gitsafehub
github.com/n8n-io/n8n ↗

n8n-io/n8n

scanned 2026-06-26 · git cf8ef2b
2 of 6 checks flagged a security issue
🔴 Needs attention
Only 4 of 6 checks finished — treat this as provisional. Re-check ↻

Informational scan, not a security audit. How this is computed.

Leaked secrets—Vulnerable dependencies32Known OSS vulnerabilities124Risky code patterns✓Malicious dependencies—Project health5

Security checks

Leaked secrets — Gitleaksⓘ timed out

API keys, passwords or tokens committed into the repo.

This check didn’t finish — that’s not the same as “clean.” Try Check again above.

via Gitleaks v8.21.2 · MIT

error: timeout after 1800s

Vulnerable dependencies — Trivyⓘ 32 found · 1 serious

Packages you depend on that have known security holes (CVEs).

  • Serious CVE-2026-33937 handlebars.js: Handlebars: Remote Code Execution via crafted Abstract Syntax Tree object in compile()
    .github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-33937). Fix: Update that package to its patched version.
  • Worth fixing CVE-2026-33938 handlebars: Handlebars: Arbitrary code execution via @partial-block overwrite
    .github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-33938). Fix: Update that package to its patched version.
  • Worth fixing CVE-2026-33939 handlebars.js: Handlebars.js: Denial of Service via malformed decorator syntax in template compilation
    .github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-33939). Fix: Update that package to its patched version.
  • Worth fixing CVE-2026-33940 handlebars.js: Handlebars.js: Arbitrary code execution via crafted template context
    .github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-33940). Fix: Update that package to its patched version.
  • Worth fixing CVE-2026-33941 handlebars.js: Handlebars: Arbitrary code execution via CLI precompiler input sanitization flaw
    .github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-33941). Fix: Update that package to its patched version.
  • Worth fixing CVE-2026-33916 handlebars.js: Handlebars: Cross-Site Scripting (XSS) via prototype pollution in partial resolution
    .github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-33916). Fix: Update that package to its patched version.
  • Worth fixing GHSA-7rx3-28cr-v5wh Handlebars.js has a Prototype Method Access Control Gap via Missing __lookupSetter__ Blocklist Entry
    .github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (GHSA-7rx3-28cr-v5wh). Fix: Update that package to its patched version.
  • Worth fixing CVE-2026-53655 node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar (nod ...
    .github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-53655). Fix: Update that package to its patched version.
  • Worth fixing CVE-2026-12151 undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames
    .github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-12151). Fix: Update that package to its patched version.
  • Worth fixing CVE-2026-9679 undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding
    .github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-9679). Fix: Update that package to its patched version.
  • Worth fixing CVE-2026-12151 undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames
    .github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-12151). Fix: Update that package to its patched version.
  • Worth fixing CVE-2026-6734 undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing
    .github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-6734). Fix: Update that package to its patched version.
  • Worth fixing CVE-2026-9697 undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy
    .github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-9697). Fix: Update that package to its patched version.
  • Worth fixing CVE-2026-9678 undici: Undici: Information disclosure due to improper cache-control header parsing
    .github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-9678). Fix: Update that package to its patched version.
  • Worth fixing CVE-2026-9679 undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding
    .github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-9679). Fix: Update that package to its patched version.
  • Worth fixing CVE-2026-31808 file-type: file-type: Denial of Service due to infinite loop in ASF file parsing
    pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-31808). Fix: Update that package to its patched version.
  • Worth fixing CVE-2026-42338 ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input
    pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-42338). Fix: Update that package to its patched version.
  • Worth fixing CVE-2026-2327 markdown-it: markdown-it: Denial of Service via Regular Expression Denial of Service in linkify function
    pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-2327). Fix: Update that package to its patched version.
  • Worth fixing CVE-2026-48988 markdown-it is a Markdown parser. Versions 14.1.1 and below contain a ...
    pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-48988). Fix: Update that package to its patched version.
  • Worth fixing GHSA-p6gq-j5cr-w38f Nodemailer: Message-level raw option bypasses disableFileAccess/disableUrlAccess, enabling arbitrary file read and full-response SSRF in the delivered message
    pnpm-lock.yaml
    A package you depend on has a known security hole (GHSA-p6gq-j5cr-w38f). Fix: Update that package to its patched version.
  • Worth fixing CVE-2026-12151 undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames
    pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-12151). Fix: Update that package to its patched version.
  • Worth fixing CVE-2026-9679 undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding
    pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-9679). Fix: Update that package to its patched version.
  • Minor GHSA-442j-39wm-28r2 Handlebars.js has a Property Access Validation Bypass in container.lookup
    .github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (GHSA-442j-39wm-28r2). Fix: Update that package to its patched version.
  • Minor CVE-2026-11525 undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header
    .github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-11525). Fix: Update that package to its patched version.
  • Minor CVE-2026-6733 undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery.
    .github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-6733). Fix: Update that package to its patched version.
… 7 more not shown

via Trivy v0.70.0 · Apache-2.0

Known OSS vulnerabilities — OSV-Scannerⓘ 124 found · 3 serious

Your dependencies cross-checked against the OSV vulnerability database.

