n8nio/n8n:0.212.0 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of n8nio/n8n
n8nio/n8n:0.212.0 resolved to a9195bc499a3, scanned 14 Sept 2026: 524 findings, 8 critical, 3 on KEV; deployed by 1 chart, among them n8n.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
524 distinct on this digest
Findings for digest a9195bc499a3 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | GHSA-v98v-ff95-f3cpKEV | n8n | 1.120.4 |
| Critical | ALPINE-CVE-2023-38545 | curl | 8.4.0-r0 |
| Critical | ALPINE-CVE-2023-4863KEV | libwebp | 1.2.3-r2 |
| Critical | GHSA-ch3r-j5x3-6q2m | vm2 | 3.9.17 |
| Critical | GHSA-7jxr-cg7f-gpgv | vm2 | 3.9.15 |
| Critical | ALPINE-CVE-2022-23521 | git | 2.36.4-r0 |
| Critical | ALPINE-CVE-2023-44487KEV | nghttp2 | 1.47.0-r2 |
| Critical | ALPINE-CVE-2022-41903 | git | 2.36.4-r0 |
| High | ALPINE-CVE-2023-0286 | openssl | 1.1.1t-r0 |
| High | ALPINE-CVE-2023-25652 | git | 2.36.6-r0 |
| High | ALPINE-CVE-2023-2650 | openssl | 1.1.1u-r0 |
| High | GHSA-5xrp-6693-jjx9 | n8n | 1.123.17 |
| High | GHSA-r5fr-rjxr-66jc | lodash | 4.18.0 |
| High | GHSA-r5fr-rjxr-66jc | lodash-es | 4.18.0 |
| High | GHSA-vpcf-gvg4-6qwr | n8n | 1.123.22 |
| High | ALPINE-CVE-2022-4450 | openssl | 1.1.1t-r0 |
| High | GHSA-whpj-8f3w-67p5 | vm2 | 3.9.18 |
| High | ALPINE-CVE-2022-43551 | curl | 7.83.1-r5 |
| Medium | GHSA-v364-rw7m-3263 | n8n | 1.121.3 |
| Medium | GHSA-2p57-rm9w-gvfp | ip | no fix listed |
| Medium | GHSA-g644-9gfx-q4q4 | vm2 | no fix listed |
| Medium | GHSA-cchq-frgv-rjh5 | vm2 | 3.10.0 |
| Medium | GHSA-xj72-wvfv-8985 | vm2 | 3.9.16 |
| Medium | ALPINE-CVE-2022-4304 | openssl | 1.1.1t-r0 |
| Medium | ALPINE-CVE-2023-29007 | git | 2.36.6-r0 |
| Medium | GHSA-x3cc-x39p-42qx | fast-xml-parser | 4.1.2 |
| Medium | GHSA-fpw7-j2hg-69v5 | mysql2 | 3.9.4 |
| Medium | GHSA-p6mc-m468-83gw | lodash.set | no fix listed |
| Medium | GHSA-p6mc-m468-83gw | lodash.pick | no fix listed |
| Medium | ALPINE-CVE-2023-0215 | openssl | 1.1.1t-r0 |
| Medium | GHSA-pmh2-wpjm-fj45 | mysql2 | 3.9.8 |
| Medium | GHSA-6j2x-vhqr-qr7q | vm2 | 3.11.4 |
| Medium | GHSA-2w6w-674q-4c4q | handlebars | 4.7.9 |
| Medium | ALPINE-CVE-2023-0464 | openssl | 1.1.1t-r1 |
| Medium | ALPINE-CVE-2023-27534 | curl | 8.0.1-r0 |
| Medium | GHSA-fjxv-7rqg-78g4 | form-data | 4.0.4 |
| Medium | GHSA-mq3m-f8x3-579w | n8n | 2.27.4 |
| Medium | ALPINE-CVE-2023-27533 | curl | 8.0.1-r0 |
| Medium | GHSA-jqv5-7xpx-qj74 | sqlite3 | 5.1.5 |
| Medium | ALPINE-CVE-2020-21598 | libde265 | 1.0.11-r0 |
| Medium | GHSA-r275-fr43-pm7q | simple-git | 3.32.3 |
| Medium | GHSA-6cqr-8cfr-67f8 | n8n | 1.123.17 |
| Medium | GHSA-99p7-6v5w-7xg8 | vm2 | 3.10.2 |
| Medium | GHSA-c2qf-rxjj-qqgw | semver | 5.7.2 |
| Medium | GHSA-7c4h-vh2m-743m | n8n | 1.120.3 |
| Medium | GHSA-43fc-jf86-j433 | axios | 0.30.3 |
| Medium | GHSA-v37h-5mfm-c47c | vm2 | 3.11.0 |
| Medium | ALPINE-CVE-2023-28319 | curl | 8.1.0-r0 |
| Medium | GHSA-87r5-mp6g-5w5j | jsonpath | 1.3.0 |
| Medium | GHSA-47x8-96vw-5wg6 | vm2 | 3.11.0 |