Moved: 2026-02-05 — n8n credential exfiltration via domain allowlist bypass (GHSA-2xcx-75h9-vr9h)¶

This page was consolidated during the 2026-05-22 redundancy cleanup.

Canonical page: 2026-02-05 — n8n HTTP Request “Allowed domains” validation bypass → credential exfiltration (GHSA-2xcx-75h9-vr9h)

Keep this compatibility pointer so old links do not 404, but make future updates on the canonical page.