Lucene search
+L

1 matches found

OSV
OSV
added 2026/08/27 5:06 p.m.3 views

GHSA-Q7M3-RHXG-7VXR n8n-nodes-sqlite3 vulnerable to path traversal via user-controlled database file path (db_path parameter)

Affected versions 1.0.0 Patched version 1.0.0 Description In versions prior to 1.0.0, the SQLite node accepted the database file path as a direct node parameter visible and editable in the workflow. A workflow author who mapped untrusted user input to the dbpath field could allow an attacker to...

6.1CVSS5.3AI score
SaveExploits0References4
Rows per page
Query Builder