Lucene search
+L

1 matches found

OSV
OSV
added 2026/06/30 10:8 p.m.6 views

CVE-2026-56356 n8n - Stored Cross-Site Scripting in Chat Trigger Node Custom CSS Field

n8n contains a stored cross-site scripting vulnerability in the Chat Trigger node's Custom CSS field due to a misconfiguration of the sanitize-html library. Affected releases are those before 1.123.27, the 2.0.0 through 2.13.2 line, and 2.14.0 fixed in 1.123.27, 2.13.3, and 2.14.1. An authenticat...

5.1CVSS5.8AI score0.00177EPSS
SaveExploits0References4
Rows per page
Query Builder