https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:43:51.829530+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-331649 EUVD-2026-331649 2026-10-03T06:43:51.875813+00:00 EUVD-2026-331649 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56356 fkie_cve-2026-56356 2026-10-03T06:43:51.875847+00:00

n8n contains a stored cross-site scripting vulnerability in the Chat Trigger node's Custom CSS field due to a misconfiguration of the sanitize-html library. Affected releases are those before 1.123.27, the 2.0.0 through 2.13.2 line, and 2.14.0 (fixed in 1.123.27, 2.13.3, and 2.14.1). An authenticated user with permission to create or modify workflows can inject JavaScript that bypasses sanitization, resulting in stored XSS against any user who visits the public chat page.

 https://cve.radiocsirt.org/vuln/ghsa-99wx-hwrx-8g4w GHSA-99wx-hwrx-8g4w 2026-10-03T06:43:51.875881+00:00

n8n contains a stored cross-site scripting vulnerability in the Chat Trigger node's Custom CSS field due to a misconfiguration of the sanitize-html library. Affected releases are those before 1.123.27, the 2.0.0 through 2.13.2 line, and 2.14.0 (fixed in 1.123.27, 2.13.3, and 2.14.1). An authenticated user with permission to create or modify workflows can inject JavaScript that bypasses sanitization, resulting in stored XSS against any user who visits the public chat page.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0877 WID-SEC-W-2026-0877 — n8n: Mehrere Schwachstellen 2026-10-03T06:43:51.875901+00:00

Ein Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um erweiterte Privilegien, einschließlich Administratorrechte, zu erlangen, um beliebigen Code auszuführen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder Cross-Site- und Man-in-the-Middle-Angriffe durchzuführen.