Lucene search
+L

2 matches found

Patchstack
Patchstack
added 2026/06/16 7:1 p.m.9 views

NPM: n8n: Merge Node SQL Mode Prototype Pollution

NPM: n8n: Merge Node SQL Mode Prototype Pollution vulnerability discovered by ? in WordPress Npm n8n versions 2.25.7...

7.7CVSS5.9AI score0.00316EPSS
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
added 2026/02/25 9:23 p.m.17 views

n8n has Potential Remote Code Execution via Merge Node

Impact An authenticated user with permission to create or modify workflows could leverage the Merge node's SQL query mode to execute arbitrary code and write arbitrary files on the n8n server. Patches The issues have been fixed in n8n versions 2.10.1, 2.9.3, and 1.123.22. Users should upgrade to...

9.4CVSS6.3AI score0.00765EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder