118158 matches found
CVE-2026-4610
creationtimestamp| type| source ---|---|--- 2026-06-23 15:58:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxrdorszy2l...
CVE-2026-44792 n8n: Source Control Pull SQL Injection
n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an attacker with write access to the git repository connected to an n8n Source Control configuration could commit a malicious Data Table JSON file containing a crafted column name. When an administrator...
CVE-2026-44792 n8n: Source Control Pull SQL Injection
n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an attacker with write access to the git repository connected to an n8n Source Control configuration could commit a malicious Data Table JSON file containing a crafted column name. When an administrator...
CVE-2026-44792 n8n: Source Control Pull SQL Injection
n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an attacker with write access to the git repository connected to an n8n Source Control configuration could commit a malicious Data Table JSON file containing a crafted column name. When an administrator...
EUVD-2026-38486
n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an attacker with write access to the git repository connected to an n8n Source Control configuration could commit a malicious Data Table JSON file containing a crafted column name. When an administrator...
CVE-2026-44792
CVE-2026-44792 describes a SQL injection risk in n8n caused by importing a crafted Data Table JSON file during a Source Control Pull. Attack requires: PostgreSQL backend, Source Control feature enabled and connected to a writable repository, and an administrator triggering a Pull. The vulnerabili...
CVE-2026-12969
creationtimestamp| type| source ---|---|--- 2026-06-23 15:54:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxr5pmmtj2l...
EUVD-2026-38476
n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, three EE endpoints used by the Dynamic Credentials feature accepted any authenticated n8n session without performing per-resource ownership or scope checks on the target workflow or credential. An...
EUVD-2026-38474
n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, a prototype pollution vulnerability allowed a crafted public webhook payload to inject attacker-controlled fields into workflow data during internal object copying. These fields could be surfaced and consumed as norma...
CVE-2026-54314
n8n is an open source workflow automation platform. Prior to 2.24.0, the Compression node's Decompress operation expanded attacker-controlled archives into memory without enforcing limits on decompressed output size. An unauthenticated attacker could send a small compressed archive to a public...
EUVD-2026-38459
n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user with workflow edit access could supply a malicious filter value in the MongoDB node's Find And Replace operation. The value was not validated before being passed to MongoDB as a query filter, allowing...
CVE-2025-71376
creationtimestamp| type| source ---|---|--- 2026-06-23 14:52:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxnnmxy7m2q...
CVE-2023-54365
creationtimestamp| type| source ---|---|--- 2026-06-23 14:37:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxmsqt73o2b 2026-07-13 16:02:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqk2wiuhrz2z 2026-07-16 08:02:13+00:00| seen|...
CVE-2026-56248
creationtimestamp| type| source ---|---|--- 2026-06-23 14:32:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxmjserwm2r...
CVE-2026-56225
creationtimestamp| type| source ---|---|--- 2026-06-23 14:19:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxlsg2pk52s...
CVE-2026-56258
creationtimestamp| type| source ---|---|--- 2026-06-23 14:15:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxlmgqhll2w 2026-06-29 01:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpfcdup5pk2t...
CVE-2026-56315
creationtimestamp| type| source ---|---|--- 2026-06-23 14:12:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxlh2kytx2w...
CVE-2026-54892
creationtimestamp| type| source ---|---|--- 2026-06-23 14:07:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxl5ook3g2a...
CVE-2024-34854
creationtimestamp| type| source ---|---|--- 2026-06-23 14:06:10+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4f2d94b3-9a83-4ad8-9f83-1cff5279a4d6 2026-06-30 11:39:34+00:00| exploited|...