Lucene search
+L

12 matches found

OSV
OSV
added 2026/07/22 11:20 p.m.6 views

GHSA-652Q-GVQ3-74QV n8n: Snowflake Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation

Impact The n8n Snowflake node's Execute Query operation interpolated expression values directly into the SQL string, making queries built with untrusted data susceptible to SQL injection. Exploitation requires that a workflow author has already embedded untrusted expression data directly in a raw...

5.3CVSS5.7AI score
SaveExploits0References5
Rows per page
Query Builder