Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/16 11:1 p.m.15 views

n8n: Denial of Service via ZIP decompression in webhook workflow

Impact The Compression node's Decompress operation expanded attacker-controlled archives into memory without enforcing limits on decompressed output size. An unauthenticated attacker could send a small compressed archive to a public webhook workflow using this node, causing the n8n process to...

7.5CVSS5.4AI score0.00375EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder