CVE-2026-85167: Improper Neutralization of Special Elements in Data Query Logic

n8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the Elasticsearch Document Get All and Google Cloud Firestore Document Query operations, which build their JSON query by interpolating expression values directly into the query string before parsing. A value...

io.quarkiverse.googlecloudservices:quarkus-google-cloud-bigtable (0.5.0), io.quarkiverse.googlecloudservices:quarkus-google-cloud-bigtable-deployment (0.5.0) +83 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (1.12.0.final)

io.quarkus:quarkus-vertx MAVEN version 1.12.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkiverse.googlecloudservices:quarkus-google-cloud-bigtable 0.5.0 -...