|
3 | 3 | "@context": "https://openvex.dev/ns/v0.2.0", |
4 | 4 | "@id": "https://github.com/n8n-io/n8n/vex", |
5 | 5 | "author": "n8n Security Team <security@n8n.io>", |
6 | | - "timestamp": "2026-01-15T00:00:00Z", |
7 | | - "version": 1, |
8 | | - "statements": [] |
| 6 | + "timestamp": "2026-02-13T00:00:00Z", |
| 7 | + "version": 3, |
| 8 | + "statements": [ |
| 9 | + { |
| 10 | + "vulnerability": { |
| 11 | + "@id": "https://nvd.nist.gov/vuln/detail/CVE-2025-32460", |
| 12 | + "name": "CVE-2025-32460", |
| 13 | + "description": "Heap-based buffer over-read in ReadJXLImage in coders/jxl.c in GraphicsMagick before 8e56520" |
| 14 | + }, |
| 15 | + "products": [ |
| 16 | + { |
| 17 | + "@id": "pkg:docker/n8nio/n8n", |
| 18 | + "subcomponents": [ |
| 19 | + { |
| 20 | + "@id": "pkg:apk/alpine/graphicsmagick@1.3.45-r0" |
| 21 | + } |
| 22 | + ] |
| 23 | + } |
| 24 | + ], |
| 25 | + "status": "not_affected", |
| 26 | + "justification": "vulnerable_code_not_in_execute_path", |
| 27 | + "impact_statement": "The JXL (JPEG XL) coder requires libjxl delegate to be compiled into GraphicsMagick. Alpine's graphicsmagick package (1.3.45-r0) does not include libjxl support. Verified via `gm convert -list format` which shows no JXL entry. The vulnerable ReadJXLImage code path is unreachable." |
| 28 | + }, |
| 29 | + { |
| 30 | + "vulnerability": { |
| 31 | + "@id": "https://nvd.nist.gov/vuln/detail/CVE-2025-27795", |
| 32 | + "name": "CVE-2025-27795", |
| 33 | + "description": "ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits" |
| 34 | + }, |
| 35 | + "products": [ |
| 36 | + { |
| 37 | + "@id": "pkg:docker/n8nio/n8n", |
| 38 | + "subcomponents": [ |
| 39 | + { |
| 40 | + "@id": "pkg:apk/alpine/graphicsmagick@1.3.45-r0" |
| 41 | + } |
| 42 | + ] |
| 43 | + } |
| 44 | + ], |
| 45 | + "status": "not_affected", |
| 46 | + "justification": "vulnerable_code_not_in_execute_path", |
| 47 | + "impact_statement": "The JXL (JPEG XL) coder requires libjxl delegate to be compiled into GraphicsMagick. Alpine's graphicsmagick package (1.3.45-r0) does not include libjxl support. Verified via `gm convert -list format` which shows no JXL entry. The vulnerable ReadJXLImage code path is unreachable." |
| 48 | + }, |
| 49 | + { |
| 50 | + "vulnerability": { |
| 51 | + "@id": "https://nvd.nist.gov/vuln/detail/CVE-2025-27796", |
| 52 | + "name": "CVE-2025-27796", |
| 53 | + "description": "ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation" |
| 54 | + }, |
| 55 | + "products": [ |
| 56 | + { |
| 57 | + "@id": "pkg:docker/n8nio/n8n", |
| 58 | + "subcomponents": [ |
| 59 | + { |
| 60 | + "@id": "pkg:apk/alpine/graphicsmagick@1.3.45-r0" |
| 61 | + } |
| 62 | + ] |
| 63 | + } |
| 64 | + ], |
| 65 | + "status": "affected", |
| 66 | + "action_statement": "WPG (WordPerfect Graphics) coder is compiled into Alpine's graphicsmagick package. However, WPG is an obsolete format from the 1980s with no legitimate use case in n8n workflows. Exploitation requires a workflow author to deliberately fetch and process a crafted WPG file via the Edit Image node." |
| 67 | + } |
| 68 | + ] |
9 | 69 | } |
0 commit comments