StackRadar

n8nio/n8n:2.40.7 container image

Docker Hub

Scanned 27 Sept 2026

Deployed by 1 of 17,911 indexed charts (latest versions) at this tag.Docker Hub all tags of n8nio/n8n

n8nio/n8n:2.40.7 resolved to ffeb52485f78, scanned 27 Sept 2026: 66 findings, 0 critical; deployed by 1 chart, among them n8n.

Radar Score

809002145

66 findings on digest ffeb52485f78 · scanned 27 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
2.40.7resolves toffeb52485f781 charttoday002145809

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

66 distinct on this digest

Findings for digest ffeb52485f78 as scanned on 27 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 27 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumALPINE-CVE-2026-63073openssl@3.5.7-r13.5.8-r0
MediumALPINE-CVE-2026-63076openssl@3.5.7-r13.5.8-r0
MediumALPINE-CVE-2026-19931curl@8.21.0-r08.22.0-r0
MediumALPINE-CVE-2026-18798openssl@3.5.7-r13.5.8-r0
MediumALPINE-CVE-2026-54874openssl@3.5.7-r13.5.8-r0
MediumALPINE-CVE-2026-66046expat@2.8.3-r12.8.4-r0
MediumALPINE-CVE-2026-60000openssh@10.3_p1-r010.3_p1-r1
MediumALPINE-CVE-2026-18924curl@8.21.0-r08.22.0-r0
MediumALPINE-CVE-2026-14457openssl@3.5.7-r13.5.8-r0
MediumALPINE-CVE-2026-63072openssl@3.5.7-r13.5.8-r0
MediumGHSA-27p8-2357-5qqv@xmldom/xmldom@0.8.140.8.15
MediumGHSA-c7q8-3ch8-vqpv@xmldom/xmldom@0.8.140.8.15
MediumALPINE-CVE-2026-76641expat@2.8.3-r12.8.4-r0
MediumGHSA-8344-3jmq-59r6@xmldom/xmldom@0.8.140.8.15
MediumALPINE-CVE-2026-60002openssh@10.3_p1-r010.3_p1-r1
MediumGHSA-93r5-fhx6-vmg9@xmldom/xmldom@0.8.140.8.15
MediumGHSA-965w-775f-mr7g@xmldom/xmldom@0.8.140.8.15
MediumALPINE-CVE-2026-80231curl@8.21.0-r08.22.0-r0
MediumGHSA-v5mp-jgw5-2x6jtoml@3.0.04.1.2
MediumGHSA-2x7j-588g-ccc2nodemailer@8.0.109.1.0
MediumGHSA-x4fp-j954-r2f4@xmldom/xmldom@0.8.140.8.15
LowALPINE-CVE-2026-63075openssl@3.5.7-r13.5.8-r0
LowALPINE-CVE-2026-14456openssl@3.5.7-r13.5.8-r0
LowGHSA-7q85-xj36-vmfcadm-zip@0.6.00.6.1
LowGHSA-82x6-q7mm-w9cftoml@3.0.04.2.0
LowALPINE-CVE-2026-93990expat@2.8.3-r12.8.5-r0
LowALPINE-CVE-2026-80229curl@8.21.0-r08.22.0-r0
LowALPINE-CVE-2026-82209curl@8.21.0-r08.22.0-r0
LowGHSA-6h8r-xr42-gp59@xmldom/xmldom@0.8.140.8.15
LowALPINE-CVE-2026-80255curl@8.21.0-r08.22.0-r0
LowALPINE-CVE-2026-60001openssh@10.3_p1-r010.3_p1-r1
LowALPINE-CVE-2026-13608curl@8.21.0-r08.22.0-r0
LowALPINE-CVE-2026-76956expat@2.8.3-r12.8.4-r0
LowALPINE-CVE-2026-82208curl@8.21.0-r08.22.0-r0
LowALPINE-CVE-2026-75803openssl@3.5.7-r13.5.8-r0
LowALPINE-CVE-2026-80230curl@8.21.0-r08.22.0-r0
LowGHSA-5m5x-9j46-h678element-plus@2.4.3no fix listed
LowGHSA-6gmq-8vp8-gcm6@xmldom/xmldom@0.8.140.8.15
LowALPINE-CVE-2026-59998openssh@10.3_p1-r010.3_p1-r1
LowGHSA-p6gq-j5cr-w38fnodemailer@8.0.109.0.1
LowGHSA-gqvv-2mrq-wpjvhono@4.12.344.13.5
LowGHSA-rmmh-p597-ppvvshowdown@2.1.0no fix listed
LowALPINE-CVE-2026-63074openssl@3.5.7-r13.5.8-r0
LowGHSA-wmmp-3585-3rmpnodemailer@8.0.109.1.0
LowGHSA-cc9r-2j5m-2m83nodemailer@8.0.109.1.0
LowGHSA-38c4-r59v-3vqwmarkdown-it@13.0.214.1.1
LowGHSA-crvj-82cr-hjcxhono@4.12.344.13.5
LowALPINE-CVE-2026-59996openssh@10.3_p1-r010.3_p1-r1
LowGHSA-g6gw-c38x-mqfchono@4.12.344.13.5
LowGHSA-22g5-r2x5-97cxshowdown@2.1.0no fix listed

Used by

1 chart
ChartVersionTagContainers
n8nhelmforgeVerified publisher2.1.12.40.71

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 27 Sept 2026 · advisories as of 27 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.