Miembros de
Boletines de Vulnerabilidades |
CVE-2026-56357 |
|
| Software afectado | GITHUB |
| n8n before 1.123.15 and 2.5.0 contains a webhook forgery vulnerability in the GitHub Webhook Trigger node that fails to implement HMAC-SHA256 signature verification. Attackers who know the webhook URL can send unsigned POST requests to trigger workflows with arbitrary data, spoofing GitHub webhook events. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-56357 | |
