Vulnerability report form (n8n.io/report-a-vulnerability) fails on submit: "Edge Function returned a non-2xx status code"

What happens

Submitting the vulnerability report form at https://n8n.io/report-a-vulnerability/ consistently fails with the error:

Edge Function returned a non-2xx status code

The form is embedded from https://security-hub.pages.dev/report?embed=true (Cloudflare Pages + Edge Functions), so the failure appears to be server-side in that Edge Function, not in the n8n.io site itself.

Reproduction

Multiple attempts on 2026-09-26 (evening, UTC+8), all failing the same way:

• regular window, incognito window, different browsers
• with and without attachments
• including a minimal, few-line submission

This rules out client-side causes (autofill/anti-bot field, attachment size, browser extensions).

Impact

Security reports cannot be submitted through the official VDP channel, which the disclosure policy states is the only actively reviewed one. Reporters who follow the policy are left without a working submission path (the email fallback [email protected] appears only in older community threads, not on the policy page itself).

Request

Could someone check the Edge Function logs for the report-submission endpoint on security-hub.pages.dev? No vulnerability details are included in this issue per the disclosure policy — the actual report will be submitted once the channel is restored.