n8n 2.42.3 → 2.45.5
15 releases · 0 breaking changes · 22 security fixes · 20 advisories fixed
22security0breaking0deprecated8feature34fix
Vulnerabilities fixed by this upgrade
- 6.3 GHSA-jmcg-c7p5-q69g NocoDB Node Sends Its API Token to Attacker-Chosen Hosts When Downloading Attachments
- 6.3 GHSA-prmc-fg87-r4gh Credential-Using Nodes Forward Authentication Headers on Cross-Origin Redirects
- 5.1 GHSA-rc3w-8jc8-7x3w Open Redirect via MCP OAuth Dynamic Client Registration
- 4.8 GHSA-426f-xmcv-g8pg OAuth Account Hijack in the End-User Credential Connect Flow via Unauthenticated Callback
- 5.3 GHSA-4v22-g448-h4rg MongoDB Node Update Operations Can Modify Unintended Documents
- 6.3 GHSA-pwj5-wwm6-g83j Chat Trigger Embedded Chat Does Not Enforce n8n User Auth on All Requests
- 6.0 GHSA-9qx8-fhxv-w794 Browser Use Upload Tool Reads Arbitrary Files from the n8n Server
- 7.7 GHSA-gx3v-3x3v-f8r5 Insufficient Isolation in Workflow Expression Evaluation
- 7.7 GHSA-f2cw-9483-7vcp Insecure GraphicsMagick Configuration
- 5.3 GHSA-mgpr-56r4-5c67 OData $filter Injection in Microsoft Outlook and SharePoint v1 Nodes
- 5.1 GHSA-8vrr-mgc5-jg55 Credential Permission Check Skips Inline Sub-Workflow Nodes With a Non-Boolean Disabled Value
- 5.3 GHSA-crfj-5wv6-8v86 SeaTable Trigger Node Stores the API Token in Failed Poll Execution Data
- 5.1 GHSA-8crx-5h96-q72q Execute Sub-workflow `source: url` / `source: localFile` Bypasses Shared-Workflow Credential Guard
- 5.1 GHSA-v9cx-v88r-42vw Credential Permission Check Skips Nodes Whose Default Parameters Are Omitted
- 5.3 GHSA-43v8-hjhm-chjp Chat Hub: chat-only users can register tool types the product already tries to sandbox
- 5.3 GHSA-65mv-v8rp-54wc Quick Base Node Allows Filter Injection Through the Where Parameter
- 5.3 GHSA-qmvv-q3c9-wpp7 Credential Secrets Exposed in Execution Error Data of Several Nodes
- 7.1 GHSA-m7gv-mpg5-7c9v Read/Write Files Node Glob Pattern Causes Unbounded Event-Loop Block
- 7.2 GHSA-wvjj-qg37-pv73 Crafted Workflow ID Gives Access to Data Tables in Other Projects
- 8.4 GHSA-mp7q-23hg-35cf Webhook Responses Without the Sandbox Policy Allow Stored Cross-Site Scripting
Breaking changes
None in the release notes.
