StackRadar

n8nio/n8n:2.36.8 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of n8nio/n8n

n8nio/n8n:2.36.8 resolved to cfe2704ff858, scanned 14 Sept 2026: 100 findings, 0 critical; deployed by 1 chart, among them n8n.

Radar Score

1,03800991

100 findings on digest cfe2704ff858 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
2.36.8resolves tocfe2704ff8581 chartyesterday009911,038

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

91 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest cfe2704ff858 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowALPINE-CVE-2026-14456openssl@3.5.7-r13.5.8-r0
LowALPINE-CVE-2026-82209curl@8.21.0-r08.22.0-r0
LowALPINE-CVE-2026-80255curl@8.21.0-r08.22.0-r0
LowGHSA-hw8v-xxg5-vvvxn8n@2.36.82.37.7
LowGHSA-rgw5-rvv9-x895brace-expansion@5.0.85.0.9
LowALPINE-CVE-2026-13608curl@8.21.0-r08.22.0-r0
LowALPINE-CVE-2026-63072openssl@3.5.7-r13.5.8-r0
LowALPINE-CVE-2026-60002openssh@10.3_p1-r010.3_p1-r1
LowALPINE-CVE-2026-80230curl@8.21.0-r08.22.0-r0
LowALPINE-CVE-2026-76641expat@2.8.2-r02.8.4-r0
LowGHSA-93r5-fhx6-vmg9@xmldom/xmldom@0.8.140.8.15
LowGHSA-965w-775f-mr7g@xmldom/xmldom@0.8.140.8.15
LowGHSA-27p8-2357-5qqv@xmldom/xmldom@0.8.140.8.15
LowGHSA-c7q8-3ch8-vqpv@xmldom/xmldom@0.8.140.8.15
LowGHSA-8344-3jmq-59r6@xmldom/xmldom@0.8.140.8.15
LowGHSA-hh89-3r9w-qj3jn8n@2.36.82.37.7
LowALPINE-CVE-2026-54874openssl@3.5.7-r13.5.8-r0
LowGHSA-v5mp-jgw5-2x6jtoml@3.0.04.1.2
LowALPINE-CVE-2026-63075openssl@3.5.7-r13.5.8-r0
LowGHSA-x4fp-j954-r2f4@xmldom/xmldom@0.8.140.8.15
LowALPINE-CVE-2026-60000openssh@10.3_p1-r010.3_p1-r1
LowALPINE-CVE-2026-82208curl@8.21.0-r08.22.0-r0
LowGHSA-mwp4-54f8-5fhrip-address@10.2.010.3.1
LowGHSA-6xcw-7xm6-48c6n8n@2.36.82.37.7
LowALPINE-CVE-2026-75803openssl@3.5.7-r13.5.8-r0
LowGHSA-2883-xcg3-v3hhjs-yaml@4.3.14.3.2
LowGHSA-5m5x-9j46-h678element-plus@2.4.3no fix listed
LowGHSA-82x6-q7mm-w9cftoml@3.0.04.2.0
LowGHSA-qfvm-cv95-jqjfmulter@2.2.02.3.0
LowGHSA-4xrf-jv44-h6hhip-address@10.2.010.2.2
LowGHSA-wc9g-mqfw-jrwmmulter@2.2.02.3.0
LowALPINE-CVE-2026-76956expat@2.8.2-r02.8.4-r0
LowGHSA-rmmh-p597-ppvvshowdown@2.1.0no fix listed
LowGHSA-535w-7cp7-47q4multer@2.2.02.3.0
LowGHSA-6h8r-xr42-gp59@xmldom/xmldom@0.8.140.8.15
LowGHSA-j535-v25q-vx3qn8n@2.36.82.37.7
LowGHSA-22jq-vg5j-6vggip-address@10.2.010.2.1
LowGHSA-8cw4-87c7-c6xxcsv-parse@6.2.17.0.2
LowGHSA-38c4-r59v-3vqwmarkdown-it@13.0.214.1.1
LowALPINE-CVE-2026-63074openssl@3.5.7-r13.5.8-r0
LowGHSA-5jgf-p345-68v8fast-uri@3.1.53.1.6
LowGHSA-jqff-g426-hqxpfast-uri@3.1.53.1.6
LowGHSA-f65p-4m7j-42xcfast-uri@3.1.53.1.6
LowGHSA-fph4-wmhf-6fwffast-uri@3.1.53.1.6
LowGHSA-p6gq-j5cr-w38fnodemailer@8.0.109.0.1
LowGHSA-gqvv-2mrq-wpjvhono@4.12.344.13.5
LowGHSA-6gmq-8vp8-gcm6@xmldom/xmldom@0.8.140.8.15
LowGHSA-34ff-336r-5q23n8n@2.36.82.37.7
LowGHSA-f2cp-m7mv-8jpvn8n@2.36.82.37.7
LowALPINE-CVE-2026-60001openssh@10.3_p1-r010.3_p1-r1

Used by

1 chart
ChartVersionTagContainers
n8nopen-8gears2.1.12.36.81

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.