n8n-oci-entrypoint

Direct Vulnerabilities

Known vulnerabilities in the n8n-oci-entrypoint package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Server-Side Request Forgery (SSRF)	<2.37.7-r0
H Arbitrary Code Injection	<2.37.7-r0
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<2.37.7-r0
M Directory Traversal	<2.37.7-r0
H Server-Side Request Forgery (SSRF)	<2.37.7-r0
M Missing Authorization	<2.37.7-r0
H Allocation of Resources Without Limits or Throttling	<2.37.7-r0
M Improper Verification of Cryptographic Signature	<2.37.7-r0
H Arbitrary Code Injection	<2.37.7-r0
H Incorrect Authorization	<2.37.7-r0
M Missing Authorization	<2.37.7-r0
M Missing Authorization	<2.37.7-r0
M Missing Authorization	<2.37.7-r0
C Eval Injection	<2.35.4-r0
M Improper Neutralization of Special Elements in Data Query Logic	<2.35.4-r0
M Directory Traversal	<2.37.7-r0
M Missing Authorization	<2.37.7-r0
M Incorrect Authorization	<2.35.4-r0
M Authentication Bypass	<2.37.7-r0
H SQL Injection	<2.31.5-r0
H OS Command Injection	<2.33.4-r0
H Authorization Bypass Through User-Controlled Key	<2.33.4-r0
M Inefficient Regular Expression Complexity	<2.33.4-r0
C SQL Injection	<2.33.4-r0
M Authorization Bypass Through User-Controlled Key	<2.33.4-r0
M Server-Side Request Forgery (SSRF)	<2.33.4-r0
M Server-Side Request Forgery (SSRF)	<2.33.4-r0
H Authorization Bypass Through User-Controlled Key	<2.33.4-r0
H Directory Traversal	<2.31.5-r0
H Server-Side Request Forgery (SSRF)	<2.31.5-r0
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<2.31.5-r0
M Directory Traversal	<2.31.5-r0
C Arbitrary Code Injection	<2.31.5-r0
M Information Exposure	<2.33.4-r0
H Arbitrary Code Injection	<2.33.4-r0
H Directory Traversal	<2.33.4-r0
H Cross-site Scripting (XSS)	<2.33.4-r0
M Authorization Bypass Through User-Controlled Key	<2.31.5-r0
M Arbitrary Code Injection	<2.33.4-r0
H OS Command Injection	<2.33.4-r0
H Arbitrary Code Injection	<2.33.4-r0
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<2.33.4-r0
C Improper Neutralization of Special Elements in Data Query Logic	<2.33.4-r0
H Access of Resource Using Incompatible Type ('Type Confusion')	<2.31.5-r0
H SQL Injection	<2.31.5-r0
M Incorrect Authorization	<2.31.5-r0
L Time-of-check Time-of-use (TOCTOU)	<2.29.8-r0
M Cross-site Scripting (XSS)	<2.29.8-r0
M Cleartext Storage of Sensitive Information	<2.29.8-r0
H Improper Privilege Management	<2.29.8-r0
H Expression Language Injection	<2.29.8-r0
C OS Command Injection	<2.29.8-r0
H Time-of-check Time-of-use (TOCTOU)	<2.29.8-r0
M Cross-site Scripting (XSS)	<2.29.8-r0
H Authorization Bypass Through User-Controlled Key	<2.29.8-r0
H Incorrect Authorization	<2.29.8-r0
M Server-Side Request Forgery (SSRF)	<2.29.8-r0
H Incorrect Authorization	<2.30.4-r0
M Information Exposure Through Log Files	<2.29.8-r0
M Incorrect Authorization	<2.29.8-r0
M Missing Authentication for Critical Function	<2.27.4-r0
L Authorization Bypass Through User-Controlled Key	<2.27.4-r0
L Allocation of Resources Without Limits or Throttling	<2.28.3-r0
L Information Exposure	<2.27.4-r0
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<2.27.4-r0
L Protection Mechanism Failure	<2.27.4-r0
M Improper Authentication	<2.27.4-r0
M Incorrect Authorization	<2.25.7-r0
L Authorization Bypass Through User-Controlled Key	<2.28.3-r0
H SQL Injection	<2.27.4-r0
M Incorrect Authorization	<2.25.7-r0
H Incorrect Authorization	<2.25.7-r0
M Incomplete Blacklist	<2.25.7-r0
L Incorrect Authorization	<2.25.7-r0
L Information Exposure	<2.25.7-r0
L Directory Traversal	<2.22.6-r0
L Information Exposure	<2.25.7-r0
L Improper Input Validation	<2.22.6-r0
L Cross-site Scripting (XSS)	<2.25.7-r0
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<2.25.7-r0
L Cross-site Scripting (XSS)	<2.25.7-r0
L Authentication Bypass	<2.25.7-r0
L Exposure of Data Element to Wrong Session	<2.25.7-r0
L Cross-site Scripting (XSS)	<2.25.6-r0
L Missing Authentication for Critical Function	<2.25.7-r0
L Improper Handling of Highly Compressed Data (Data Amplification)	<2.25.6-r0
L SQL Injection	<2.25.6-r0
L SQL Injection	<2.25.7-r0
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<2.25.6-r0
L Arbitrary Argument Injection	<2.22.6-r0
L SQL Injection	<2.22.6-r0
C Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<2.22.6-r0
H Authorization Bypass Through User-Controlled Key	<2.22.6-r0
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<2.22.6-r0

Vulnerability

Vulnerable Version

Server-Side Request Forgery (SSRF)

<2.37.7-r0