  • Serious GHSA-2w6w-674q-4c4q Handlebars.js has JavaScript Injection via AST Type Confusion
    /workdirs/scan-37597bee-f124-4217-9f30-5d6e07d53b8c/.github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-33937). Fix: Update that package to its patched version.
  • Serious GHSA-63hf-3vf5-4wqf AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass
    /workdirs/scan-37597bee-f124-4217-9f30-5d6e07d53b8c/packages/@n8n/task-runner-python/uv.lock
    A package you depend on has a known security hole (CVE-2026-34520). Fix: Update that package to its patched version.
  • Serious GHSA-g8mr-85jm-7xhm Vitest Browser: Exposed Browser Mode API Can Proxy CDP and Overwrite Config Files, Leading to RCE
    /workdirs/scan-37597bee-f124-4217-9f30-5d6e07d53b8c/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-53633). Fix: Update that package to its patched version.
  • Worth fixing GHSA-2qvq-rjwj-gvw9 Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection
    /workdirs/scan-37597bee-f124-4217-9f30-5d6e07d53b8c/.github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-33916). Fix: Update that package to its patched version.
  • Worth fixing GHSA-3mfm-83xf-c92r Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block
    /workdirs/scan-37597bee-f124-4217-9f30-5d6e07d53b8c/.github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-33938). Fix: Update that package to its patched version.
  • Worth fixing GHSA-7rx3-28cr-v5wh Handlebars.js has a Prototype Method Access Control Gap via Missing __lookupSetter__ Blocklist Entry
    /workdirs/scan-37597bee-f124-4217-9f30-5d6e07d53b8c/.github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole. Fix: Update that package to its patched version.
  • Worth fixing GHSA-9cx6-37pm-9jff Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation
    /workdirs/scan-37597bee-f124-4217-9f30-5d6e07d53b8c/.github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-33939). Fix: Update that package to its patched version.
  • Worth fixing GHSA-xhpv-hc6g-r9c6 Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial
    /workdirs/scan-37597bee-f124-4217-9f30-5d6e07d53b8c/.github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-33940). Fix: Update that package to its patched version.
  • Worth fixing GHSA-xjpj-3mr7-gcpf Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options
    /workdirs/scan-37597bee-f124-4217-9f30-5d6e07d53b8c/.github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-33941). Fix: Update that package to its patched version.
  • Worth fixing GHSA-vmf3-w455-68vh node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)
    /workdirs/scan-37597bee-f124-4217-9f30-5d6e07d53b8c/.github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-53655). Fix: Update that package to its patched version.
  • Worth fixing GHSA-p88m-4jfj-68fv undici vulnerable to HTTP header injection via Set-Cookie percent-decoding
    /workdirs/scan-37597bee-f124-4217-9f30-5d6e07d53b8c/.github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-9679). Fix: Update that package to its patched version.
  • Worth fixing GHSA-vxpw-j846-p89q undici WebSocket client vulnerable to denial of service via fragment count bypass
    /workdirs/scan-37597bee-f124-4217-9f30-5d6e07d53b8c/.github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-12151). Fix: Update that package to its patched version.
  • Worth fixing GHSA-hm92-r4w5-c3mj undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse
    /workdirs/scan-37597bee-f124-4217-9f30-5d6e07d53b8c/.github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-6734). Fix: Update that package to its patched version.
  • Worth fixing GHSA-p88m-4jfj-68fv undici vulnerable to HTTP header injection via Set-Cookie percent-decoding
    /workdirs/scan-37597bee-f124-4217-9f30-5d6e07d53b8c/.github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-9679). Fix: Update that package to its patched version.
  • Worth fixing GHSA-pr7r-676h-xcf6 undici vulnerable to cross-user information disclosure via shared cache whitespace bypass
    /workdirs/scan-37597bee-f124-4217-9f30-5d6e07d53b8c/.github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-9678). Fix: Update that package to its patched version.
  • Worth fixing GHSA-vmh5-mc38-953g undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent
    /workdirs/scan-37597bee-f124-4217-9f30-5d6e07d53b8c/.github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-9697). Fix: Update that package to its patched version.
  • Worth fixing GHSA-vxpw-j846-p89q undici WebSocket client vulnerable to denial of service via fragment count bypass
    /workdirs/scan-37597bee-f124-4217-9f30-5d6e07d53b8c/.github/scripts/pnpm-lock.yaml
    A package you depend on has a known security hole (CVE-2026-12151). Fix: Update that package to its patched version.
  • Worth fixing GHSA-6w46-j5rx-g56g pytest has vulnerable tmpdir handling
    /workdirs/scan-37597bee-f124-4217-9f30-5d6e07d53b8c/packages/@n8n/ai-workflow-builder.ee/evaluations/programmatic/python/uv.lock
    A package you depend on has a known security hole (CVE-2025-71176). Fix: Update that package to its patched version.
  • Worth fixing GHSA-4fvr-rgm6-gqmc aiohttp: HTTP/1 Pipelined Requests Queue Without Limit
    /workdirs/scan-37597bee-f124-4217-9f30-5d6e07d53b8c/packages/@n8n/task-runner-python/uv.lock
    A package you depend on has a known security hole (CVE-2026-54273). Fix: Update that package to its patched version.
  • Worth fixing GHSA-63hw-fmq6-xxg2 aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines
    /workdirs/scan-37597bee-f124-4217-9f30-5d6e07d53b8c/packages/@n8n/task-runner-python/uv.lock
    A package you depend on has a known security hole (CVE-2026-54277). Fix: Update that package to its patched version.
  • Worth fixing GHSA-6jhg-hg63-jvvf AIOHTTP vulnerable to denial of service through large payloads
    /workdirs/scan-37597bee-f124-4217-9f30-5d6e07d53b8c/packages/@n8n/task-runner-python/uv.lock
    A package you depend on has a known security hole (CVE-2025-69228). Fix: Update that package to its patched version.
  • Worth fixing GHSA-6mq8-rvhq-8wgg AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb
    /workdirs/scan-37597bee-f124-4217-9f30-5d6e07d53b8c/packages/@n8n/task-runner-python/uv.lock
    A package you depend on has a known security hole (CVE-2025-69223). Fix: Update that package to its patched version.
  • Worth fixing GHSA-966j-vmvw-g2g9 AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect
    /workdirs/scan-37597bee-f124-4217-9f30-5d6e07d53b8c/packages/@n8n/task-runner-python/uv.lock
    A package you depend on has a known security hole (CVE-2026-34518). Fix: Update that package to its patched version.
  • Worth fixing GHSA-c427-h43c-vf67 AIOHTTP accepts duplicate Host headers
    /workdirs/scan-37597bee-f124-4217-9f30-5d6e07d53b8c/packages/@n8n/task-runner-python/uv.lock
    A package you depend on has a known security hole (CVE-2026-34525). Fix: Update that package to its patched version.
  • Worth fixing GHSA-g3cq-j2xw-wf74 aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup
    /workdirs/scan-37597bee-f124-4217-9f30-5d6e07d53b8c/packages/@n8n/task-runner-python/uv.lock
    A package you depend on has a known security hole (CVE-2026-54278). Fix: Update that package to its patched version.
… 99 more not shown

