Is n8n 2.46.5 affected?
Nov 4, 2026 · Release notes ↗
3 known vulnerabilities affect 2.46.5 (highest CVSS 8.7).
1 newer release in its track, up to 2.46.6. What changed up to 2.46.6
Vulnerabilities affecting 2.46.5
- 8.7 GHSA-9p7v-45m2-wxgj Deprecated Code Nodes Allow Code Execution in the n8n Main Process fixed in 3.0.1
- 6.3 GHSA-mx4r-96jx-v278 Asana Trigger: Unauthenticated Request Can Reset Webhook Verification Secret fixed in 3.0.1
- 4.9 GHSA-2x68-96jw-5r6c SQL Injection via Metadata Filter Key in the Vector Store (OracleDB) Node fixed in 3.0.1
Newer releases
| 2.46.6 | Nov 4, 2026 | 2.46.5 → 2.46.6 |