{"action":"Upgrade n8n to 1.123.27 or later.","affected":[{"fixed":"1.123.27","introduced":"0"},{"fixed":"2.14.1","introduced":"2.14.0"},{"fixed":"2.13.3","introduced":"2.0.0-rc.0"}],"component":"n8n","cve_ids":["CVE-2026-56356"],"ecosystem":"npm","epss":0.0025,"exploited":false,"fixed_versions":["1.123.27","2.14.1","2.13.3"],"ghsa_id":"GHSA-3c7f-5hgj-h279","id":"tcs_01M5KEWYQ1BTS8WP9VN1RBHKXC","modified_at":"2026-07-08T08:13:08.545063543Z","published_at":"2026-03-27T18:06:49Z","references":["https://osv.dev/vulnerability/GHSA-3c7f-5hgj-h279","https://github.com/n8n-io/n8n/security/advisories/GHSA-3c7f-5hgj-h279","https://github.com/n8n-io/n8n"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-3c7f-5hgj-h279","url":"https://osv.dev/vulnerability/GHSA-3c7f-5hgj-h279"}],"summary":"n8n has XSS in Chat Trigger Node through Custom CSS"}