EUVD-2025-29216

Malicious code in bioql PyPI...

CVE-2025-58177

n8n is an open source workflow automation platform. From 1.24.0 to before 1.107.0, there is a stored cross-site scripting XSS vulnerability in @n8n/n8n-nodes-langchain.chatTrigger. An authorized user can configure the LangChain Chat Trigger node with malicious JavaScript in the initialMessages...

CVE-2025-58177

CVE-2025-58177 affects n8n (open source workflow automation platform) through a stored XSS in the LangChain Chat Trigger node (@n8n/n8n-nodes-langchain.chatTrigger) from version 1.24.0 up to before 1.107.0. An authorized user could inject malicious JavaScript into the initialMessages field and, w...

PT-2025-37731

Name of the Vulnerable Software and Affected Versions: n8n versions 1.24.0 through 1.106.0 Description: n8n is a workflow automation platform. A stored cross-site scripting XSS vulnerability exists in the @n8n/n8n-nodes-langchain.chatTrigger node. An authorized user can configure the LangChain Ch...

n8n 跨站脚本漏洞

n8n is a scalable workflow automation tool from n8n open source. A cross-site scripting vulnerability exists in n8n version 1.24.0 through versions prior to 1.107.0, which stems from the presence of stored cross-site scripting in the initialMessages field, which could lead to a phishing attack or...

Exploit for CVE-2024-25175

CVE-2024-25175 Reflected XSS via HTTP Response Splitting...