n8nio/n8n:0.136.0 container image
Docker HubScanned 29 Sept 2026
Deployed by 1 of 17,939 indexed charts (latest versions) at this tag.Docker Hub all tags of n8nio/n8n
n8nio/n8n:0.136.0 resolved to e8302e8bd402, scanned 29 Sept 2026: 436 findings, 4 critical; deployed by 1 chart, among them n8n.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
436 distinct on this digest
Findings for digest e8302e8bd402 as scanned on 29 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 29 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-m5w8-4gq2-6f8x | vm2 | 3.11.6 |
| Medium | GHSA-4r6h-8v6p-xvw6 | xlsx | no fix listed |
| Medium | GHSA-8hg8-63c5-gwmx | vm2 | 3.11.1 |
| Medium | GHSA-m63j-689w-3j35 | n8n | 1.123.27 |
| Medium | GHSA-f6ww-3ggp-fr8h | xmldom | no fix listed |
| Medium | GHSA-j759-j44w-7fr8 | xmldom | no fix listed |
| Medium | GHSA-hw58-p9xv-2mjh | vm2 | 3.11.0 |
| Medium | GHSA-8v38-pw62-9cw2 | url-parse | 1.5.7 |
| Medium | GHSA-p92q-9vqr-4j8v | axios | 0.32.0 |
| Medium | GHSA-25h7-pfq9-p65f | flatted | 3.4.0 |
| Medium | GHSA-x6wf-f3px-wcqx | xmldom | no fix listed |
| Medium | GHSA-62hf-57xw-28j9 | axios | 0.31.1 |
| Medium | GHSA-hfxv-24rg-xrqf | axios | 0.32.0 |
| Medium | GHSA-27p8-2357-5qqv | xmldom | no fix listed |
| Medium | GHSA-4w3w-2rp5-g8jm | xmldom | no fix listed |
| Medium | GHSA-c7q8-3ch8-vqpv | xmldom | no fix listed |
| Medium | GHSA-w2rr-34g9-rvrj | xmldom | no fix listed |
| Medium | GHSA-hh89-3r9w-qj3j | n8n | 2.37.7 |
| Medium | GHSA-8344-3jmq-59r6 | xmldom | no fix listed |
| Medium | GHSA-37ch-88jc-xwx2 | path-to-regexp | 0.1.13 |
| Medium | GHSA-9wv6-86v2-598j | path-to-regexp | 0.1.10 |
| Medium | GHSA-96hv-2xvq-fx4p | ws | 7.5.11 |
| Medium | GHSA-365g-vjw2-grx8 | n8n-nodes-base | no fix listed |
| Medium | GHSA-365g-vjw2-grx8 | n8n | no fix listed |
| Medium | GHSA-93r5-fhx6-vmg9 | xmldom | no fix listed |
| Medium | GHSA-965w-775f-mr7g | xmldom | no fix listed |
| Medium | GHSA-pf86-5x62-jrwf | axios | 0.31.1 |
| Medium | GHSA-5fg8-2547-mr8q | xmldom | no fix listed |
| Medium | GHSA-3xgq-45jj-v275 | cross-spawn | 6.0.6 |
| Medium | GHSA-3875-8gcx-7v46 | n8n | 2.20.0 |
| Medium | GHSA-2j5h-858j-5mpf | n8n | 1.123.55 |
| Medium | GHSA-57g9-58c2-xjg3 | n8n | 1.123.43 |
| Medium | GHSA-pfrx-2q88-qq97 | got | 11.8.5 |
| Medium | GHSA-3g43-6gmg-66jw | axios | 0.31.1 |
| Medium | GHSA-5pgg-2g8v-p4x9 | xlsx | no fix listed |
| Medium | GHSA-84hm-wfh8-c5pg | sse-channel | 4.0.1 |
| Medium | GHSA-gmc2-2x9w-cgh9 | vm2 | 3.11.6 |
| Medium | GHSA-3ppc-4f35-3m26 | minimatch | 3.1.3 |
| Medium | GHSA-2x7j-588g-ccc2 | nodemailer | 9.1.0 |
| Medium | GHSA-qwcr-r2fm-qrc7 | body-parser | 1.20.3 |
| Medium | GHSA-pmqw-72cg-wx85 | n8n | 1.123.55 |
| Medium | GHSA-34x7-hfp2-rc4v | tar | 7.5.7 |
| Medium | GHSA-22p9-wv53-3rq4 | linkify-it | 5.0.1 |
| Low | GHSA-vcc3-ghjq-m6fr | decode-uri-component | 0.5.0 |
| Low | GHSA-rhx6-c78j-4q9w | path-to-regexp | 0.1.12 |
| Low | GHSA-hj48-42vr-x3v9 | path-parse | 1.0.7 |
| Low | GHSA-ph9p-34f9-6g65 | tmp | 0.2.6 |
| Low | GHSA-c4cf-2hgv-2qv6 | vm2 | 3.11.4 |
| Low | GHSA-j5f8-grm9-p9fc | axios | 0.32.0 |
| Low | GHSA-8342-988q-86cr | n8n | 2.31.5 |