Lucene search
+L

2 matches found

osv-ghsa
osv-ghsa
•added 2026/07/22 11:20 p.m.•26 views

GHSA-652Q-GVQ3-74QV n8n: Snowflake Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation

Impact The n8n Snowflake node's Execute Query operation interpolated expression values directly into the SQL string, making queries built with untrusted data susceptible to SQL injection. Exploitation requires that a workflow author has already embedded untrusted expression data directly in a raw...

5.3CVSS5.7AI score0.00471EPSS
SaveExploits0References5
Rows per page
Query Builder