Lucene search
+L

1 matches found

osv_ghsa
osv_ghsa
•added 2026/03/26 4:41 p.m.•36 views

GHSA-98C2-4CR3-4JC3 n8n has SQL Injection in Data Table Node via orderByColumn Expression

Impact An authenticated user with permission to create or modify workflows could exploit a SQL injection vulnerability in the Data Table Get node. On default SQLite DB, single statements can be manipulated and the attack surface is practically limited. On PostgreSQL deployments, multi-statement...

9.9CVSS5.7AI score0.00542EPSS
SaveExploits0References3
Rows per page
Query Builder