N8n Security Vulnerabilities and Issues — N8n CVE List

Lucene search

N8nN8n

4 matches found

CVE•added 2023/05/10 3:15 p.m.•135 views

CVE-2023-27564

The n8n package 0.218.0 for Node.js allows Information Disclosure.

7.5CVSS7.5AI score0.02763EPSS

CVE•added 2025/04/29 5:15 a.m.•62 views

CVE-2025-46343

n8n is a workflow automation platform. Prior to version 1.90.0, n8n is vulnerable to stored cross-site scripting (XSS) through the attachments view endpoint. n8n workflows can store and serve binary files, which are accessible to authenticated users. However, there is no restriction on the MIME typ...

5.4CVSS4.7AI score0.00031EPSS

CVE•added 2023/05/10 3:15 p.m.•61 views

CVE-2023-27563

The n8n package 0.218.0 for Node.js allows Escalation of Privileges.

8.8CVSS8.7AI score0.00253EPSS

CVE•added 2023/05/10 3:15 p.m.•51 views

CVE-2023-27562

The n8n package 0.218.0 for Node.js allows Directory Traversal.

6.5CVSS6.5AI score0.01106EPSS