🚀 Release 2.10.3

[n8n-assistant]

2.10.3 (2026-03-04)

Bug Fixes

• editor: Always show auth mode dropdown in credential modal (#26280) (4501b0f)
• editor: Replace jsonpath with jsonpath-plus to resolve CVE (#26399) (7ec6115)
• Handle collaboration push old format (#26467) (4e2b9c6)

[cubic-dev-ai]

No issues found across 5 files

Architecture diagram

sequenceDiagram
    participant User as User (Browser)
    participant UI as Editor UI (Vue)
    participant Srv as n8n Server (Node.js)
    participant Eng as Workflow Engine
    participant Lib as jsonpath-plus

    Note over User,Lib: n8n v2.10.3 - Credential & Execution Flow Changes

    section Credential Modal Fix
        User->>UI: Open Credential Modal
        UI->>UI: NEW: Force visibility of Auth Mode dropdown
        Note right of UI: Fixes bug where dropdown was hidden in specific UI states
    end

    section Security Fix (CVE)
        Srv->>Eng: Execute Workflow Step
        Eng->>Lib: CHANGED: Evaluate expression (jsonpath-plus)
        Note right of Lib: Replaced insecure 'jsonpath' library
        Lib-->>Eng: Return sanitized data
        Eng-->>Srv: Step complete
    end

    section Collaboration Fix
        Srv->>UI: Push collaboration event (WebSocket)
        alt Payload in "old format"
            UI->>UI: NEW: Handle/transform legacy format
            Note right of UI: Prevents crashes during version mismatch
        else Standard format
            UI->>UI: Update editor state
        end
    end

Loading

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!