https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 05:51:51 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-65591 <p>n8n contains a sanitizer bypass vulnerability in the legacy expression evaluator&#39;s computed-member handler. An authenticated user with workflow create or modify permissions can craft a malicious expression to bypass the sanitizer and achieve host-level code execution as the n8n process. The legacy expression engine is the default in affected versions. Fixed in n8n 1.123.64, 2.29.8, and 2.30.1.</p> <p>n8n contains a sanitizer bypass vulnerability in the legacy expression evaluator&#39;s computed-member handler. An authenticated user with workflow create or modify permissions can craft a malicious expression to bypass the sanitizer and achieve host-level code execution as the n8n process. The legacy expression engine is the default in affected versions. Fixed in n8n 1.123.64, 2.29.8, and 2.30.1.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-65591 https://vulnerability.circl.lu/vuln/ghsa-m7jc-p4hf-xhwq <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> npm: n8n</p> <p>## Duplicate Advisory</p> <p>This advisory has been withdrawn because it is a duplicate of GHSA-pm35-fqvh-cq5g. This link is maintained to preserve external references.</p> <p>## Original Description n8n contains a sanitizer bypass vulnerability in the legacy expression evaluator&#39;s computed-member handler. An authenticated user with workflow create or modify permissions can craft a malicious expression to bypass the sanitizer and achieve host-level code execution as the n8n process. The legacy expression engine is the default in affected versions. Fixed in n8n 1.123.64, 2.29.8, and 2.30.1.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> npm: n8n</p> <p>## Duplicate Advisory</p> <p>This advisory has been withdrawn because it is a duplicate of GHSA-pm35-fqvh-cq5g. This link is maintained to preserve external references.</p> <p>## Original Description n8n contains a sanitizer bypass vulnerability in the legacy expression evaluator&#39;s computed-member handler. An authenticated user with workflow create or modify permissions can craft a malicious expression to bypass the sanitizer and achieve host-level code execution as the n8n process. The legacy expression engine is the default in affected versions. Fixed in n8n 1.123.64, 2.29.8, and 2.30.1.</p> https://vulnerability.circl.lu/vuln/ghsa-m7jc-p4hf-xhwq