Security changes
- security Fixes GHSA-gx3v-3x3v-f8r5: Insufficient Isolation in Workflow Expression Evaluation in 2.45.5
- security Fixes GHSA-f2cw-9483-7vcp: Insecure GraphicsMagick Configuration in 2.45.5
- security Fixes GHSA-jmcg-c7p5-q69g: NocoDB Node Sends Its API Token to Attacker-Chosen Hosts When Downloading Attachments in 2.45.5
- security Fixes GHSA-prmc-fg87-r4gh: Credential-Using Nodes Forward Authentication Headers on Cross-Origin Redirects in 2.45.5
- security Fixes GHSA-pwj5-wwm6-g83j: Chat Trigger Embedded Chat Does Not Enforce n8n User Auth on All Requests in 2.45.5
- security Fixes GHSA-9qx8-fhxv-w794: Browser Use Upload Tool Reads Arbitrary Files from the n8n Server in 2.45.5
- security Fixes GHSA-4v22-g448-h4rg: MongoDB Node Update Operations Can Modify Unintended Documents in 2.45.5
- security Fixes GHSA-rc3w-8jc8-7x3w: Open Redirect via MCP OAuth Dynamic Client Registration in 2.45.5
- security Fixes GHSA-426f-xmcv-g8pg: OAuth Account Hijack in the End-User Credential Connect Flow via Unauthenticated Callback in 2.45.5
- security Fixes GHSA-mp7q-23hg-35cf: Webhook Responses Without the Sandbox Policy Allow Stored Cross-Site Scripting in 2.43.5
- security Fixes GHSA-wvjj-qg37-pv73: Crafted Workflow ID Gives Access to Data Tables in Other Projects in 2.43.5
- security Fixes GHSA-m7gv-mpg5-7c9v: Read/Write Files Node Glob Pattern Causes Unbounded Event-Loop Block in 2.43.5
- security Fixes GHSA-mgpr-56r4-5c67: OData $filter Injection in Microsoft Outlook and SharePoint v1 Nodes in 2.43.5
- security Fixes GHSA-crfj-5wv6-8v86: SeaTable Trigger Node Stores the API Token in Failed Poll Execution Data in 2.43.5
- security Fixes GHSA-43v8-hjhm-chjp: Chat Hub: chat-only users can register tool types the product already tries to sandbox in 2.43.5
- security Fixes GHSA-65mv-v8rp-54wc: Quick Base Node Allows Filter Injection Through the Where Parameter in 2.43.5
- security Fixes GHSA-qmvv-q3c9-wpp7: Credential Secrets Exposed in Execution Error Data of Several Nodes in 2.43.5
- security Fixes GHSA-8vrr-mgc5-jg55: Credential Permission Check Skips Inline Sub-Workflow Nodes With a Non-Boolean Disabled Value in 2.43.5
- security Fixes GHSA-8crx-5h96-q72q: Execute Sub-workflow `source: url` / `source: localFile` Bypasses Shared-Workflow Credential Guard in 2.43.5
- security Fixes GHSA-v9cx-v88r-42vw: Credential Permission Check Skips Nodes Whose Default Parameters Are Omitted in 2.43.5
- security Fixes GHSA-2x68-96jw-5r6c: SQL Injection via Metadata Filter Key in the Vector Store (OracleDB) Node in 2.43.5
- security Fixes GHSA-9p7v-45m2-wxgj: Deprecated Code Nodes Allow Code Execution in the n8n Main Process in 2.42.6
Every release in between
securityFixes GHSA-gx3v-3x3v-f8r5: Insufficient Isolation in Workflow Expression Evaluation
securityFixes GHSA-f2cw-9483-7vcp: Insecure GraphicsMagick Configuration
securityFixes GHSA-jmcg-c7p5-q69g: NocoDB Node Sends Its API Token to Attacker-Chosen Hosts When Downloading Attachments
securityFixes GHSA-prmc-fg87-r4gh: Credential-Using Nodes Forward Authentication Headers on Cross-Origin Redirects
securityFixes GHSA-pwj5-wwm6-g83j: Chat Trigger Embedded Chat Does Not Enforce n8n User Auth on All Requests
securityFixes GHSA-9qx8-fhxv-w794: Browser Use Upload Tool Reads Arbitrary Files from the n8n Server
securityFixes GHSA-4v22-g448-h4rg: MongoDB Node Update Operations Can Modify Unintended Documents
securityFixes GHSA-rc3w-8jc8-7x3w: Open Redirect via MCP OAuth Dynamic Client Registration
securityFixes GHSA-426f-xmcv-g8pg: OAuth Account Hijack in the End-User Credential Connect Flow via Unauthenticated Callback
fixcore: Keep the ExpressionError name in minified builds () (b3192c6)
fixcore: Keep undefined values in QuickJS expression results () (532f645)
fixeditor: Align carets within split buttons () (61cbfea)
fixeditor: Improve first load speed () (8b6bdbb)
fixeditor: Match Evals Run Test button colors () (f594853)
fixeditor: Remove underlines from breadcrumb links () (127d65a)
fixeditor: Remove underlines from Data Table links () (619271c)
fixeditor: Stop Safari from opening its own context menu on the canvas () (28f9c9e)
