czlonkowski vulnerabilities
9 published CVEs name czlonkowski among the affected products.
- 9Published CVEs9 of them scored
- 9Last 12 monthspublished in the last year
- 1Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-55608
n8n-MCP: Incorrect authorization can expose default-scope workflow version backups in multi-tenant HTTP mode
czlonkowski · n8n-mcp
Medium4.2 - CVE-2026-54052
n8n-MCP: Cross-tenant access to workflow version backups in multi-tenant HTTP deployments
czlonkowski · n8n-mcp
Critical9.9 - CVE-2026-45582
n8n-MCP: Workflow telemetry sanitizer could retain partial values from URL-shaped node parameters
czlonkowski · n8n-mcp
Medium6.5 - CVE-2026-45707
n8n-MCP: Multi-tenant MCP requests fall back to process-level n8n credentials when tenant headers are absent or incomplete
czlonkowski · n8n-mcp
High8.1 - CVE-2026-44694
n8n-MCP: Authenticated SSRF in n8n-mcp webhook and API client paths
czlonkowski · n8n-mcp
High7.2 - CVE-2026-42282
n8n-MCP: Sensitive MCP tool-call arguments logged on authenticated requests in HTTP mode
czlonkowski · n8n-mcp
Medium4.3 - CVE-2026-41495
n8n-MCP Logs Sensitive Request Data on Unauthorized /mcp Requests
czlonkowski · n8n-mcp
Medium5.3 - CVE-2026-42449
n8n-MCP: IPv4-mapped IPv6 addresses bypass SSRF protection in validateUrlSync(), enabling full SSRF for SDK embedders
czlonkowski · n8n-mcp
High8.5 - CVE-2026-39974
n8n-MCP has an Authenticated SSRF via instance-URL header in multi-tenant HTTP mode
czlonkowski · n8n-mcp
High8.5