Threats Tagged 'ghsa-vhcw-f978-xjjg'
View all threats tagged with 'ghsa-vhcw-f978-xjjg'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-vhcw-f978-xjjg'
Click on any threat for detailed analysis and mitigation recommendations
N8n: Duplicate Advisory: DOM-Based XSS via Unsandboxed iframe srcdoc in HTML Preview 0 n8n versions before 1.123.64, 2.x before 2.29.8, and before 2.30.1 contain a DOM-based cross-site scripting (XSS) vulnerability in the HTML preview feature. The vulnerability arises because the execution output is rendered into an iframe srcdoc without the sandbox attribute, allowing a sanitizer bypass that enables injected scripts to execute with the same origin as the editor. An attacker with global:member privileges can exploit this by causing a victim to open the preview, enabling the injected script to call authenticated APIs using the victim's session. Join the discussion | GCVE Database | 07/22/2026, 12:32:18 UTC Added: 07/22/2026, 23:24:36 UTC |
Showing 1 to 1 of 1 result