via OSV-Scanner v1.9.2 · Apache-2.0

Risky code patterns — Semgrepⓘ none found ✓

Code that can be exploited: injection, hardcoded credentials and similar.

Nothing found by this check. ✓

via Semgrep v1.147.0 · LGPL-2.1

Malicious dependencies — Guarddogⓘ couldn’t run

Packages that look intentionally malicious: typosquats, sneaky install scripts.

This check didn’t finish — that’s not the same as “clean.” Try Check again above.

via Guarddog v2.10.0 · Apache-2.0

error: npm:Traceback (most recent call last): File "/usr/local/bin/guarddog", line 5, in <module> from guarddog.cli import cl

Project health

A signal about how the project is maintained — not a vulnerability in your code. It doesn’t affect the verdict above.

Project health — OpenSSF Scorecardⓘ 5 notes

Maintenance & supply-chain hygiene. A signal about the project, not a vulnerability in your code.

  • Minor scorecard-CII-Best-Practices CII-Best-Practices scored 0: no effort to earn an OpenSSF best practices badge detected
    A project-health signal (maintenance / supply-chain hygiene), not a vulnerability in your code.
  • Minor scorecard-SAST SAST scored 0: SAST tool is not run on all commits -- score normalized to 0
    A project-health signal (maintenance / supply-chain hygiene), not a vulnerability in your code.
  • Minor scorecard-Signed-Releases Signed-Releases scored 0: Project has not signed or included provenance with any releases.
    A project-health signal (maintenance / supply-chain hygiene), not a vulnerability in your code.
  • Minor scorecard-Token-Permissions Token-Permissions scored 0: detected GitHub workflow tokens with excessive permissions
    A project-health signal (maintenance / supply-chain hygiene), not a vulnerability in your code.
  • FYI scorecard-overall OpenSSF Scorecard overall: 7.2/10
    A project-health signal (maintenance / supply-chain hygiene), not a vulnerability in your code.

via OpenSSF Scorecard v5.5.0 · Apache-2.0

About these results. Six open-source checks ran in parallel; every finding is tagged with the tool that produced it. The verdict follows a published rule. False positives and false negatives are normal — a clean scan does not mean the code is secure, and a red verdict does not mean the project is compromised.