n8nio/n8n:2.39.5 container image

Docker Hub

Scanned 16 Sept 2026

Deployed by 1 of 17,790 indexed charts (latest versions) at this tag.Docker Hub all tags of n8nio/n8n

n8nio/n8n:2.39.5 resolved to cfa04788a34a, scanned 16 Sept 2026: 64 findings, 0 critical; deployed by 1 chart, among them n8n.

Radar Score

70800955

64 findings on digest cfa04788a34a · scanned 16 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2.39.5resolves to	cfa04788a34a	1 chart	today	00955	708

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

64 distinct on this digest

Findings for digest cfa04788a34a as scanned on 16 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 16 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2026-19931	curl@8.21.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-63073	openssl@3.5.7-r1	3.5.8-r0
Medium	ALPINE-CVE-2026-18924	curl@8.21.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-18798	openssl@3.5.7-r1	3.5.8-r0
Medium	ALPINE-CVE-2026-63076	openssl@3.5.7-r1	3.5.8-r0
Medium	ALPINE-CVE-2026-14457	openssl@3.5.7-r1	3.5.8-r0
Medium	ALPINE-CVE-2026-80231	curl@8.21.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-66046	expat@2.8.3-r1	2.8.4-r0
Medium	ALPINE-CVE-2026-80229	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r1	3.5.8-r0
Low	ALPINE-CVE-2026-82209	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-80255	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-63072	openssl@3.5.7-r1	3.5.8-r0
Low	ALPINE-CVE-2026-13608	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-60002	openssh@10.3_p1-r0	10.3_p1-r1
Low	ALPINE-CVE-2026-80230	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-76641	expat@2.8.3-r1	2.8.4-r0
Low	GHSA-93r5-fhx6-vmg9	@xmldom/xmldom@0.8.14	0.8.15
Low	GHSA-965w-775f-mr7g	@xmldom/xmldom@0.8.14	0.8.15
Low	GHSA-27p8-2357-5qqv	@xmldom/xmldom@0.8.14	0.8.15
Low	GHSA-c7q8-3ch8-vqpv	@xmldom/xmldom@0.8.14	0.8.15
Low	GHSA-8344-3jmq-59r6	@xmldom/xmldom@0.8.14	0.8.15
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r1	3.5.8-r0
Low	GHSA-v5mp-jgw5-2x6j	toml@3.0.0	4.1.2
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r1	3.5.8-r0
Low	GHSA-x4fp-j954-r2f4	@xmldom/xmldom@0.8.14	0.8.15
Low	ALPINE-CVE-2026-60000	openssh@10.3_p1-r0	10.3_p1-r1
Low	ALPINE-CVE-2026-82208	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r1	3.5.8-r0
Low	GHSA-5m5x-9j46-h678	element-plus@2.4.3	no fix listed
Low	GHSA-82x6-q7mm-w9cf	toml@3.0.0	4.2.0
Low	ALPINE-CVE-2026-76956	expat@2.8.3-r1	2.8.4-r0
Low	GHSA-rmmh-p597-ppvv	showdown@2.1.0	no fix listed
Low	GHSA-6h8r-xr42-gp59	@xmldom/xmldom@0.8.14	0.8.15
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r1	3.5.8-r0
Low	GHSA-38c4-r59v-3vqw	markdown-it@13.0.2	14.1.1
Low	GHSA-p6gq-j5cr-w38f	nodemailer@8.0.10	9.0.1
Low	GHSA-gqvv-2mrq-wpjv	hono@4.12.34	4.13.5
Low	GHSA-6gmq-8vp8-gcm6	@xmldom/xmldom@0.8.14	0.8.15
Low	ALPINE-CVE-2026-60001	openssh@10.3_p1-r0	10.3_p1-r1
Low	GHSA-22g5-r2x5-97cx	showdown@2.1.0	no fix listed
Low	GHSA-cr32-g25g-vxjj	showdown@2.1.0	no fix listed
Low	GHSA-crvj-82cr-hjcx	hono@4.12.34	4.13.5
Low	ALPINE-CVE-2026-59999	openssh@10.3_p1-r0	10.3_p1-r1
Low	GHSA-j95f-988m-3j2f	@tiptap/core@3.27.0	3.30.5
Low	GHSA-g6gw-c38x-mqfc	hono@4.12.34	4.13.5
Low	GHSA-6v5v-wf23-fmfq	markdown-it@13.0.2	14.2.0
Low	ALPINE-CVE-2026-76957	expat@2.8.3-r1	2.8.4-r0
Low	ALPINE-CVE-2026-59998	openssh@10.3_p1-r0	10.3_p1-r1
Low	GHSA-2x7j-588g-ccc2	nodemailer@8.0.10	9.1.0

Used by

1 chart

Chart	Version	Tag	Containers
n8nhelmforgeVerified publisher	2.0.1	2.39.5	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.