n8n's Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task Runner

Impact The use of Buffer.allocUnsafe and Buffer.allocUnsafeSlow in the task runner allowed untrusted code to allocate uninitialized memory. Such uninitialized buffers could contain residual data from within the same Node.js process for example, data from prior requests, tasks, secrets, or tokens,...

CVE-2025-61917

n8n is an open source workflow automation platform. From version 1.65.0 to before 1.114.3, the use of Buffer.allocUnsafe and Buffer.allocUnsafeSlow in the task runner allowed untrusted code to allocate uninitialized memory. Such uninitialized buffers could contain residual data from within the sa...

CVE-2025-61917 n8n Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task Runner

n8n is an open source workflow automation platform. From version 1.65.0 to before 1.114.3, the use of Buffer.allocUnsafe and Buffer.allocUnsafeSlow in the task runner allowed untrusted code to allocate uninitialized memory. Such uninitialized buffers could contain residual data from within the sa...

CVE-2025-61917 n8n Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task Runner

n8n is an open source workflow automation platform. From version 1.65.0 to before 1.114.3, the use of Buffer.allocUnsafe and Buffer.allocUnsafeSlow in the task runner allowed untrusted code to allocate uninitialized memory. Such uninitialized buffers could contain residual data from within the sa...

EUVD-2025-206795

n8n is an open source workflow automation platform. From version 1.65.0 to before 1.114.3, the use of Buffer.allocUnsafe and Buffer.allocUnsafeSlow in the task runner allowed untrusted code to allocate uninitialized memory. Such uninitialized buffers could contain residual data from within the sa...

CVE-2025-61917

CVE-2025-61917 affects the open‑source workflow tool n8n (versions 1.65.0 through before 1.114.3). The root cause is the use of Buffer.allocUnsafe() / Buffer.allocUnsafeSlow() inside the Task Runner, allowing untrusted code to allocate uninitialized memory that may contain residual data (prior re...

CVE-2025-61917 n8n Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task Runner

n8n is an open source workflow automation platform. From version 1.65.0 to before 1.114.3, the use of Buffer.allocUnsafe and Buffer.allocUnsafeSlow in the task runner allowed untrusted code to allocate uninitialized memory. Such uninitialized buffers could contain residual data from within the sa...

CVE-2025-61917: Exposure of Resource to Wrong Sphere

n8n is an open source workflow automation platform. From version 1.65.0 to before 1.114.3, the use of Buffer.allocUnsafe and Buffer.allocUnsafeSlow in the task runner allowed untrusted code to allocate uninitialized memory. Such uninitialized buffers could contain residual data from within the sa...

PT-2026-5931

Name of the Vulnerable Software and Affected Versions n8n versions 1.65.0 through 1.114.2 Description n8n is a workflow automation platform. The use of Buffer.allocUnsafe and Buffer.allocUnsafeSlow in the task runner allowed untrusted code to allocate uninitialized memory. This could result in...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: k8sgateway, flux-source-watcher, prometheus-elasticsearch-exporter, apm-server-fips, external-secrets-operator, google-osconfig-agent, flux-kustomize-controller-fips, aws-flb-cloudwatch-fips, helm-diff-fips, aactl, reports-server, syncthing, minio, cilium-envoy,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sns-fips, cluster-api-ipam-provider-in-cluster, kubernetes-event-exporter-fips, crossplane-provider-aws-iam, livekit-server, step-kms-plugin, prometheus-elasticsearch-exporter, google-osconfig-agent, aws-flb-cloudwatch-fips,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sns-fips, cluster-api-ipam-provider-in-cluster, kubernetes-event-exporter-fips, crossplane-provider-aws-iam, livekit-server, step-kms-plugin, prometheus-elasticsearch-exporter, google-osconfig-agent, aws-flb-cloudwatch-fips,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sns-fips, cluster-api-ipam-provider-in-cluster, kubernetes-event-exporter-fips, crossplane-provider-aws-iam, livekit-server, step-kms-plugin, prometheus-elasticsearch-exporter, kubecolor, google-osconfig-agent, aws-flb-cloudwatch-fips, capsloc...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sns-fips, cluster-api-ipam-provider-in-cluster, kubernetes-event-exporter-fips, crossplane-provider-aws-iam, livekit-server, step-kms-plugin, prometheus-elasticsearch-exporter, kubecolor, google-osconfig-agent, aws-flb-cloudwatch-fips, capsloc...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: bank-vaults, jitsucom-bulker...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: beats, pluto-fips, k9s-fips, zitadel, boring-registry-fips, grafana-fips, kyverno, jitsucom-bulker, beats-fips, bank-vaults, docker-compose-fips, kyverno-notation-aws-fips, mattermost-fips, grafana, tkn-fips, rancher-security-scan, istio-fips, ratify-fips,...

Unsafe Deserialization in PHPT Code Coverage Handling

Overview A vulnerability has been discovered involving unsafe deserialization of code coverage data in PHPT test execution. The vulnerability exists in the cleanupForCoverage method, which deserializes code coverage files without validation, potentially allowing remote code execution if malicious...

CVE-2026-0863 Sandbox escape in n8n Python task runner allows for arbitrary code execution on the underlying host.

Using string formatting and exception handling, an attacker may bypass n8n's python-task-executor sandbox restrictions and run arbitrary unrestricted Python code in the underlying operating system. The vulnerability can be exploited via the Code block by an authenticated user with basic permissio...

CVE-2025-14235

Buffer overflow in XPS font fpgm data processing on Small Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. : Satera LBP670C Series/Satera MF750C Series firmware v06....

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the EnvoyExtensionPolicy resource. An attacker can execute arbitrary commands and access sensitive credentials by injecting malicious Lua scripts. This can lead to privilege escalation, theft of secrets, and...