1 matches found
GHSA-XWX6-JJHV-84P8 n8n: Prototype Pollution via Dot-Notation Field Names Leads To Instance-Wide Denial of Service
Impact The Edit Fields Set node assigned output fields through a dot-notation path setter without restricting the field name, so an authenticated user could name a field after an inherited built-in method path and corrupt a shared global in the main Node.js process. Because that global was used o...
7.1CVSS5.8AI score0.00313EPSS
SaveExploits0References6
20