Threats tagged 'ghsa-59m3-j5wq-r7rq'

A regular expression denial of service (ReDoS) vulnerability exists in n8n versions before 1.123.85, 2.43.5, and 2.44.1. Authenticated users who can create and run workflows may exploit this by submitting specially crafted wildcard-heavy File(s) Selector patterns. This causes exponential backtracking in the regex engine, blocking the event loop and rendering the UI, API, webhooks, and health checks unresponsive until the service is restarted.