{"action":"Upgrade n8n-nodes-sqlite3 to 1.0.0 or later.","affected":[{"fixed":"1.0.0","introduced":"0"}],"component":"n8n-nodes-sqlite3","cve_ids":["CVE-2026-54687"],"ecosystem":"npm","epss":0.00585,"exploited":false,"fixed_versions":["1.0.0"],"ghsa_id":"GHSA-q7m3-rhxg-7vxr","id":"tcs_01M5KG5K7YYFWPVAS3CX4Z44XJ","modified_at":"2026-08-27T17:25:39.159017Z","published_at":"2026-08-27T17:06:55Z","references":["https://osv.dev/vulnerability/GHSA-q7m3-rhxg-7vxr","https://github.com/DangerBlack/n8n-node-sqlite3/security/advisories/GHSA-q7m3-rhxg-7vxr","https://github.com/DangerBlack/n8n-node-sqlite3/pull/25","https://github.com/DangerBlack/n8n-node-sqlite3/commit/145a8876ff12375813bdcd4ae4fe78f460c53a98","https://github.com/DangerBlack/n8n-node-sqlite3"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-q7m3-rhxg-7vxr","url":"https://osv.dev/vulnerability/GHSA-q7m3-rhxg-7vxr"}],"summary":"n8n-nodes-sqlite3 vulnerable to path traversal via user-controlled database file path (db_path parameter)"}