Exposure of Data Element to Wrong Session

Overview n8n-nodes-base is a Base nodes of n8n Affected versions of this package are vulnerable to Exposure of Data Element to Wrong Session via the combineBySql Merge-node SQL Query path in combineBySql.ts. An authenticated attacker can poison the shared SQL sandbox by supplying a workflow that...

n8n 安全漏洞

n8n is an open-source, scalable workflow automation tool developed by n8n. Versions of n8n prior to 1.118.0 and 2.4.0 contained security vulnerabilities. These vulnerabilities stemmed from vulnerabilities in the SQL query pattern used by the Merge node, which could lead to the writing of arbitrar...