featurecore: Make custom OTel attribute key prefixes configurable () (6071b12)
fixcore: Recreate removed n8n-sandbox sandboxes and rerun workspace setup () (11e279a)
fixcore: Start sub-workflow error workflow when a pre-run check fails () (9595142)
fixeditor: Match navigation plus button hover styling () (471c006)
fixeditor: Point migration report docs link to the v3 breaking changes page () (b617384)
fixEmail Trigger (IMAP) Node: Back off reconnects when the server drops each new connection () (618064c)
fixMicrosoft SharePoint Node: Fix the column mapper 403 and empty items in Map Automatically () (79bbff4)
fixUpdate certifi to 2026.10.19 in task runner () (d53bba1)
fixUpdate certifi to 2026.10.23 in task runner () (82788cc)
featureeditor: Filter migration report workflows by project () (2946963)
featureeditor: Refactor N8nBreadcrumbs and callers () (81d4309)
featureImplements new taxonomy experiment for sales-and-marketing responders () (24e1504)
fixcore: Start sub-workflow error workflow when a pre-run check fails () (67d0e65)
fixEmail Trigger (IMAP) Node: Back off reconnects when the server drops each new connection () (10a9518)
fixMicrosoft SharePoint Node: Fix the column mapper 403 and empty items in Map Automatically () (e67d278)
fixUpdate certifi to 2026.10.19 in task runner () (2858cfb)
fixUpdate certifi to 2026.10.23 in task runner () (6187237)
fixPostgres Node: Prevent global pgtypes overwrite () (654315e)
fixcore: Key queue job outcomes by job on shutdown resume () (1f074d4)
fixeditor: Load credential types on startup () (6ff3198)
fixcore: Reuse connections in the log streaming webhook destination () (b79afe2)
fixcore: Turn off expression spans by default () (6965193)
fixcore: Turn off expression spans by default () (e88162a)
featurecore: Suspend in-flight production executions at worker shutdown () (5863179)
fixcore: Create an XML parser for each webhook request body () (ea3ee53)
securityFixes GHSA-mp7q-23hg-35cf: Webhook Responses Without the Sandbox Policy Allow Stored Cross-Site Scripting
securityFixes GHSA-wvjj-qg37-pv73: Crafted Workflow ID Gives Access to Data Tables in Other Projects
securityFixes GHSA-m7gv-mpg5-7c9v: Read/Write Files Node Glob Pattern Causes Unbounded Event-Loop Block
securityFixes GHSA-mgpr-56r4-5c67: OData $filter Injection in Microsoft Outlook and SharePoint v1 Nodes
securityFixes GHSA-crfj-5wv6-8v86: SeaTable Trigger Node Stores the API Token in Failed Poll Execution Data
securityFixes GHSA-43v8-hjhm-chjp: Chat Hub: chat-only users can register tool types the product already tries to sandbox
securityFixes GHSA-65mv-v8rp-54wc: Quick Base Node Allows Filter Injection Through the Where Parameter
securityFixes GHSA-qmvv-q3c9-wpp7: Credential Secrets Exposed in Execution Error Data of Several Nodes
securityFixes GHSA-8vrr-mgc5-jg55: Credential Permission Check Skips Inline Sub-Workflow Nodes With a Non-Boolean Disabled Value
securityFixes GHSA-8crx-5h96-q72q: Execute Sub-workflow `source: url` / `source: localFile` Bypasses Shared-Workflow Credential Guard
securityFixes GHSA-v9cx-v88r-42vw: Credential Permission Check Skips Nodes Whose Default Parameters Are Omitted
securityFixes GHSA-2x68-96jw-5r6c: SQL Injection via Metadata Filter Key in the Vector Store (OracleDB) Node
fixcore: Validate the size argument of the chunk() expression extension () (4bf0ece)
featureShow Gemini models by name and list prioritized models first in model pickers () (66cece2)
fixcore: Handle each Chat Hub segment once in queue mode () (dc77062)
fixcore: Resume tool calls for deferred tools that a skill loaded () (ea448c6)
fixcore: Keep concurrent credential tests from sharing one node type registry () (c17fdee)
fixcore: Resume tool calls for deferred tools that a skill loaded () (fd2586e)
securityFixes GHSA-9p7v-45m2-wxgj: Deprecated Code Nodes Allow Code Execution in the n8n Main Process
featurecore: Block create/update of workflows with deprecated nodes () (ff1a24c)
featureGoogle Gemini Node: Show Nano Banana 2.1 and 2 Lite in the image model list () (8dfc695)
fixeditor: Show the Agent artifact while the builder creates it () (e825e75)