| Package | Affected versions | Patched versions |
|---|---|---|
| n8n | = 2.34.0≥ 2.0.0, < 2.33.4< 1.123.69 | 2.33.41.123.69 |
n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contains a regular expression denial of service (ReDoS) vulnerability in the Filter and Switch nodes, which compile user-supplied regex patterns with new RegExp() and execute them synchronously on the worker thread without complexity validation or execution timeout. A crafted regex pattern can block the worker for an extended period per data item processed, delaying other workflow executions on the same worker.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free