@antonytm/n8n-nodes-test (>=0.1.5, <=0.2.1), @izzai/n8n-nodes-izzone (>=0.0.17, <=0.2.2) +38 more potentially affected by CVE-2025-56265 via n8n-workflow (>=1.24.0, <=1.103.3)

n8n-workflow NPM version =1.24.0, =0.1.5, =0.0.17, =0.2.0, =0.19.0, =0.4.0, =0.11.0, =1.1.0, =1.1.0, =1.1.0, =1.0.1, =0.1.0, =0.21.34, =1.51.0, =1.4.1, =1.52.0 - ape-test-7-editor-ui 1.48.0 and more Source cves: CVE-2025-56265 Source advisory: SNYK:JS-N8NWORKFLOW-12997432...

CVE-2025-56265

An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.100.1, and v1.101.1 allows attackers to execute arbitrary code via uploading a crafted HTML file...

CVE-2025-56265

The n8n platform (specifically versions v1.95.3 , v1.100.1 , and v1.101.1 ) is vulnerable to arbitrary file upload within the Chat Trigger component. This issue is caused by improper validation and handling of uploaded files, which allows an attacker to upload a crafted HTML file to execute arbit...