Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-56265
8.8
HIGHCVSS v3
Published
September 8, 2025
Affected
6 projects
Assigned by
MITRE
Severity scale
010
Description
An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.100.1, and v1.101.1 allows attackers to execute arbitrary code via uploading a crafted HTML file.
n8n-io/n8n
GitHubFair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.
GitHubFair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.= 1.95.3, = 1.100.1, = 1.101.1NVD
n8nio/n8n
Docker HubFree and open fair-code licensed node based Workflow Automation Tool.
Docker HubFree and open fair-code licensed node based Workflow Automation Tool.= 1.95.3, = 1.100.1, = 1.101.1NVD
NPM