n8nio/n8n:2.38.4 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of n8nio/n8n

n8nio/n8n:2.38.4 resolved to 5d9f0cc5672b, scanned 14 Sept 2026: 71 findings, 0 critical; deployed by 2 charts, among them n8n and n8n.

Radar Score

77200962

71 findings on digest 5d9f0cc5672b · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2.38.4resolves to	5d9f0cc5672b	2 charts	3 days ago	00962	772

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

71 distinct on this digest

Findings for digest 5d9f0cc5672b as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2026-19931	curl@8.21.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-63073	openssl@3.5.7-r1	3.5.8-r0
Medium	ALPINE-CVE-2026-18924	curl@8.21.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-18798	openssl@3.5.7-r1	3.5.8-r0
Medium	ALPINE-CVE-2026-63076	openssl@3.5.7-r1	3.5.8-r0
Medium	ALPINE-CVE-2026-14457	openssl@3.5.7-r1	3.5.8-r0
Medium	ALPINE-CVE-2026-80231	curl@8.21.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-66046	expat@2.8.3-r1	2.8.4-r0
Medium	ALPINE-CVE-2026-80229	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r1	3.5.8-r0
Low	ALPINE-CVE-2026-82209	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-80255	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-13608	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-63072	openssl@3.5.7-r1	3.5.8-r0
Low	ALPINE-CVE-2026-60002	openssh@10.3_p1-r0	10.3_p1-r1
Low	ALPINE-CVE-2026-80230	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-76641	expat@2.8.3-r1	2.8.4-r0
Low	GHSA-93r5-fhx6-vmg9	@xmldom/xmldom@0.8.14	0.8.15
Low	GHSA-965w-775f-mr7g	@xmldom/xmldom@0.8.14	0.8.15
Low	GHSA-27p8-2357-5qqv	@xmldom/xmldom@0.8.14	0.8.15
Low	GHSA-c7q8-3ch8-vqpv	@xmldom/xmldom@0.8.14	0.8.15
Low	GHSA-8344-3jmq-59r6	@xmldom/xmldom@0.8.14	0.8.15
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r1	3.5.8-r0
Low	GHSA-v5mp-jgw5-2x6j	toml@3.0.0	4.1.2
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r1	3.5.8-r0
Low	GHSA-x4fp-j954-r2f4	@xmldom/xmldom@0.8.14	0.8.15
Low	ALPINE-CVE-2026-60000	openssh@10.3_p1-r0	10.3_p1-r1
Low	ALPINE-CVE-2026-82208	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r1	3.5.8-r0
Low	GHSA-2883-xcg3-v3hh	js-yaml@4.3.1	4.3.2
Low	GHSA-5m5x-9j46-h678	element-plus@2.4.3	no fix listed
Low	GHSA-82x6-q7mm-w9cf	toml@3.0.0	4.2.0
Low	GHSA-qfvm-cv95-jqjf	multer@2.2.0	2.3.0
Low	GHSA-wc9g-mqfw-jrwm	multer@2.2.0	2.3.0
Low	ALPINE-CVE-2026-76956	expat@2.8.3-r1	2.8.4-r0
Low	GHSA-rmmh-p597-ppvv	showdown@2.1.0	no fix listed
Low	GHSA-535w-7cp7-47q4	multer@2.2.0	2.3.0
Low	GHSA-6h8r-xr42-gp59	@xmldom/xmldom@0.8.14	0.8.15
Low	GHSA-38c4-r59v-3vqw	markdown-it@13.0.2	14.1.1
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r1	3.5.8-r0
Low	GHSA-p6gq-j5cr-w38f	nodemailer@8.0.10	9.0.1
Low	GHSA-gqvv-2mrq-wpjv	hono@4.12.34	4.13.5
Low	GHSA-6gmq-8vp8-gcm6	@xmldom/xmldom@0.8.14	0.8.15
Low	ALPINE-CVE-2026-60001	openssh@10.3_p1-r0	10.3_p1-r1
Low	GHSA-22g5-r2x5-97cx	showdown@2.1.0	no fix listed
Low	GHSA-cr32-g25g-vxjj	showdown@2.1.0	no fix listed
Low	GHSA-crvj-82cr-hjcx	hono@4.12.34	4.13.5
Low	ALPINE-CVE-2026-59999	openssh@10.3_p1-r0	10.3_p1-r1
Low	GHSA-j95f-988m-3j2f	@tiptap/core@3.27.0	3.30.5
Low	GHSA-jxwj-j7wr-gfrw	sanitize-html@2.17.5	2.17.6

Used by

2 charts

Chart	Version	Tag	Containers
n8ncommunity-chartsVerified publisher	1.24.40	2.38.4	1
n8nhelmforgeVerified publisher	2.0.0	2.38.4	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.