All vulnerabilities

Servers and applications

GHSA-mx4r-96jx-v278

Asana Trigger: Unauthenticated Request Can Reset Webhook Verification Secret

Severity
Medium 6.3
Published
28 Oct 2026
Last changed
28 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
2.38.0, 3.0.1
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
n8nServers and applications · github:n8n-io/n8n
  • Every version before 2.38.0
  • Every version before 3.0.1

References