n8nio/n8n:2.41.6 container image
Docker HubScanned 4 Oct 2026
Deployed by 1 of 17,988 indexed charts (latest versions) at this tag.Docker Hub all tags of n8nio/n8n
n8nio/n8n:2.41.6 resolved to 87e0bab2c931, scanned 4 Oct 2026: 115 findings, 0 critical; deployed by 1 chart, among them n8n.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
115 distinct on this digest
Findings for digest 87e0bab2c931 as scanned on 4 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 4 Oct 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | ALPINE-CVE-2026-63073 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-19931 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-63076 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-18798 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-66046 | expat | 2.8.4-r0 |
| Medium | ALPINE-CVE-2026-18924 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-14457 | openssl | 3.5.8-r0 |
| Medium | GHSA-27p8-2357-5qqv | @xmldom/ | 0.8.15 |
| Medium | GHSA-c7q8-3ch8-vqpv | @xmldom/ | 0.8.15 |
| Medium | GHSA-8344-3jmq-59r6 | @xmldom/ | 0.8.15 |
| Medium | GHSA-93r5-fhx6-vmg9 | @xmldom/ | 0.8.15 |
| Medium | GHSA-965w-775f-mr7g | @xmldom/ | 0.8.15 |
| Medium | ALPINE-CVE-2026-63072 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-80231 | curl | 8.22.0-r0 |
| Medium | GHSA-v5mp-jgw5-2x6j | toml | 4.1.2 |
| Medium | GHSA-2x7j-588g-ccc2 | nodemailer | 9.1.0 |
| Medium | GHSA-x4fp-j954-r2f4 | @xmldom/ | 0.8.15 |
| Low | ALPINE-CVE-2026-63075 | openssl | 3.5.8-r0 |
| Low | GHSA-vfj7-8cjw-p6xm | braces | no fix listed |
| Low | ALPINE-CVE-2026-14456 | openssl | 3.5.8-r0 |
| Low | GHSA-rcw4-f5rp-g42v | adm-zip | 0.6.1 |
| Low | ALPINE-CVE-2026-93990 | expat | 2.8.5-r0 |
| Low | ALPINE-CVE-2026-54874 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2026-60000 | openssh | 10.3_p1-r1 |
| Low | GHSA-7q85-xj36-vmfc | adm-zip | 0.6.1 |
| Low | GHSA-82x6-q7mm-w9cf | toml | 4.2.0 |
| Low | ALPINE-CVE-2026-60002 | openssh | 10.3_p1-r1 |
| Low | ALPINE-CVE-2026-80229 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-76641 | expat | 2.8.4-r0 |
| Low | GHSA-ch52-4w7c-c8xp | http-cache-semantics | no fix listed |
| Low | GHSA-mghh-pgcx-3jjj | axios | 1.20.0 |
| Low | ALPINE-CVE-2026-86145 | pcre2 | 10.48-r0 |
| Low | GHSA-542g-h47m-68v8 | axios | 1.20.0 |
| Low | GHSA-c29m-xwm3-cm6r | axios | 1.20.0 |
| Low | ALPINE-CVE-2026-82209 | curl | 8.22.0-r0 |
| Low | GHSA-6h8r-xr42-gp59 | @xmldom/ | 0.8.15 |
| Low | GHSA-x97p-jq2g-jp4f | axios | 1.20.0 |
| Low | ALPINE-CVE-2026-80255 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-13608 | curl | 8.22.0-r0 |
| Low | GHSA-3pq3-5fj3-cg6v | axios | 1.20.0 |
| Low | GHSA-4hqw-qxg8-jxx2 | axios | 1.20.0 |
| Low | ALPINE-CVE-2026-75803 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2026-82208 | curl | 8.22.0-r0 |
| Low | GHSA-rfgv-xxqx-mfg5 | undici | 6.28.1 |
| Low | GHSA-58mr-gqgx-xq4g | fast-uri | 3.1.7 |
| Low | ALPINE-CVE-2026-80230 | curl | 8.22.0-r0 |
| Low | GHSA-5m5x-9j46-h678 | element-plus | no fix listed |
| Low | GHSA-6j4f-fj2g-mc7p | brace-expansion | 5.0.10 |
| Low | GHSA-qhr7-859c-m2p7 | brace-expansion | 5.0.11 |
| Low | GHSA-6gmq-8vp8-gcm6 | @xmldom/ | 0.8.15 |