https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T16:31:32.093668+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-59209 CVE-2026-59209 — n8n: Shared Credential Header Leak via HTTP Request Pagination Expression 2026-10-06T16:31:32.109131+00:00

Affected: n8n-io n8n

n8n is an open source workflow automation platform. Prior to 1.123.61, 2.27.4, and, 2.28.1, an authenticated member with use-only editor access to a shared workflow could read credential-populated headers exposed via the $request object inside an HTTP Request node's pagination expression and exfiltrate the secret through item data. This issue is fixed in versions 1.123.61, 2.27.4, and 2.28.1.