AIKIDO-2024-10260

n8n is vulnerable to Cross-site Scripting (XSS)

Cross-site Scripting (XSS) Pre-CVE Published Sep 12, 2024

Low Risk

1.51.0 - 1.58.1

Fixed in 1.59.0

Are you affected? Scan for Free

TL;DR

Affected versions of the package are vulnerable to Cross-site Scripting (XSS) in the editor.

You are affected if you are using a version that falls within the vulnerable range.

n8n is vulnerable to Cross-site Scripting (XSS) in versions 1.51.0 - 1.58.1.

Upgrade the n8n library to the patch version.

Low Risk

1.51.0 - 1.58.1

Fixed in 1.59.0

Are you affected? Scan for Free

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Company

Resources

Industries

Use Cases

Compare

Legal

Connect

Security

Stay up to date with all updates

I consent to receiving marketing communications based on Aikido’s Privacy Policy.

Keizer Karelstraat 15, 9000, Ghent, Belgium

95 Third St, 2nd Fl, San Francisco, CA 94103, US

Unit 6.15 Runway East 18 18 Crucifix Ln, London SE1 3JW UK

Ghent, Belgium | San Francisco, US