RetroFed Forum
Your home away from modern life.
Breaking Down CVE-2026-25049: How TypeScript Types Failed n8n's Security
Post Reply
AuthorMessage
codeinabox programming.dev codeinabox@programming.dev
Joined: 2025-09-29
Quote

Comments

1   Original
Kissaki programming.dev Kissaki@programming.dev
Joined: 2023-06-11
#2 · Quote Reply

Sanitizer logic: Skips execution (wrong type)

But why? Why does it "skip" when there's logic there? That doesn't make sense.

If someone passes an object with a length property, this works. If they pass an array, it works.

This later example explains how it can work for some logic. But it doesn't correlate to the actual exploitation or code in question.

1
Kissaki programming.dev Kissaki@programming.dev
Joined: 2023-06-11
#3 · Quote Reply

Seems like TypeScript could be generating JavaScript code that does these type checks on function entry - with a runtime cost of course.

Is there no such setting, general or conditional toggle on functions or types?

1
Post Reply
Back to top