n8n 2.0.0 Helm chart
helmforgeVerified publisherScored 14 Sept 2026
n8n workflow automation platform with SQLite or PostgreSQL and optional Redis queue mode
Version 2.0.0 2 days agoapp version 2.38.4 5Artifact Hub
n8n 2.0.0 deploys 2 container images: n8nio/n8n and n8nio/runners. Across them, 85 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-19931 in curl 8.21.0-r0, fixed in 8.22.0-r0. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| n8nio/ | 2.38.4 | 00962 | 772 |
| n8nio/ | 2.38.4 | 00014 | 91 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | ALPINE-CVE-2026-19931 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-63073 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-18924 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-18798 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-63076 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-14457 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-80231 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-66046 | expat | 2.8.4-r0 |
| Medium | ALPINE-CVE-2026-80229 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-14456 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2026-82209 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-80255 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-13608 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-63072 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2026-60002 | openssh | 10.3_p1-r1 |
| Low | ALPINE-CVE-2026-80230 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-76641 | expat | 2.8.4-r0 |
| Low | GHSA-93r5-fhx6-vmg9 | @xmldom/ | 0.8.15 |
| Low | GHSA-965w-775f-mr7g | @xmldom/ | 0.8.15 |
| Low | GHSA-27p8-2357-5qqv | @xmldom/ | 0.8.15 |
| Low | GHSA-c7q8-3ch8-vqpv | @xmldom/ | 0.8.15 |
| Low | GHSA-8344-3jmq-59r6 | @xmldom/ | 0.8.15 |
| Low | ALPINE-CVE-2026-54874 | openssl | 3.5.8-r0 |
| Low | GHSA-v5mp-jgw5-2x6j | toml | 4.1.2 |
| Low | ALPINE-CVE-2026-63075 | openssl | 3.5.8-r0 |
| Low | GHSA-x4fp-j954-r2f4 | @xmldom/ | 0.8.15 |
| Low | ALPINE-CVE-2026-60000 | openssh | 10.3_p1-r1 |
| Low | ALPINE-CVE-2026-82208 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-75803 | openssl | 3.5.8-r0 |
| Low | GHSA-2883-xcg3-v3hh | js-yaml | 4.3.2 |
| Low | GHSA-5m5x-9j46-h678 | element-plus | no fix listed |
| Low | GHSA-82x6-q7mm-w9cf | toml | 4.2.0 |
| Low | GHSA-qfvm-cv95-jqjf | multer | 2.3.0 |
| Low | GHSA-wc9g-mqfw-jrwm | multer | 2.3.0 |
| Low | ALPINE-CVE-2026-76956 | expat | 2.8.4-r0 |
| Low | GHSA-rmmh-p597-ppvv | showdown | no fix listed |
| Low | GHSA-535w-7cp7-47q4 | multer | 2.3.0 |
| Low | GHSA-6h8r-xr42-gp59 | @xmldom/ | 0.8.15 |
| Low | GHSA-38c4-r59v-3vqw | markdown-it | 14.1.1 |
| Low | ALPINE-CVE-2026-63074 | openssl | 3.5.8-r0 |
| Low | GHSA-p6gq-j5cr-w38f | nodemailer | 9.0.1 |
| Low | GHSA-gqvv-2mrq-wpjv | hono | 4.13.5 |
| Low | GHSA-6gmq-8vp8-gcm6 | @xmldom/ | 0.8.15 |
| Low | ALPINE-CVE-2026-60001 | openssh | 10.3_p1-r1 |
| Low | GHSA-22g5-r2x5-97cx | showdown | no fix listed |
| Low | GHSA-cr32-g25g-vxjj | showdown | no fix listed |
| Low | GHSA-crvj-82cr-hjcx | hono | 4.13.5 |
| Low | ALPINE-CVE-2026-59999 | openssh | 10.3_p1-r1 |
| Low | GHSA-j95f-988m-3j2f | @tiptap/ | 3.30.5 |
| Low | GHSA-jxwj-j7wr-gfrw | sanitize-html | 2.17.6 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 2.0.0latest | 2 days ago | 2.38.4 | 00976 | 863 |
| 1.6.17 | 4 days ago | 2.35.3 | 0011120 | 1,222 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.