 10:12 p.m.9 views

GHSA-XWX6-JJHV-84P8 n8n: Prototype Pollution via Dot-Notation Field Names Leads To Instance-Wide Denial of Service

Impact The Edit Fields Set node assigned output fields through a dot-notation path setter without restricting the field name, so an authenticated user could name a field after an inherited built-in method path and corrupt a shared global in the main Node.js process. Because that global was used o...

7.1CVSS5.8AI score0.00313EPSS
SaveExploits0References6
Rows per page
Query Builder