n8n@1.55.0
1.55.0 (2024-08-14)
🎉 Special thanks 🎉
Thanks to Daniel Radionov from Sekurno for reporting the XSS vulnerability that was fixed in #10329
Bug Fixes
- AI Agent Node: Fix issues with some tools not populating (#10406) (51a1edd)
- core: Account for cancelling an execution with no workers available (#10343) (b044e78)
- core: Account for owner when filtering by project ID in
GET /workflows
in Public API (#10379) (5ac65b3) - core: Enforce shutdown timer and sequence on
SIGINT
for main (#10346) (5255793) - core: Filter out prototype and constructor lookups in expressions (#10382) (8e7d29a)
- core: Fix duplicate Redis publisher (#10392) (45813de)
- core: Fix worker shutdown errors when active executions (#10353) (e071b73)
- core: Prevent XSS in user update endpoints (#10338) (7898498)
- core: Prevent XSS via static cache dir (#10339) (4f392b5)
- core: Rate limit MFA activation and verification endpoints (#10330) (b6c47c0)
- core: Require mfa code for password change if its enabled (#10341) (9d7caac)
- core: Require mfa code to disable mfa (#10345) (3384f52)
- editor: Add better error handling for chat errors (#10408) (f82b6e4)
- editor: Connect up new project viewer role to the FE (#9913) (117e2d9)
- editor: Enable credential sharing between all types of projects (#10233) (1cf48cc)
- editor: Fix rendering of SVG icons in public chat on iOS (#10381) (7ab3811)
- editor: Fixing XSS vulnerability in toast messages (#10329) (38bdd9f)
- editor: Revert change that hid swagger docs in the ui (#10350) (bae49d3)
- n8n Form Trigger Node: Fix issue preventing v1 node from working (#10364) (9b647a9)