Triage security vulnerability alerts with NVD, Gemini, Supabase, and Jira
Needs changesNeeds changes. This template uses 1 thing(s) that n8n 3.0 removes: AI Agent v1 (old agent modes). 1 breaking item(s) found. Static check, last run 2026-10-19.
What this workflow does
This AI workflow has 17 nodes and runs when an HTTP POST request hits its webhook URL. Along the way it connects Redis, Jira Software, Supabase and Google Gemini Chat Model.
How it runs
Trigger: When an HTTP POST request hits its webhook URL.
- If: checks a condition and branches into true / false
- Increment Dedup Counter (Redis): incr
- Send Invalid Payload Response (Respond to Webhook): sends the response back to the webhook caller
- If: checks a condition and branches into true / false
- Fetch NVD Vulnerability Details (HTTP Request): calls an HTTP API
- Send Duplicate Response (Respond to Webhook): sends the response back to the webhook caller
- Fetch Server Info from Supabase (Supabase): get many
- Prepare LLM Context (Edit Fields (Set)): sets 4 fields: cve_id, ip_address, osv_summary…
- Risk Analyst Agent (AI Agent): runs an AI agent, with model: Gemini Model; output parser: Parse Structured Output
- Route by Risk Level (Switch): routes items into 1 branches
…plus 4 more steps. See the full node list below.
Services it uses
Before you upgrade to n8n 3.0
1 thing in this workflow is removed in n8n 3.0. Fix it before you upgrade:
- AI Agent v1 (old agent modes) in Risk Analyst Agent (v1.9): replace with Latest AI Agent node (Tools Agent). For SQL Agent, use a Postgres or MySQL tool with a recent AI Agent.
Rather not rewrite it? Many of these flows can be rebuilt in Make (free plan).
| Removed in 3.0 | Replace with |
|---|---|
| AI Agent v1 (old agent modes) Risk Analyst Agent (v1.9) | Latest AI Agent node (Tools Agent). For SQL Agent, use a Postgres or MySQL tool with a recent AI Agent. |
Nodes used (12)
- Webhook
n8n-nodes-base.webhook - If
n8n-nodes-base.if - Redis
n8n-nodes-base.redis - Edit Fields (Set)
n8n-nodes-base.set - Switch
n8n-nodes-base.switch - Jira Software
n8n-nodes-base.jira - Respond to Webhook
n8n-nodes-base.respondToWebhook - HTTP Request
n8n-nodes-base.httpRequest - Supabase
n8n-nodes-base.supabase - AI Agent
@n8n/n8n-nodes-langchain.agent - Google Gemini Chat Model
@n8n/n8n-nodes-langchain.lmChatGoogleGemini - Structured Output Parser
@n8n/n8n-nodes-langchain.outputParserStructured
From the author
Quick overview Youtube Video: https://youtu.be/8f-TzjNmbFI?si=V46dC5o45LGv28S0 This workflow receives vulnerability alerts via webhook, deduplicates repeated events with Redis, enriches CVE details from the NVD API and asset context from Supabase, uses Google…