GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
9 advisories
n8n: PostgresTrigger Node SQL Injection Allows Authenticated Users to Execute Arbitrary SQL on Connected PostgreSQL Instances
Moderate
GHSA-jqwr-vx3p-r266
was published
for
n8n
(npm)
Jul 22, 2026
n8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification Endpoints
Moderate
CVE-2026-54303
was published
for
n8n
(npm)
Jun 16, 2026
n8n: Merge Node SQL Mode Prototype Pollution
Moderate
CVE-2026-54311
was published
for
n8n
(npm)
Jun 16, 2026
n8n: Prototype Pollution enables confused-deputy execution via public webhooks
Moderate
CVE-2026-54306
was published
for
n8n
(npm)
Jun 16, 2026
n8n: NoSQL Injection in MongoDB Node Find And Replace Operation
Moderate
CVE-2026-54313
was published
for
n8n
(npm)
Jun 16, 2026
n8n: SQL Injection in Postgres v1/TimesclaeDB Nodes
Moderate
CVE-2026-54310
was published
for
n8n
(npm)
Jun 16, 2026
n8n has SQL Injection in SeaTable Node
Moderate
CVE-2026-42229
was published
for
n8n
(npm)
Apr 29, 2026
Traefik has unbounded io.ReadAll on auth server response body that causes OOM DOS
Moderate
CVE-2026-26998
was published
for
github.com/traefik/traefik/v2
(Go)
Mar 4, 2026
n8n has an Authentication Bypass in its Chat Trigger Node
Moderate
GHSA-jh8h-6c9q-7gmw
was published
for
n8n
(npm)
Feb 26, 2026
ProTip!
Advisories are also available from the
GraphQL API