{"action":"Upgrade n8n-mcp to 2.47.13 or later.","affected":[{"fixed":"2.47.13","introduced":"0"}],"component":"n8n-mcp","cve_ids":["CVE-2026-42282"],"ecosystem":"npm","epss":0.00251,"exploited":false,"fixed_versions":["2.47.13"],"ghsa_id":"GHSA-wg4g-395p-mqv3","id":"tcs_01M5KGEZBCE9WSWXB33GJ6TCN8","modified_at":"2026-05-13T13:54:48.095286Z","published_at":"2026-04-25T23:35:28Z","references":["https://osv.dev/vulnerability/GHSA-wg4g-395p-mqv3","https://github.com/czlonkowski/n8n-mcp/security/advisories/GHSA-wg4g-395p-mqv3","https://nvd.nist.gov/vuln/detail/CVE-2026-42282","https://github.com/czlonkowski/n8n-mcp/commit/59b665bda36797823df238aeaf20adb862c9f451","https://github.com/czlonkowski/n8n-mcp","https://github.com/czlonkowski/n8n-mcp/releases/tag/v2.47.13"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-wg4g-395p-mqv3","url":"https://osv.dev/vulnerability/GHSA-wg4g-395p-mqv3"}],"summary":"n8n-MCP: Sensitive MCP tool-call arguments logged on authenticated requests in HTTP mode"}