n8nio/n8n:2.36.7 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of n8nio/n8n

n8nio/n8n:2.36.7 resolved to 14c4285bc303, scanned 14 Sept 2026: 100 findings, 0 critical; deployed by 2 charts, among them n8n and n8n.

Radar Score

1,03800991

100 findings on digest 14c4285bc303 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2.36.7resolves to	14c4285bc303	2 charts	5 days ago	00991	1,038

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

91 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest 14c4285bc303 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r1	3.5.8-r0
Low	ALPINE-CVE-2026-82209	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-80255	curl@8.21.0-r0	8.22.0-r0
Low	GHSA-hw8v-xxg5-vvvx	n8n@2.36.7	2.37.7
Low	GHSA-rgw5-rvv9-x895	brace-expansion@5.0.8	5.0.9
Low	ALPINE-CVE-2026-13608	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-63072	openssl@3.5.7-r1	3.5.8-r0
Low	ALPINE-CVE-2026-60002	openssh@10.3_p1-r0	10.3_p1-r1
Low	ALPINE-CVE-2026-80230	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-76641	expat@2.8.2-r0	2.8.4-r0
Low	GHSA-93r5-fhx6-vmg9	@xmldom/xmldom@0.8.14	0.8.15
Low	GHSA-965w-775f-mr7g	@xmldom/xmldom@0.8.14	0.8.15
Low	GHSA-27p8-2357-5qqv	@xmldom/xmldom@0.8.14	0.8.15
Low	GHSA-c7q8-3ch8-vqpv	@xmldom/xmldom@0.8.14	0.8.15
Low	GHSA-8344-3jmq-59r6	@xmldom/xmldom@0.8.14	0.8.15
Low	GHSA-hh89-3r9w-qj3j	n8n@2.36.7	2.37.7
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r1	3.5.8-r0
Low	GHSA-v5mp-jgw5-2x6j	toml@3.0.0	4.1.2
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r1	3.5.8-r0
Low	GHSA-x4fp-j954-r2f4	@xmldom/xmldom@0.8.14	0.8.15
Low	ALPINE-CVE-2026-60000	openssh@10.3_p1-r0	10.3_p1-r1
Low	ALPINE-CVE-2026-82208	curl@8.21.0-r0	8.22.0-r0
Low	GHSA-mwp4-54f8-5fhr	ip-address@10.2.0	10.3.1
Low	GHSA-6xcw-7xm6-48c6	n8n@2.36.7	2.37.7
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r1	3.5.8-r0
Low	GHSA-2883-xcg3-v3hh	js-yaml@4.3.1	4.3.2
Low	GHSA-5m5x-9j46-h678	element-plus@2.4.3	no fix listed
Low	GHSA-82x6-q7mm-w9cf	toml@3.0.0	4.2.0
Low	GHSA-qfvm-cv95-jqjf	multer@2.2.0	2.3.0
Low	GHSA-4xrf-jv44-h6hh	ip-address@10.2.0	10.2.2
Low	GHSA-wc9g-mqfw-jrwm	multer@2.2.0	2.3.0
Low	ALPINE-CVE-2026-76956	expat@2.8.2-r0	2.8.4-r0
Low	GHSA-rmmh-p597-ppvv	showdown@2.1.0	no fix listed
Low	GHSA-535w-7cp7-47q4	multer@2.2.0	2.3.0
Low	GHSA-6h8r-xr42-gp59	@xmldom/xmldom@0.8.14	0.8.15
Low	GHSA-j535-v25q-vx3q	n8n@2.36.7	2.37.7
Low	GHSA-22jq-vg5j-6vgg	ip-address@10.2.0	10.2.1
Low	GHSA-8cw4-87c7-c6xx	csv-parse@6.2.1	7.0.2
Low	GHSA-38c4-r59v-3vqw	markdown-it@13.0.2	14.1.1
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r1	3.5.8-r0
Low	GHSA-5jgf-p345-68v8	fast-uri@3.1.5	3.1.6
Low	GHSA-jqff-g426-hqxp	fast-uri@3.1.5	3.1.6
Low	GHSA-f65p-4m7j-42xc	fast-uri@3.1.5	3.1.6
Low	GHSA-fph4-wmhf-6fwf	fast-uri@3.1.5	3.1.6
Low	GHSA-p6gq-j5cr-w38f	nodemailer@8.0.10	9.0.1
Low	GHSA-gqvv-2mrq-wpjv	hono@4.12.34	4.13.5
Low	GHSA-6gmq-8vp8-gcm6	@xmldom/xmldom@0.8.14	0.8.15
Low	GHSA-34ff-336r-5q23	n8n@2.36.7	2.37.7
Low	GHSA-f2cp-m7mv-8jpv	n8n@2.36.7	2.37.7
Low	ALPINE-CVE-2026-60001	openssh@10.3_p1-r0	10.3_p1-r1

Used by

2 charts

Chart	Version	Tag	Containers
n8nn8n-openshiftVerified publisher	1.18.0	2.36.7	1
n8nopenshift	1.18.0	2.36.7	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.