[GHSA] GHSA-679f-58pq-4v2c (medium) — n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service

GHSA-679f-58pq-4v2c Severity: medium CVE: CVE-2026-86078

n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service

## Impact

The Instance AI workflow summary built its result with get-or-create-then-nested-write idioms keyed by node names and connection keys taken from the stored workflow. Those are arbitrary strings: the restricted-name guard n8n shows in the editor