2.43.5

14 Oct 2026todayfixedOriginal notes

This release closes 11 security advisories

mediumCredential Permission Check Skips Nodes Whose Default Parameters Are OmittedGHSA-v9cx-v88r-42vw
mediumExecute Sub-workflow `source: url` / `source: localFile` Bypasses Shared-Workflow Credential GuardGHSA-8crx-5h96-q72q
highCrafted Workflow ID Gives Access to Data Tables in Other ProjectsGHSA-wvjj-qg37-pv73
highWebhook Responses Without the Sandbox Policy Allow Stored Cross-Site ScriptingGHSA-mp7q-23hg-35cf
mediumSeaTable Trigger Node Stores the API Token in Failed Poll Execution DataGHSA-crfj-5wv6-8v86
highRead/Write Files Node Glob Pattern Causes Unbounded Event-Loop BlockGHSA-m7gv-mpg5-7c9v
mediumQuick Base Node Allows Filter Injection Through the Where ParameterGHSA-65mv-v8rp-54wc
mediumCredential Secrets Exposed in Execution Error Data of Several NodesGHSA-qmvv-q3c9-wpp7
mediumCredential Permission Check Skips Inline Sub-Workflow Nodes With a Non-Boolean Disabled ValueGHSA-8vrr-mgc5-jg55
mediumOData $filter Injection in Microsoft Outlook and SharePoint v1 NodesGHSA-mgpr-56r4-5c67
mediumChat Hub: chat-only users can register tool types the product already tries to sandboxGHSA-43v8-hjhm-chjp

core: Validate the size argument of the chunk() expression extension (#40911) (4bf0ece)

Show Gemini models by name and list prioritized models first in model pickers (#41016) (66cece2)