n8n [email protected] — Release Notes & Engineering Impact

Source available — automated, not human-reviewed

Component: n8n · Channel: stable. Automated analysis, not a compatibility certification. How this works.

Analysis updated: 2026-11-01.

Compatibility not verified — check source notes

📄 .MD

🔧 Bug Fixes 5

⚡ Executive Summary (TL;DR)

n8n [email protected]. Source highlight: **core:** Do not allow arbitrary path traversal in BinaryDataManager (#5523) (df3f23e)

Visit n8n Official Site ↗ Official Release Source ↗ All n8n Releases 📡 n8n RSS

Who Does This Impact? (Role-Based Analysis)

💻 Software Engineers & Devs

Check the source notes against the package and APIs you use before upgrading.

📊 Product & Engineering Leads

Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.

⚙️ DevOps & Security

Verify the target version, runtime requirements and rollback procedure in the official documentation.

🔧 Bug Fixes & Patches (5)

**core:** Do not allow arbitrary path traversal in BinaryDataManager (#5523) (df3f23e)
**core:** Do not allow arbitrary path traversal in the credential-translation endpoint (#5522) (397e42d)
**core:** Do not explicitly bypass auth on urls containing `.svg` (#5525) (a8ca2b1)
**core:** Do not remove empty output connections arrays in PurgeInvalidWorkflowConnections migration (#5546) (e6a554f)
**core:** User update endpoint should only allow updating email, firstName, and lastName (#5526) (d622827)

📄 View Raw Release Notes (Original Developer Log)

### Bug Fixes * **core:** Do not allow arbitrary path traversal in BinaryDataManager ([#5523](https://github.com/n8n-io/n8n/issues/5523)) ([df3f23e](https://github.com/n8n-io/n8n/commit/df3f23e2b8103a15632521e4ba6cf332693acf81)) * **core:** Do not allow arbitrary path traversal in the credential-translation endpoint ([#5522](https://github.com/n8n-io/n8n/issues/5522)) ([397e42d](https://github.com/n8n-io/n8n/commit/397e42d63e80577a0b897873a1d2f19533e27da7)) * **core:** Do not explicitly bypass auth on urls containing `.svg` ([#5525](https://github.com/n8n-io/n8n/issues/5525)) ([a8ca2b1](https://github.com/n8n-io/n8n/commit/a8ca2b1aea687256c7d7d3525a2c50659935d7b8)) * **core:** Do not remove empty output connections arrays in PurgeInvalidWorkflowConnections migration ([#5546](https://github.com/n8n-io/n8n/issues/5546)) ([e6a554f](https://github.com/n8n-io/n8n/commit/e6a554f884d0d8d1e5c3890745986ecc179846d5)) * **core:** User update endpoint should only allow updating email, firstName, and lastName ([#5526](https://github.com/n8n-io/n8n/issues/5526)) ([d622827](https://github.com/n8n-io/n8n/commit/d6228276a26d9dc1bf2b2c5452bc0644b6df0c63))

← Older Version n8n [email protected] Newer Version → n8n [email protected]