Threats tagged 'ghsa-4v4v-jr32-r382'

A prototype pollution vulnerability exists in n8n versions before 2.41.4 and in 2.42.x versions before 2.42.1. This flaw allows low-privileged users to manipulate built-in object behavior by saving workflows with specially crafted connection keys such as __proto__. The vulnerability causes server errors during the periodic history compaction task, leading to login failures and write operation disruptions.