# WorkflowGen v8.4.1

**URL:** <https://discuss.workflowgen.com/t/workflowgen-v8-4-1/2346>\
**Category:** Release Notes & Downloads\
**Created:** [March 10, 2026, 3:23am UTC](https://discuss.workflowgen.com/t/workflowgen-v8-4-1/2346 "2026-03-10T03:23:02Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![wfg-admin](https://yyz2.discourse-cdn.com/flex030/user_avatar/discuss.workflowgen.com/wfg-admin/32/714_2.png) [@wfg-admin](https://discuss.workflowgen.com/u/wfg-admin)\
**Post date:** [March 10, 2026, 3:23am UTC](https://discuss.workflowgen.com/t/workflowgen-v8-4-1/2346/1 "2026-03-10T03:23:02Z")

</div>

This release includes security fixes and dependency updates.

### Important

- [Node.js Security Update - qs DoS vulnerability (CVE-2026-2391)](https://nvd.nist.gov/vuln/detail/CVE-2026-2391)
- [Node.js Security Update - express-rate-limit bypass vulnerability (CVE-2026-30827)](https://github.com/advisories/GHSA-46wh-pxpv-q5gq)

### Security

- **Bug (#4591):** Fixed a **SQL query parameter validation** issue in the portal comments module.

- **Bug (#4587):** Fixed a **SQL query parameter validation** issue in the administration process management module.

### Node.js Apps

- **Update (#4557):** Updated `qs` dependency override to `>=6.14.2` across all Node.js modules to address a DoS vulnerability ([CVE-2026-2391](https://nvd.nist.gov/vuln/detail/CVE-2026-2391)).

- **Update (#4599):** Updated `express-rate-limit` to 8.3.1 in the Auth and Hooks modules to fix a rate-limiting bypass vulnerability ([CVE-2026-30827](https://github.com/advisories/GHSA-46wh-pxpv-q5gq)).

### Notes

- Node.js modules updated: `GraphQL v5.4.1`, `Webhooks v6.3.1`, `Auth v3.3.1`, and `SCIM v3.3.1` (all require **Node.js `22.22.0 LTS`** ).

### Installation Packs

[WorkflowGen 8.4.1 (Upgrade)](https://github.com/advantys/workflowgen-releases/releases/download/8.4.1/update.zip)  
[WorkflowGen 8.4.1 (Clean Install - PowerShell)](https://github.com/advantys/workflowgen-releases/releases/download/8.4.1/powershell-setup-8.4.1.zip)  
[WorkflowGen 8.4.1 (Clean Install - manual)](https://github.com/advantys/workflowgen-releases/releases/download/8.4.1/manual.zip)

### Documentation

WorkflowGen 8.4.1 Upgrade Guide: [English](https://docs.workflowgen.com/upgrade/8.4.1) - [Français](https://docs.workflowgen.com/upgrade-fr/8.4.1)  
WorkflowGen 8.4 PowerShell Installation: [English](https://docs.workflowgen.com/tech/8.4/setup/powershell-installation) - [Français](https://docs.workflowgen.com/tech-fr/8.4/configuration/installation-powershell)  
WorkflowGen 8.4 Manual Installation: [English](https://docs.workflowgen.com/tech/8.4/setup/manual-installation) - [Français](https://docs.workflowgen.com/tech-fr/8.4/configuration/installation-manuelle)  
WorkflowGen 8.4 Technical Guide: [English](https://docs.workflowgen.com/tech/8.4/) - [Français](https://docs.workflowgen.com/tech-fr/8.4/)  
WorkflowGen 8.4 Administration Guide: [English](https://docs.workflowgen.com/admin/8.4) - [Français](https://docs.workflowgen.com/admin-fr/8.4)  
WorkflowGen 8.4 User Portal Guide: [English](https://docs.workflowgen.com/portal/8.4) - [Français](https://docs.workflowgen.com/portal-fr/8.4)  
WorkflowGen 8.4 Integration Guide: [English](https://docs.workflowgen.com/integration/8.4)  
WorkflowGen 8.4 for Azure: [English](https://docs.workflowgen.com/azure/8.4) - [Français](https://docs.workflowgen.com/azure-fr/8.4)  
WorkflowGen 8.x for Docker: [English](https://docs.workflowgen.com/docker) - [Français](https://docs.workflowgen.com/docker-fr)  
WorkflowGen documentation: [English](https://docs.workflowgen.com/) - [Français](https://docs.workflowgen.com/documentation-fr)

---

<div class="post-metadata">

**Author:** ![jianan.hsu](https://yyz2.discourse-cdn.com/flex030/user_avatar/discuss.workflowgen.com/jianan.hsu/32/411_2.png) [@jianan.hsu](https://discuss.workflowgen.com/u/jianan.hsu)\
**Post date:** [March 10, 2026, 3:46pm UTC](https://discuss.workflowgen.com/t/workflowgen-v8-4-1/2346/2 "2026-03-10T15:46:26Z")

</div>



---

<div class="post-metadata">

**Author:** ![jianan.hsu](https://yyz2.discourse-cdn.com/flex030/user_avatar/discuss.workflowgen.com/jianan.hsu/32/411_2.png) [@jianan.hsu](https://discuss.workflowgen.com/u/jianan.hsu)\
**Post date:** [April 13, 2026, 3:14pm UTC](https://discuss.workflowgen.com/t/workflowgen-v8-4-1/2346/3 "2026-04-13T15:14:50Z")

</div>


