All vulnerabilities

Servers and applications

GHSA-2x68-96jw-5r6c

SQL Injection via Metadata Filter Key in the Vector Store (OracleDB) Node

Severity
Medium 4.9
Published
28 Oct 2026
Last changed
29 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
2.43.5, 2.44.1, 3.0.1
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
n8nServers and applications · github:n8n-io/n8n
  • Every version before 2.44.1
  • Every version before 2.43.5
  • Every version before 3.0.1

References