n8n
2.47.7Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.
- Maintenance
- Active5731 commits in 3 months · bus factor 9
- License
- Sustainable Use LicenseSource-available · not OSI-approved · changed in 2022
- Security
- 30 advisories7 high, 23 medium · Scorecard 7.1/10
- Supported versions
- No scheduleendoflife.date does not track this project
211k stars · 61.5k forks · 1.2k open issues · last release 2 days ago · data checked 5 hours ago
Security advisories
All advisories on GitHubThe 30 most recent advisories published by the maintainers: 7 high, 23 medium. Check the patched version against the one you run.
- mediumGHSA-h59h-rf6m-7jp5Nov 13, 2026Workflow Activation Allows Trigger Nodes to Use Credentials the Publisher Cannot Access
- Affected
- < 1.123.96; < 3.2.2; < 2.48.3; < 2.47.6
- Patched in
- >= 1.123.96; >= 3.2.2; >= 2.48.3; >= 2.47.6
- mediumGHSA-g333-hr44-g82pNov 13, 2026AWS Bedrock Nodes Skip SSRF Protection for Custom Runtime Endpoints
- Affected
- < 2.48.3; < 2.47.6; < 3.2.2
- Patched in
- >= 2.48.3; >= 2.47.6; >= 3.2.2
- mediumGHSA-c772-hjfp-gfc2Nov 13, 2026Integration Nodes Send Authenticated Requests to Unintended API Endpoints
- Affected
- < 1.123.96; < 3.2.2; < 2.48.3; < 2.47.6
- Patched in
- >= 1.123.96; >= 3.2.2; >= 2.48.3; >= 2.47.6
- highGHSA-q8rc-7m84-mfvjNov 13, 2026Custom Instance Role with User Management Permissions Gives Control of the Owner Account
- Affected
- < 2.48.3; < 2.47.6; < 3.2.2
- Patched in
- >= 2.48.3; >= 2.47.6; >= 3.2.2
- highGHSA-m7qq-gm3x-v79gNov 13, 2026Invitation Acceptance Endpoint Lets a Member Take Over Pending User Accounts
- Affected
- < 1.123.90; < 2.14.0
- Patched in
- >= 1.123.90; >= 2.14.0
- mediumGHSA-jmcg-c7p5-q69gOct 28, 2026NocoDB Node Sends Its API Token to Attacker-Chosen Hosts When Downloading Attachments
- Affected
- < 1.123.89; < 2.46.1; < 2.45.5; < 3.0.1
- Patched in
- >= 1.123.89; >= 2.46.1; >= 2.45.5; >= 3.0.1
- mediumGHSA-prmc-fg87-r4ghOct 28, 2026Credential-Using Nodes Forward Authentication Headers on Cross-Origin Redirects
- Affected
- < 2.46.1; < 2.45.5; < 3.0.1
- Patched in
- >= 2.46.1; >= 2.45.5; >= 3.0.1
- mediumGHSA-2x68-96jw-5r6cOct 28, 2026SQL Injection via Metadata Filter Key in the Vector Store (OracleDB) Node
- Affected
- < 2.44.1; < 2.43.5; < 3.0.1
- Patched in
- >= 2.44.1; >= 2.43.5; >= 3.0.1
- mediumGHSA-mx4r-96jx-v278Oct 28, 2026Asana Trigger: Unauthenticated Request Can Reset Webhook Verification Secret
- Affected
- < 2.38.0; < 3.0.1
- Patched in
- >= 2.38.0; >= 3.0.1
- mediumGHSA-rc3w-8jc8-7x3wOct 28, 2026Open Redirect via MCP OAuth Dynamic Client Registration
- Affected
- < 1.123.89; < 2.46.1; < 2.45.5; < 3.0.1
- Patched in
- >= 1.123.89; >= 2.46.1; >= 2.45.5; >= 3.0.1
- mediumGHSA-426f-xmcv-g8pgOct 28, 2026OAuth Account Hijack in the End-User Credential Connect Flow via Unauthenticated Callback
- Affected
- < 2.46.1; < 2.45.5; < 3.0.1
- Patched in
- >= 2.46.1; >= 2.45.5; >= 3.0.1
- mediumGHSA-4v22-g448-h4rgOct 28, 2026MongoDB Node Update Operations Can Modify Unintended Documents
- Affected
- < 1.123.89; < 2.46.1; < 2.45.5; < 3.0.1
- Patched in
- >= 1.123.89; >= 2.46.1; >= 2.45.5; >= 3.0.1
- mediumGHSA-pwj5-wwm6-g83jOct 28, 2026Chat Trigger Embedded Chat Does Not Enforce n8n User Auth on All Requests
- Affected
- < 1.123.89; < 2.46.1; < 2.45.5; < 3.0.1
- Patched in
- >= 1.123.89; >= 2.46.1; >= 2.45.5; >= 3.0.1
