js · n8nHeads-up
n8n Compression Node Decompress Operation Enforces Size and Entry Limits
The Compression node's Decompress operation now enforces configurable limits on decompressed output size and ZIP entry count to prevent memory exhaustion attack
What changed
The Compression node's Decompress operation now enforces configurable limits on decompressed output size and ZIP entry count to prevent memory exhaustion attacks.
Who it affects
Users of n8n instances with public webhook workflows that use the Compression node's Decompress operation.
What to do today
Upgrade to n8n version 2.24.0 or later, or apply workarounds such as disabling the Compression node or restricting public webhook endpoints.
The trail
Collected→
Audited→
Written→
Published
Source
GitHub Advisory · n8n