Monitor n8n security advisories from GitHub, NVD, JPCERT and JVN with Claude and Slack
Ready for 3.0Ready for 3.0. This template uses no nodes that n8n 3.0 removes. No removed nodes, versions or helpers found. Static check, last run 2026-10-19.
What this workflow does
This AI workflow has 18 nodes and runs on a schedule (every hour). Along the way it connects Slack and Anthropic. It also calls api.github.com, services.nvd.nist.gov and github.com over HTTP.
How it runs
Trigger: On a schedule (every hour).
- Configuration (Edit Fields (Set)): sets 1 field: slackChannel
- Fetch GitHub Advisories (HTTP Request): calls api.github.com
- Fetch NVD CVEs (HTTP Request): calls services.nvd.nist.gov
- Fetch n8n Releases (HTTP Request): calls github.com
- Fetch JPCERT RSS (HTTP Request): calls jpcert.or.jp
- Fetch JVN RSS (HTTP Request): calls jvn.jp
- Wait for All Sources (Merge): merges the data from its input branches
- Parse Releases XML (XML): converts between XML and JSON
- Parse JPCERT XML (XML): converts between XML and JSON
- Parse JVN XML (XML): converts between XML and JSON
…plus 6 more steps. See the full node list below.
Services it uses
HTTP calls to: api.github.com, services.nvd.nist.gov, github.com, jpcert.or.jp, jvn.jp
Before you upgrade to n8n 3.0
Nothing in this workflow is removed in n8n 3.0, so it should import and run after the upgrade.
Nodes used (10)
- Schedule Trigger
n8n-nodes-base.scheduleTrigger - HTTP Request
n8n-nodes-base.httpRequest - XML
n8n-nodes-base.xml - Code
n8n-nodes-base.code - If
n8n-nodes-base.if - Slack
n8n-nodes-base.slack - No Operation, do nothing
n8n-nodes-base.noOp - Anthropic
@n8n/n8n-nodes-langchain.anthropic - Edit Fields (Set)
n8n-nodes-base.set - Merge
n8n-nodes-base.merge
From the author
Quick overview This workflow runs hourly to monitor n8n-related security information from GitHub Advisories, NVD (NIST) CVE data, GitHub n8n security release notes, and JPCERT/JVN RSS feeds, then summarizes new findings with Anthropic Claude and posts an…