https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:07:29.550062+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-380234 EUVD-2026-380234 2026-10-03T07:07:29.656330+00:00 EUVD-2026-380234 https://cve.radiocsirt.org/vuln/fkie_cve-2026-103249 fkie_cve-2026-103249 2026-10-03T07:07:29.656376+00:00

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a stored DOM cross-site scripting vulnerability in Resource Locator parameter dropdown link handling. Workflow authors can inject malicious script URLs that execute arbitrary JavaScript in the editor origin when other users open the node dropdown and click the external-link icon, with the payload persisting across workflow imports and shares.

 https://cve.radiocsirt.org/vuln/ghsa-7g6m-6jgv-fqm4 GHSA-7g6m-6jgv-fqm4 2026-10-03T07:07:29.656414+00:00

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a stored DOM cross-site scripting vulnerability in Resource Locator parameter dropdown link handling. Workflow authors can inject malicious script URLs that execute arbitrary JavaScript in the editor origin when other users open the node dropdown and click the external-link icon, with the payload persisting across workflow imports and shares.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3393 WID-SEC-W-2026-3393 — n8n: Mehrere Schwachstellen 2026-10-03T07:07:29.656432+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder Code auszuführen.