ROOT-APP-NPM-CVE-2026-54313 CVE-2026-54313 in @rootio/n8n - Patched by Root

Root has patched CVE-2026-54313 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...

CVE-2026-54313

n8n: NoSQL Injection in MongoDB Node Find And Replace Operation (CVE-2026-54313). Affected software: n8n open-source workflow automation platform. Vulnerable component: MongoDB node’s Find And Replace operation prior to version 2.24.0. Root cause: An authenticated user with workflow edit access c...