- mediumGHSA-9qx8-fhxv-w794Oct 28, 2026Browser Use Upload Tool Reads Arbitrary Files from the n8n Server
- Affected
- < 2.46.1; < 2.45.5; < 3.0.1
- Patched in
- >= 2.46.1; >= 2.45.5; >= 3.0.1
- highGHSA-gx3v-3x3v-f8r5Oct 28, 2026Insufficient Isolation in Workflow Expression Evaluation
- Affected
- < 1.123.89; < 2.46.1; < 2.45.5; < 3.0.1
- Patched in
- >= 1.123.89; >= 2.46.1; >= 2.45.5; >= 3.0.1
- highGHSA-f2cw-9483-7vcpOct 28, 2026Insecure GraphicsMagick Configuration
- Affected
- < 1.123.89; < 2.46.1; < 2.45.5; < 3.0.1
- Patched in
- >= 1.123.89; >= 2.46.1; >= 2.45.5; >= 3.0.1
- highGHSA-9p7v-45m2-wxgjOct 28, 2026Deprecated Code Nodes Allow Code Execution in the n8n Main Process
- Affected
- < 2.43.3; < 2.42.6; < 3.0.1
- Patched in
- >= 2.43.3; >= 2.42.6; >= 3.0.1
- mediumGHSA-mgpr-56r4-5c67Oct 14, 2026OData $filter Injection in Microsoft Outlook and SharePoint v1 Nodes
- Affected
- < 1.123.85; < 2.44.1; < 2.43.5
- Patched in
- >= 1.123.85; >= 2.44.1; >= 2.43.5
- mediumGHSA-8vrr-mgc5-jg55Oct 14, 2026Credential Permission Check Skips Inline Sub-Workflow Nodes With a Non-Boolean Disabled Value
- Affected
- < 1.123.85; < 2.44.1; < 2.43.5
- Patched in
- >= 1.123.85; >= 2.44.1; >= 2.43.5
- mediumGHSA-crfj-5wv6-8v86Oct 14, 2026SeaTable Trigger Node Stores the API Token in Failed Poll Execution Data
- Affected
- < 1.123.85; < 2.44.1; < 2.43.5
- Patched in
- >= 1.123.85; >= 2.44.1; >= 2.43.5
- mediumGHSA-8crx-5h96-q72qOct 14, 2026Execute Sub-workflow `source: url` / `source: localFile` Bypasses Shared-Workflow Credential Guard
- Affected
- < 1.123.85; < 2.44.1; < 2.43.5
- Patched in
- >= 1.123.85; >= 2.44.1; >= 2.43.5
- mediumGHSA-v9cx-v88r-42vwOct 14, 2026Credential Permission Check Skips Nodes Whose Default Parameters Are Omitted
- Affected
- < 1.123.85; < 2.44.1; < 2.43.5
- Patched in
- >= 1.123.85; >= 2.44.1; >= 2.43.5
- mediumGHSA-pcr3-v5vr-qppfOct 14, 2026Per-User Credential Theft via Error-Workflow Execution Context Inheritance
- Affected
- < 2.42.2; < 2.41.5
- Patched in
- >= 2.42.2; >= 2.41.5
- mediumGHSA-cwm2-vhf5-27q9Oct 14, 2026Local Gateway Deep-Link Connect Silently Re-pairs to Attacker-Controlled Instance
- Affected
- < 2.42.1; < 2.41.4
- Patched in
- >= 2.42.1; >= 2.41.4
- mediumGHSA-3c3p-5959-3ghrOct 14, 2026Unauthenticated Slack Token Exfiltration and Full-Response SSRF via the Slack Trigger Webhook
- Affected
- < 1.123.83; < 2.42.1; < 2.41.4
- Patched in
- >= 1.123.83; >= 2.42.1; >= 2.41.4
- mediumGHSA-43v8-hjhm-chjpOct 14, 2026Chat Hub: chat-only users can register tool types the product already tries to sandbox
- Affected
- < 1.123.85; < 2.44.1; < 2.43.5
- Patched in
- >= 1.123.85; >= 2.44.1; >= 2.43.5
- mediumGHSA-65mv-v8rp-54wcOct 14, 2026Quick Base Node Allows Filter Injection Through the Where Parameter
- Affected
- < 1.123.85; < 2.44.1; < 2.43.5
- Patched in
- >= 1.123.85; >= 2.44.1; >= 2.43.5
- mediumGHSA-qmvv-q3c9-wpp7Oct 14, 2026Credential Secrets Exposed in Execution Error Data of Several Nodes
- Affected
- < 1.123.85; < 2.44.1; < 2.43.5
- Patched in
- >= 1.123.85; >= 2.44.1; >= 2.43.5
- highGHSA-m7gv-mpg5-7c9vOct 14, 2026Read/Write Files Node Glob Pattern Causes Unbounded Event-Loop Block
- Affected
- < 1.123.85; < 2.44.1; < 2.43.5
- Patched in
- >= 1.123.85; >= 2.44.1; >= 2.43.5
- highGHSA-wvjj-qg37-pv73Oct 14, 2026Crafted Workflow ID Gives Access to Data Tables in Other Projects
- Affected
- < 2.44.1; < 2.43.5
- Patched in
- >= 2.44.1; >= 2.43.5