GHSA-65XW-2V52-JHXC n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter

Impact The endpoint /rest/active-workflows returned every active workflow ID on the instance to any member, regardless of sharing, and workflow activation, deactivation and publication push events were broadcast to every connected client, carrying workflow IDs, version IDs and activation-error...