@n8n/api-types@1.18.4
This package contains types and schema definitions for the n8n internal API, so that these can be shared between the backend and the frontend code.
latest version
1.21.2
latest non vulnerable version
first published
1 years ago
latest version published
8 days ago
licenses detected
- >=0
Direct Vulnerabilities
Known vulnerabilities in the @n8n/api-types package. This does not include vulnerabilities belonging to this package’s dependencies.
Fix vulnerabilities automatically
Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
@n8n/api-types is a fair-code workflow automation platform with native AI capabilities Affected versions of this package are vulnerable to SQL Injection in the process of importing a Data Table JSON file during a Source Control Pull operation. An attacker who can write to the git repository behind an n8n instance's Source Control configuration can cause the execution of SQL commands by committing a malicious file with a column name containing control characters to the repository, and convincing a user to perform a pull operation on it. This is only exploitable if the instance uses PostgreSQL as its database backend, the Source Control feature is enabled. How to fix SQL Injection? Upgrade | <1.20.1>=1.21.0 <1.21.1 |