{"action":"Upgrade n8n to 1.119.2 or later.","affected":[{"fixed":"1.119.2","introduced":"0.123.1"}],"component":"n8n","cve_ids":["CVE-2025-65964"],"ecosystem":"npm","epss":0.00663,"exploited":false,"fixed_versions":["1.119.2"],"ghsa_id":"GHSA-wpqc-h9wp-chmq","id":"tcs_01M5KGFMVRQ09RXMBBF3JGSJQX","modified_at":"2025-12-09T17:31:40.017214Z","published_at":"2025-12-08T21:30:07Z","references":["https://osv.dev/vulnerability/GHSA-wpqc-h9wp-chmq","https://github.com/n8n-io/n8n/security/advisories/GHSA-wpqc-h9wp-chmq","https://nvd.nist.gov/vuln/detail/CVE-2025-65964","https://github.com/n8n-io/n8n/commit/d5a1171f95f75def5c3ac577707ab913e22aef04","https://github.com/n8n-io/n8n","https://github.com/n8n-io/n8n/releases/tag/n8n%401.119.2","https://n8n-docs.teamlab.info/hosting/securing/blocking-nodes/#exclude-nodes"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-wpqc-h9wp-chmq","url":"https://osv.dev/vulnerability/GHSA-wpqc-h9wp-chmq"}],"summary":"n8n vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hook"}