Поиск уязвимостей
Количество 7
Количество 7
GHSA-c37g-w77q-m4vp
n8n: SQL Injection in Postgres v1/TimesclaeDB Nodes
CVE-2026-54310
n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, an authenticated user with permission to create or modify workflows could supply a crafted parameters to the TimescaleDB and/or legacy Postgres v1 node's allowing arbitrary SQL to be injected and executed against the connected database within the privileges of the configured database account. This vulnerability is fixed in 2.25.7 and 2.26.2.
ALT-PU-2026-14227
ALT-PU-2026-14227: package `postgresql17-timescaledb` update to version 2.29.2-alt1
ALT-PU-2026-14225
ALT-PU-2026-14225: package `postgresql16-timescaledb` update to version 2.29.2-alt1
ALT-PU-2026-13998
ALT-PU-2026-13998: package `postgresql16-timescaledb` update to version 2.29.2-alt1
ALT-PU-2026-13997
ALT-PU-2026-13997: package `postgresql17-timescaledb` update to version 2.29.2-alt1
ALT-PU-2026-13995
ALT-PU-2026-13995: package `postgresql18-timescaledb` update to version 2.29.2-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-c37g-w77q-m4vp n8n: SQL Injection in Postgres v1/TimesclaeDB Nodes | CVSS3: 9.9 | 1% Низкий | 5 месяцев назад |
 | CVE-2026-54310 n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, an authenticated user with permission to create or modify workflows could supply a crafted parameters to the TimescaleDB and/or legacy Postgres v1 node's allowing arbitrary SQL to be injected and executed against the connected database within the privileges of the configured database account. This vulnerability is fixed in 2.25.7 and 2.26.2. | CVSS3: 9.9 | 1% Низкий | 5 месяцев назад |
| ALT-PU-2026-14227 ALT-PU-2026-14227: package `postgresql17-timescaledb` update to version 2.29.2-alt1 | CVSS3: 9.9 | 2 месяца назад | |
| ALT-PU-2026-14225 ALT-PU-2026-14225: package `postgresql16-timescaledb` update to version 2.29.2-alt1 | CVSS3: 9.9 | 2 месяца назад | |
| ALT-PU-2026-13998 ALT-PU-2026-13998: package `postgresql16-timescaledb` update to version 2.29.2-alt1 | CVSS3: 9.9 | 2 месяца назад | |
| ALT-PU-2026-13997 ALT-PU-2026-13997: package `postgresql17-timescaledb` update to version 2.29.2-alt1 | CVSS3: 9.9 | 2 месяца назад | |
| ALT-PU-2026-13995 ALT-PU-2026-13995: package `postgresql18-timescaledb` update to version 2.29.2-alt1 | CVSS3: 9.9 | 2 месяца назад |
Уязвимостей на страницу