Threats tagged 'ghsa-j6xc-9gw8-942r'

n8n versions before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contain a stored cross-site scripting (XSS) vulnerability. This occurs because certain webhook response paths, including error responses and responses without headers, do not include the sandbox Content-Security-Policy header. Authenticated users with permissions to create and activate workflows can exploit this to serve malicious HTML that executes scripts in the context of the n8n origin, potentially hijacking user sessions.