https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-15T07:28:21.316918+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/ghsa-q2mq-gv2x-2mgf GHSA-q2mq-gv2x-2mgf 2026-11-15T07:28:21.318335+00:00

n8n before 1.123.89, 2.x before 2.45.5, 2.46.x before 2.46.1, and 3.x before 3.0.1 contains a NoSQL injection vulnerability in the MongoDB node's Update and Find And Replace operations due to insufficient validation of the update key value taken from incoming items. Attackers who can supply untrusted input, such as a webhook body, to a workflow using these operations can make the node match and overwrite unintended documents or insert new documents in the MongoDB database.

 https://db.gcve.eu/vuln/wid-sec-w-2026-4192 WID-SEC-W-2026-4192 — n8n: Mehrere Schwachstellen 2026-11-15T07:28:21.318396+00:00

Ein Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen SQL-Injection Angriff durchzuführen und um Sicherheitsvorkehrungen zu umgehen.