Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 04:52:43 +0000 EUVD-2026-351197 https://cve.radiocsirt.org/vuln/euvd-2026-351197 EUVD-2026-351197 https://cve.radiocsirt.org/vuln/euvd-2026-351197 fkie_cve-2026-72775 https://cve.radiocsirt.org/vuln/fkie_cve-2026-72775 <p>n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the PostgresTrigger node, which interpolates user-supplied identifier parameters (channel, function, and trigger names) into SQL statements without proper escaping. An authenticated user can inject arbitrary SQL executed against the connected PostgreSQL database with the configured credential&#39;s privileges, allowing full read and write access.</p> <p>n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the PostgresTrigger node, which interpolates user-supplied identifier parameters (channel, function, and trigger names) into SQL statements without proper escaping. An authenticated user can inject arbitrary SQL executed against the connected PostgreSQL database with the configured credential&#39;s privileges, allowing full read and write access.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-72775 GHSA-m6wx-qjxf-vr9v https://cve.radiocsirt.org/vuln/ghsa-m6wx-qjxf-vr9v <p>n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the PostgresTrigger node, which interpolates user-supplied identifier parameters (channel, function, and trigger names) into SQL statements without proper escaping. An authenticated user can inject arbitrary SQL executed against the connected PostgreSQL database with the configured credential&#39;s privileges, allowing full read and write access.</p> <p>n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the PostgresTrigger node, which interpolates user-supplied identifier parameters (channel, function, and trigger names) into SQL statements without proper escaping. An authenticated user can inject arbitrary SQL executed against the connected PostgreSQL database with the configured credential&#39;s privileges, allowing full read and write access.</p> https://cve.radiocsirt.org/vuln/ghsa-m6wx-qjxf-vr9v