GHSA-hx4h-vr3m-45vh: n8n: Prototype Pollution via VM Expression Engine Sandbox Escape Leads to Denial of Service
An authenticated user able to create or edit a workflow expression could abuse the expression engine’s array-element access to obtain a reference to a host built-in and pollute its prototype in the main n8n process, leading to a denial of service.
Both self-hosted and cloud instances running the VM expression engine are affected.
References
- github.com/advisories/GHSA-hx4h-vr3m-45vh
- github.com/n8n-io/n8n/commit/f69dfc6dd2178a14ea1624d2e1d403c2e755042f
- github.com/n8n-io/n8n/releases/tag/n8n@1.123.67
- github.com/n8n-io/n8n/releases/tag/n8n@2.31.5
- github.com/n8n-io/n8n/releases/tag/n8n@2.32.1
- github.com/n8n-io/n8n/security/advisories/GHSA-hx4h-vr3m-45vh
Code Behaviors & Features
Detect and mitigate GHSA-hx4h-vr3m-45vh with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →