n8nio/n8n:0.136.0 container image
Docker HubScanned 29 Sept 2026
Deployed by 1 of 17,939 indexed charts (latest versions) at this tag.Docker Hub all tags of n8nio/n8n
n8nio/n8n:0.136.0 resolved to e8302e8bd402, scanned 29 Sept 2026: 436 findings, 4 critical; deployed by 1 chart, among them n8n.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
436 distinct on this digest
Findings for digest e8302e8bd402 as scanned on 29 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 29 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-p6gq-j5cr-w38f | nodemailer | 9.0.1 |
| Low | GHSA-f2cp-m7mv-8jpv | n8n | 1.123.76 |
| Low | GHSA-qpq4-pw7f-pp8w | n8n | 1.123.9 |
| Low | GHSA-vvjj-xcjg-gr5g | nodemailer | 8.0.5 |
| Low | GHSA-2v37-7h3g-55p8 | nanoid | 3.3.18 |
| Low | GHSA-xwg4-73v4-xw9w | nanoid | 3.3.12 |
| Low | GHSA-m7pr-hjqh-92cm | axios | 0.31.1 |
| Low | GHSA-p5gc-c584-jj6v | vm2 | 3.9.18 |
| Low | GHSA-hx4h-vr3m-45vh | n8n | 1.123.67 |
| Low | GHSA-mq3m-f8x3-579w | n8n | 2.27.4 |
| Low | GHSA-jqpw-qww5-cj4c | n8n | 2.24.0 |
| Low | GHSA-hv7x-3x78-gx53 | n8n | 1.123.55 |
| Low | GHSA-jvc7-762p-3743 | n8n | 2.25.7 |
| Low | GHSA-wmmp-3585-3rmp | nodemailer | 9.1.0 |
| Low | GHSA-35jj-42hp-8gmq | n8n | 2.37.7 |
| Low | GHSA-mmx7-hfxf-jppx | axios | 0.33.0 |
| Low | GHSA-v733-mwr6-fgcm | n8n | 1.123.55 |
| Low | GHSA-vhf8-cg2h-cg3p | n8n | 2.31.5 |
| Low | GHSA-42h7-m79w-wvg5 | n8n | 1.123.55 |
| Low | GHSA-h86q-fx34-gfjr | n8n | 2.24.0 |
| Low | GHSA-9ppj-qmqm-q256 | tar | 7.5.11 |
| Low | GHSA-pf83-w3f9-8m37 | n8n | 1.123.76 |
| Low | GHSA-9c38-2mcm-q7f7 | n8n | 2.25.7 |
| Low | GHSA-fpg6-x68q-5793 | n8n | 2.29.8 |
| Low | GHSA-w8wr-v893-vjvp | tar | 7.5.18 |
| Low | GHSA-7gmj-h9xc-mcxc | mailparser | 3.9.3 |
| Low | GHSA-vjf3-2gpj-233v | n8n | 2.8.0 |
| Low | GHSA-jp7m-xcgx-57qm | n8n | 1.123.61 |
| Low | GHSA-pq6c-vh67-xpm3 | n8n | 1.123.76 |
| Low | GHSA-58jc-rcg5-95f3 | n8n | 1.114.0 |
| Low | GHSA-hjrf-2m68-5959 | jsonwebtoken | 9.0.0 |
| Low | ALPINE-CVE-2021-42374 | busybox | 1.31.1-r11 |
| Low | GHSA-jqwr-vx3p-r266 | n8n | 1.123.67 |
| Low | GHSA-2434-3x6q-8r99 | n8n | 2.27.4 |
| Low | GHSA-869p-cjfg-cm3x | jws | 3.2.3 |
| Low | GHSA-w9j2-pvgh-6h63 | axios | 0.31.1 |
| Low | GHSA-378v-28hj-76wf | bn.js | 4.12.3 |
| Low | GHSA-2vx9-7wpg-88jq | n8n | 2.19.3 |
| Low | MAL-2022-4933 | npm-cli-docs | no fix listed |
| Low | GHSA-hwmj-qg4v-cvg9 | n8n | 1.123.61 |
| Low | GHSA-44fc-8fm5-q62h | convict | 6.2.5 |
| Low | GHSA-hf2r-9gf9-rwch | convict | 6.2.5 |
| Low | GHSA-cw9w-vv67-hf73 | n8n | 2.37.7 |
| Low | GHSA-mpf8-4hx2-7cjg | vm2 | 3.11.0 |
| Low | GHSA-7q8q-rj6j-mhjq | axios | 0.33.0 |
| Low | GHSA-cm22-4g7w-348p | serve-static | 1.16.0 |
| Low | GHSA-h3jj-5f3v-3685 | n8n | 2.25.7 |
| Low | GHSA-q5wm-mgqx-fv2f | n8n | 2.37.7 |
| Low | GHSA-3v7f-55p6-f55p | picomatch | 2.3.2 |
| Low | GHSA-gvwx-54wh-qm9j | tar | 7.5.17 |