Is n8n 2.45.5 affected?
Oct 28, 2026 · Release notes ↗
3 known vulnerabilities affect 2.45.5 (highest CVSS 8.7).
2.45.5 is the latest release of its track.
Vulnerabilities affecting 2.45.5
- 8.7 GHSA-9p7v-45m2-wxgj Deprecated Code Nodes Allow Code Execution in the n8n Main Process fixed in 3.0.1
- 6.3 GHSA-mx4r-96jx-v278 Asana Trigger: Unauthenticated Request Can Reset Webhook Verification Secret fixed in 3.0.1
- 4.9 GHSA-2x68-96jw-5r6c SQL Injection via Metadata Filter Key in the Vector Store (OracleDB) Node fixed in 3.0.1