{"metadata": {"vulnerability": "CVE-2026-65591", "count": 20, "kinds": {"milestone": 5, "sighting": 4, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-07-08T00:00:00Z", "date_only": false, "value": "2026-07-08T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-65591", "field": "containers.cna.datePublic"}, {"timestamp": "2026-07-22T10:45:44.832Z", "date_only": false, "value": "2026-07-22T10:45:44.832Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-65591", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-22T11:21:40.743Z", "date_only": false, "value": "2026-07-22T11:21:40.743Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-65591", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-07-22T11:21:40.743Z", "date_only": false, "value": "2026-07-22T11:21:40.743Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-65591", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-22T12:18:19Z", "date_only": false, "value": "2026-07-22T12:18:19Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M7JC-P4HF-XHWQ", "record": "GHSA-M7JC-P4HF-XHWQ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-07-22T12:18:19.117Z", "date_only": false, "value": "2026-07-22T12:18:19.117", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-65591", "record": "FKIE_CVE-2026-65591", "field": "published"}, {"timestamp": "2026-07-22T12:32:17Z", "date_only": false, "value": "2026-07-22T12:32:17Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M7JC-P4HF-XHWQ", "record": "GHSA-M7JC-P4HF-XHWQ", "field": "published"}, {"timestamp": "2026-07-22T12:41:23.275Z", "date_only": false, "value": "2026-07-22T12:41:23.275611Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mradujhba52i", "record": "CVE-2026-65591", "field": "creation_timestamp", "uuid": "f8ed41e5-472e-4f64-8b4d-4d70329773d8", "content": "CVE-2026-65591 - n8n before 1.123.64 Sanitizer Bypass Remote Code Execution\nCVE ID : CVE-2026-65591\n \n Published : July 22, 2026, 12:18 p.m. | 18\u00a0minutes ago\n \n Description : n8n contains a sanitizer bypass vulnerability in the legacy expression evaluator's computed-member han...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mradujhba52i"}, {"timestamp": "2026-07-22T15:49:18.716Z", "date_only": false, "value": "2026-07-22T15:49:18.716129Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-65591", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-22T15:49:18.716Z", "date_only": false, "value": "2026-07-22T15:49:18.716129Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-65591", "record": "FKIE_CVE-2026-65591", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-22T15:51:37.174Z", "date_only": false, "value": "2026-07-22T15:51:37.174Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-65591", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-22T15:51:37.174Z", "date_only": false, "value": "2026-07-22T15:51:37.174Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-65591", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-22T22:01:27Z", "date_only": false, "value": "2026-07-22T22:01:27Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M7JC-P4HF-XHWQ", "record": "GHSA-M7JC-P4HF-XHWQ", "field": "modified"}, {"timestamp": "2026-07-22T22:01:27Z", "date_only": false, "value": "2026-07-22T22:01:27Z", "kind": "other", "label": "Withdrawn", "source": "github \u00b7 GHSA-M7JC-P4HF-XHWQ", "record": "GHSA-M7JC-P4HF-XHWQ", "field": "withdrawn"}, {"timestamp": "2026-07-22T22:02:04Z", "date_only": false, "value": "2026-07-22T22:02:04Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PM35-FQVH-CQ5G", "record": "GHSA-PM35-FQVH-CQ5G", "field": "published"}, {"timestamp": "2026-07-22T22:02:04Z", "date_only": false, "value": "2026-07-22T22:02:04Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PM35-FQVH-CQ5G", "record": "GHSA-PM35-FQVH-CQ5G", "field": "modified"}, {"timestamp": "2026-07-22T22:40:04.949Z", "date_only": false, "value": "2026-07-22T22:40:04.949101Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrbfd2xbsj2z", "record": "CVE-2026-65591", "field": "creation_timestamp", "uuid": "9d94c934-c4cf-4ab7-8856-9cdb13d13562", "content": "CVE-2026-65591 - n8n\nAn attacker with workflow editing permissions can run malicious code on the server where n8n is installed. This can happen if the server is not updated to version 1.123.64 or later.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#n8n #n8nio #npm #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mrbfd2xbsj2z"}, {"timestamp": "2026-07-27T19:17:24.134Z", "date_only": false, "value": "2026-07-27T19:17:24.134098Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mrnmdahelz2n", "record": "CVE-2026-65591", "field": "creation_timestamp", "uuid": "ee3dfbcf-37b0-477f-a69b-3ccb543a13db", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-65591](https://github.com/n8n-io/n8n/security/advisories/GHSA-pm35-fqvh-cq5g)\nn8n conta...\nhttps://github.com/n8n-io/n8n/security/advisories/GHSA-pm35-fqvh-cq5g #Vulnerability #CVE #ZeroDay", "url": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mrnmdahelz2n"}, {"timestamp": "2026-08-10T14:37:07.049Z", "date_only": false, "value": "2026-08-10T14:37:07.049574Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msqd6wyv422e", "record": "CVE-2026-65591", "field": "creation_timestamp", "uuid": "874ede05-193e-433b-bbb5-7f9fcc686f85", "content": "\ud83d\udccc CVE-2026-65591 - n8n contains a sanitizer bypass vulnerability in the legacy expression evaluator's computed-member handler. An authenticated user with workflow create... https://www.cyberhub.blog/cves/CVE-2026-65591", "url": "https://bsky.app/profile/cyberhub.blog/post/3msqd6wyv422e"}, {"timestamp": "2026-10-24T17:10:00.220Z", "date_only": false, "value": "2026-10-24T17:10:00.220", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-65591", "record": "FKIE_CVE-2026-65591", "field": "lastModified"}]}