n8n 1.6.17 Helm chart
helmforgeVerified publisherScored 14 Sept 2026
n8n workflow automation platform with SQLite or PostgreSQL and optional Redis queue mode
Version 1.6.17 4 days agoapp version 2.35.3 5Artifact Hub
n8n 1.6.17 deploys 2 container images: n8nio/n8n and n8nio/runners. Across them, 131 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-63073 in openssl 3.5.7-r0, fixed in 3.5.8-r0. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | ALPINE-CVE-2026-63073 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-18798 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-63076 | openssl | 3.5.8-r0 |
| Medium | GHSA-cfcw-xp6x-25gj | vm2 | 3.11.6 |
| Medium | ALPINE-CVE-2026-14457 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-66046 | expat | 2.8.4-r0 |
| Medium | GHSA-m283-3h24-438v | vm2 | 3.11.6 |
| Low | ALPINE-CVE-2026-14456 | openssl | 3.5.8-r0 |
| Low | GHSA-rgw5-rvv9-x895 | brace-expansion | 5.0.9 |
| Low | ALPINE-CVE-2026-63072 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2026-60002 | openssh | 10.3_p1-r1 |
| Low | GHSA-6g55-p6wh-862q | postcss | 8.5.12 |
| Low | ALPINE-CVE-2026-76641 | expat | 2.8.4-r0 |
| Low | ALPINE-CVE-2026-54874 | openssl | 3.5.8-r0 |
| Low | GHSA-v5mp-jgw5-2x6j | toml | 4.1.2 |
| Low | GHSA-gmc2-2x9w-cgh9 | vm2 | 3.11.6 |
| Low | ALPINE-CVE-2026-63075 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2026-60000 | openssh | 10.3_p1-r1 |
| Low | GHSA-v245-v573-v5vm | linkify-it | 5.0.2 |
| Low | GHSA-mwp4-54f8-5fhr | ip-address | 10.3.1 |
| Low | GHSA-r28c-9q8g-f849 | postcss | 8.5.18 |
| Low | ALPINE-CVE-2026-75803 | openssl | 3.5.8-r0 |
| Low | GHSA-82x6-q7mm-w9cf | toml | 4.2.0 |
| Low | GHSA-rmmh-p597-ppvv | showdown | no fix listed |
| Low | GHSA-xwg4-73v4-xw9w | nanoid | 3.3.12 |
| Low | ALPINE-CVE-2026-76956 | expat | 2.8.4-r0 |
| Low | GHSA-22jq-vg5j-6vgg | ip-address | 10.2.1 |
| Low | GHSA-4xrf-jv44-h6hh | ip-address | 10.2.2 |
| Low | GHSA-fxqj-rqcc-2cmp | postcss | 8.5.23 |
| Low | ALPINE-CVE-2026-76642 | util-linux | 2.42.3-r0 |
| Low | ALPINE-CVE-2026-63074 | openssl | 3.5.8-r0 |
| Low | GHSA-m5w8-4gq2-6f8x | vm2 | 3.11.6 |
| Low | GHSA-5jgf-p345-68v8 | fast-uri | 3.1.6 |
| Low | GHSA-jqff-g426-hqxp | fast-uri | 3.1.6 |
| Low | ALPINE-CVE-2026-19931 | curl | 8.22.0-r0 |
| Low | GHSA-f65p-4m7j-42xc | fast-uri | 3.1.6 |
| Low | GHSA-fph4-wmhf-6fwf | fast-uri | 3.1.6 |
| Low | GHSA-p6gq-j5cr-w38f | nodemailer | 9.0.1 |
| Low | GHSA-6gmq-8vp8-gcm6 | @xmldom/ | 0.8.15 |
| Low | ALPINE-CVE-2026-60001 | openssh | 10.3_p1-r1 |
| Low | GHSA-22g5-r2x5-97cx | showdown | no fix listed |
| Low | ALPINE-CVE-2026-18924 | curl | 8.22.0-r0 |
| Low | GHSA-cr32-g25g-vxjj | showdown | no fix listed |
| Low | GHSA-8j4g-w8fx-2239 | hono | 4.12.34 |
| Low | GHSA-28wg-ghj8-5hjv | nanoid | 3.3.16 |
| Low | ALPINE-CVE-2026-59999 | openssh | 10.3_p1-r1 |
| Low | GHSA-27p8-2357-5qqv | @xmldom/ | 0.8.15 |
| Low | GHSA-4w3w-2rp5-g8jm | @xmldom/ | 0.8.14 |
| Low | GHSA-8344-3jmq-59r6 | @xmldom/ | 0.8.15 |
| Low | GHSA-93r5-fhx6-vmg9 | @xmldom/ | 0.8.15 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 2.0.0latest | 2 days ago | 2.38.4 | 00976 | 863 |
| 1.6.17 | 4 days ago | 2.35.3 | 0011120 | 1,222 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.