CVE-2026-54687 n8n-nodes-sqlite3: Path traversal via user-controlled database file path (db_path parameter)

n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. Prior to 1.0.0, nodes/SqliteNode/v1/SqliteV1.node.ts exposes the dbpath database file path as a node parameter that permits data expressions from upstream workflow input. A workflow author who maps untrusted input to dbpa...

EUVD-2026-67158

n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. Prior to 1.0.0, nodes/SqliteNode/v1/SqliteV1.node.ts exposes the dbpath database file path as a node parameter that permits data expressions from upstream workflow input. A workflow author who maps untrusted input to dbpa...

CVE-2026-54687

n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. Prior to 1.0.0, nodes/SqliteNode/v1/SqliteV1.node.ts exposes the dbpath database file path as a node parameter that permits data expressions from upstream workflow input. A workflow author who maps untrusted input to dbpa...

CVE-2026-54687: Improper Limitation of a Pathname to a Restricted Directory

n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. Prior to 1.0.0, nodes/SqliteNode/v1/SqliteV1.node.ts exposes the dbpath database file path as a node parameter that permits data expressions from upstream workflow input. A workflow author who maps untrusted input to dbpa...

PT-2026-82684

Name of the Vulnerable Software and Affected Versions n8n-nodes-sqlite3 versions prior to 1.0.0 Description The nodes/SqliteNode/v1/SqliteV1.node.ts file exposes the db path parameter, which allows data expressions from upstream workflow input. If a workflow author maps untrusted input to this...

Security update for qt6-svg (important)

openSUSE security update: security update for qt6-svg ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21626-1 Rating: important References: bsc1250994 Cross-References: CVE-2025-10729 CVSS scores: CVE-2025-10729 SUSE : 7...

OPENSUSE-SU-2026:21626-1 Security update for qt6-svg

This update for qt6-svg fixes the following issue: - CVE-2025-10729: use-after-free when processing pattern group nodes bsc1250994...

SUSE-SU-2026:23305-1 Security update for qt6-svg

This update for qt6-svg fixes the following issue: - CVE-2025-10729: use-after-free when processing pattern group nodes bsc1250994...

@n8n/n8n-nodes-langchain (>=2.32.0, <=2.34.0) potentially affected by CVE-2026-77069 via n8n-nodes-base (>=2.32.0, <=2.34.0)

n8n-nodes-base NPM version =2.32.0, =2.32.0, =2.34.0 Source cves: CVE-2026-77069 Source advisory: SNYK:JS-N8NNODESBASE-20054036...

Server-side Request Forgery (SSRF)

Overview n8n-nodes-base is a Base nodes of n8n Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the OAuth2 authorization-code-to-access-token exchange, which issues its request through a separate HTTP client that lacks the SSRF guard applied to the discovery...

@n8n/n8n-nodes-langchain (>=2.32.0, <=2.33.1) potentially affected by CVE-2026-77076 via n8n-nodes-base (>=2.32.0, <=2.33.0)

n8n-nodes-base NPM version =2.32.0, =2.32.0, =2.33.1 Source cves: CVE-2026-77076 Source advisory: SNYK:JS-N8NNODESBASE-20186635...

@n8n/n8n-nodes-langchain (2.34.0) potentially affected by CVE-2026-77076 via n8n-nodes-base (2.34.0)

n8n-nodes-base NPM version 2.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-nodes-base and may be impacted: - @n8n/n8n-nodes-langchain 2.34.0 Source cves: CVE-2026-77076 Source advisory: SNYK:JS-N8NNODESBASE-20186635...

Insertion of Sensitive Information into Log File

Overview n8n-nodes-base is a Base nodes of n8n Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the GraphQL node's error handling, which re-throws the underlying HTTP client error unchanged on a connection level failure rather than wrapping i...

@n8n/ai-node-sdk (0.22.0), @n8n/ai-workflow-builder (1.32.0) +3 more potentially affected by CVE-2026-77085 via @n8n/ai-utilities (0.25.0)

@n8n/ai-utilities NPM version 0.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on @n8n/ai-utilities and may be impacted: - @n8n/ai-node-sdk 0.22.0 - @n8n/ai-workflow-builder 1.32.0 - @n8n/create-node 0.40.0 - @n8n/n8n-nodes-langchain 2.32.0 -...

@bruno_groehs/n8n-nodes-chatmodel-reasoning (>=0.1.1, <=1.0.1), @fixtse/n8n-nodes-prodex (>=0.6.0, <=0.7.2) +32 more potentially affected by CVE-2026-77085 via @n8n/ai-utilities (>=0.2.1, <=0.24.2)

@n8n/ai-utilities NPM version =0.2.1, =0.1.1, =0.6.0, =0.1.0, =1.21.0, =0.20.0, =0.21.0, =1.0.1, =0.1.1, =0.1.28, =0.1.0, =0.2.0, =1.4.4, =1.4.5 and more Source cves: CVE-2026-77085 Source advisory: SNYK:JS-N8NAIUTILITIES-20186758...

CVE-2026-77082: Inefficient Regular Expression Complexity

n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contains a regular expression denial of service ReDoS vulnerability in the Filter and Switch nodes, which compile user-supplied regex patterns with new RegExp and execute them synchronously on the worker thread without complexity...

CVE-2026-68900: Improper Neutralization of Input During Web Page Generation

Wekan is open source kanban built with Meteor. From 8.72 until 10.23, addBoardHTMLToZip in client/lib/exportHTML.js read a card title and body through textContent, which decoded entity-encoded markup, and then interpolated titleText and allText into content.innerHTML in the exported index.html. A...

CVE-2026-71539

n8n is an open source workflow automation platform. Prior to 1.123.64, 2.29.8, and 2.30.1, the Git node clone operation allows an authenticated workflow user to swap a validated directory for a symlink before cloning, planting a crafted repository in the community node directory that loads as a...

CVE-2026-71539

In n8n, an authenticated user can exploit a race condition in the Git node clone operation to swap a validated directory for a symlink before cloning, planting a crafted repository in the community node directory that loads as a custom JavaScript node after restart, enabling remote code execution...

CVE-2026-59940

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.5.3, seroval.fromJSON allows attacker-controlled JSON Promise control nodes to operate on values from the general deserialization reference table without verifying genuine...