n8nio/n8n:2.38.4 container image
Docker HubScanned 14 Sept 2026
Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of n8nio/n8n
n8nio/n8n:2.38.4 resolved to 5d9f0cc5672b, scanned 14 Sept 2026: 71 findings, 0 critical; deployed by 2 charts, among them n8n and n8n.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
62 distinct on this digest
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest 5d9f0cc5672b as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | ALPINE-CVE-2026-14456 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2026-82209 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-80255 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-13608 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-63072 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2026-60002 | openssh | 10.3_p1-r1 |
| Low | ALPINE-CVE-2026-80230 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-76641 | expat | 2.8.4-r0 |
| Low | GHSA-93r5-fhx6-vmg9 | @xmldom/ | 0.8.15 |
| Low | GHSA-965w-775f-mr7g | @xmldom/ | 0.8.15 |
| Low | GHSA-27p8-2357-5qqv | @xmldom/ | 0.8.15 |
| Low | GHSA-c7q8-3ch8-vqpv | @xmldom/ | 0.8.15 |
| Low | GHSA-8344-3jmq-59r6 | @xmldom/ | 0.8.15 |
| Low | ALPINE-CVE-2026-54874 | openssl | 3.5.8-r0 |
| Low | GHSA-v5mp-jgw5-2x6j | toml | 4.1.2 |
| Low | ALPINE-CVE-2026-63075 | openssl | 3.5.8-r0 |
| Low | GHSA-x4fp-j954-r2f4 | @xmldom/ | 0.8.15 |
| Low | ALPINE-CVE-2026-60000 | openssh | 10.3_p1-r1 |
| Low | ALPINE-CVE-2026-82208 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-75803 | openssl | 3.5.8-r0 |
| Low | GHSA-2883-xcg3-v3hh | js-yaml | 4.3.2 |
| Low | GHSA-5m5x-9j46-h678 | element-plus | no fix listed |
| Low | GHSA-82x6-q7mm-w9cf | toml | 4.2.0 |
| Low | GHSA-qfvm-cv95-jqjf | multer | 2.3.0 |
| Low | GHSA-wc9g-mqfw-jrwm | multer | 2.3.0 |
| Low | ALPINE-CVE-2026-76956 | expat | 2.8.4-r0 |
| Low | GHSA-rmmh-p597-ppvv | showdown | no fix listed |
| Low | GHSA-535w-7cp7-47q4 | multer | 2.3.0 |
| Low | GHSA-6h8r-xr42-gp59 | @xmldom/ | 0.8.15 |
| Low | GHSA-38c4-r59v-3vqw | markdown-it | 14.1.1 |
| Low | ALPINE-CVE-2026-63074 | openssl | 3.5.8-r0 |
| Low | GHSA-p6gq-j5cr-w38f | nodemailer | 9.0.1 |
| Low | GHSA-gqvv-2mrq-wpjv | hono | 4.13.5 |
| Low | GHSA-6gmq-8vp8-gcm6 | @xmldom/ | 0.8.15 |
| Low | ALPINE-CVE-2026-60001 | openssh | 10.3_p1-r1 |
| Low | GHSA-22g5-r2x5-97cx | showdown | no fix listed |
| Low | GHSA-cr32-g25g-vxjj | showdown | no fix listed |
| Low | GHSA-crvj-82cr-hjcx | hono | 4.13.5 |
| Low | ALPINE-CVE-2026-59999 | openssh | 10.3_p1-r1 |
| Low | GHSA-j95f-988m-3j2f | @tiptap/ | 3.30.5 |
| Low | GHSA-jxwj-j7wr-gfrw | sanitize-html | 2.17.6 |
| Low | GHSA-g6gw-c38x-mqfc | hono | 4.13.5 |
| Low | GHSA-6v5v-wf23-fmfq | markdown-it | 14.2.0 |
| Low | ALPINE-CVE-2026-76957 | expat | 2.8.4-r0 |
| Low | ALPINE-CVE-2026-59998 | openssh | 10.3_p1-r1 |
| Low | GHSA-2x7j-588g-ccc2 | nodemailer | 9.1.0 |
| Low | ALPINE-CVE-2026-59995 | openssh | 10.3_p1-r1 |
| Low | ALPINE-CVE-2026-59996 | openssh | 10.3_p1-r1 |
| Low | GHSA-4mjr-xmp4-gh2g | qs | 6.16.0 |
| Low | GHSA-vwc7-r8mq-g2x9 | adm-zip | no fix listed |