- How many CVEs does n8n have?
- n8n has 126 published CVE records since 2023, including 123 in the last two years.
- How many n8n CVEs are in CISA KEV?
- Yes — 1 of n8n's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
- Which n8n products have the most CVEs?
- The n8n products with the most published CVEs are n8n, fastapi, @n8n/n8n-nodes-langchain, n8n Python task executor, n8n-workflows.
- What are the most common weakness types in n8n CVEs?
- n8n's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-863 (Incorrect Authorization), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-639 (Authorization Bypass Through User-Controlled Key).
- Are there public exploits for n8n vulnerabilities?
- Yes — 12 of n8n's CVEs have a known public exploit.
- How many critical n8n vulnerabilities are there?
- n8n has 26 critical and 44 high-severity CVEs.
- What is the average severity of n8n CVEs?
- The average CVSS base score across n8n's scored CVEs is 7.3.