Security alerts
What to fix right now.
Short alerts when a serious flaw hits sites like yours: what happened, who is affected, how to check your site and what to do. The important ones from the past year are here too, in case you missed them. Every alert cites its official sources.
Security alerts
December 2025
n8n: actively exploited code execution flaw, update self-hosted instances
A critical n8n flaw (CVE-2025-68613) lets a logged-in user run commands on the server. It is exploited in the wild.
