HighCode node accesses the filesystem
Static text match in "Sign PDF". SUCCESS never executes workflow code; this describes what the code would do when run inside n8n.
Confidence: high · Definite match
Suggested fix: Avoid filesystem access from Code nodes; use n8n's binary data handling instead and restrict paths if files are unavoidable.
HighCode node accesses the filesystem
Static text match in "Generate Keys". SUCCESS never executes workflow code; this describes what the code would do when run inside n8n.
Confidence: high · Definite match
Suggested fix: Avoid filesystem access from Code nodes; use n8n's binary data handling instead and restrict paths if files are unavoidable.
MediumCode node loads external modules
The code imports modules, which requires the n8n instance to allow them (NODE_FUNCTION_ALLOW_EXTERNAL/BUILTIN) and widens what the code can do.
Confidence: high · Definite match
Suggested fix: Confirm each module is necessary and allow-listed explicitly on the n8n instance.
MediumCode node loads external modules
The code imports modules, which requires the n8n instance to allow them (NODE_FUNCTION_ALLOW_EXTERNAL/BUILTIN) and widens what the code can do.
Confidence: high · Definite match
Suggested fix: Confirm each module is necessary and allow-listed explicitly on the n8n instance.
MediumCode node reads host environment variables
Static text match in "Generate Keys". SUCCESS never executes workflow code; this describes what the code would do when run inside n8n.
Confidence: high · Definite match
Suggested fix: Pass configuration explicitly rather than reading the host environment, which may contain unrelated secrets.
MediumReads or writes files on the n8n host
The file path is built from workflow data, which could allow path traversal if that data is user-controlled.
Confidence: medium · Heuristic
Suggested fix: Restrict file operations to a dedicated directory and never build paths from untrusted input.
MediumReads or writes files on the n8n host
The file path is built from workflow data, which could allow path traversal if that data is user-controlled.
Confidence: medium · Heuristic
Suggested fix: Restrict file operations to a dedicated directory and never build paths from untrusted input.
MediumWebhook accepts unauthenticated requests
Anyone who learns the webhook URL can trigger this workflow with arbitrary data.
Confidence: medium · Heuristic
Suggested fix: Enable header or basic auth on the Webhook node, or verify a signature from the sending service.
MediumWebhook accepts unauthenticated requests
Anyone who learns the webhook URL can trigger this workflow with arbitrary data.
Confidence: medium · Heuristic
Suggested fix: Enable header or basic auth on the Webhook node, or verify a signature from the sending service.
LowReads or writes files on the n8n host
The file path is built from workflow data, which could allow path traversal if that data is user-controlled.
Confidence: medium · Heuristic
Suggested fix: Restrict file operations to a dedicated directory and never build paths from untrusted input.
LowReads or writes files on the n8n host
The file path is built from workflow data, which could allow path traversal if that data is user-controlled.
Confidence: medium · Heuristic
Suggested fix: Restrict file operations to a dedicated directory and never build paths from untrusted input.
LowReads or writes files on the n8n host
The file path is built from workflow data, which could allow path traversal if that data is user-controlled.
Confidence: medium · Heuristic
Suggested fix: Restrict file operations to a dedicated directory and never build paths from untrusted input.
