n8nio/n8n:2.43.3 container image
Docker HubScanned 13 Oct 2026
Deployed by 1 of 18,108 indexed charts (latest versions) at this tag.Docker Hub all tags of n8nio/n8n
n8nio/n8n:2.43.3 resolved to d4eca183959b, scanned 13 Oct 2026: 137 findings, 0 critical; deployed by 1 chart, among them n8n.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
137 distinct on this digest
Findings for digest d4eca183959b as scanned on 13 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 13 Oct 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | ALPINE-CVE-2026-63073 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-19931 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-63076 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-18798 | openssl | 3.5.8-r0 |
| Medium | GHSA-8r5x-fm3f-whwj | handlebars | 4.7.10 |
| Medium | ALPINE-CVE-2026-66046 | expat | 2.8.4-r0 |
| Medium | ALPINE-CVE-2026-18924 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-14457 | openssl | 3.5.8-r0 |
| Medium | GHSA-27p8-2357-5qqv | @xmldom/ | 0.8.15 |
| Medium | GHSA-c7q8-3ch8-vqpv | @xmldom/ | 0.8.15 |
| Medium | GHSA-8344-3jmq-59r6 | @xmldom/ | 0.8.15 |
| Medium | GHSA-93r5-fhx6-vmg9 | @xmldom/ | 0.8.15 |
| Medium | GHSA-965w-775f-mr7g | @xmldom/ | 0.8.15 |
| Medium | ALPINE-CVE-2026-63072 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-80231 | curl | 8.22.0-r0 |
| Medium | GHSA-v5mp-jgw5-2x6j | toml | 4.1.2 |
| Medium | GHSA-2x7j-588g-ccc2 | nodemailer | 9.1.0 |
| Medium | GHSA-x4fp-j954-r2f4 | @xmldom/ | 0.8.15 |
| Low | ALPINE-CVE-2026-63075 | openssl | 3.5.8-r0 |
| Low | GHSA-p8wg-vrv2-v86f | handlebars | 4.7.10 |
| Low | GHSA-vfj7-8cjw-p6xm | braces | no fix listed |
| Low | ALPINE-CVE-2026-14456 | openssl | 3.5.8-r0 |
| Low | GHSA-x6jw-m9v5-85vh | simple-git | 4.0.1 |
| Low | GHSA-rcw4-f5rp-g42v | adm-zip | 0.6.1 |
| Low | GHSA-68fv-2mgg-jv7q | source-map-js | 1.2.2 |
| Low | ALPINE-CVE-2026-93990 | expat | 2.8.5-r0 |
| Low | ALPINE-CVE-2026-54874 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2026-60000 | openssh | 10.3_p1-r1 |
| Low | GHSA-7q85-xj36-vmfc | adm-zip | 0.6.1 |
| Low | GHSA-82x6-q7mm-w9cf | toml | 4.2.0 |
| Low | GHSA-vc2v-76pw-4v95 | compression | 1.8.2 |
| Low | GHSA-jqcg-44mw-7w3h | proxy-addr | 2.0.8 |
| Low | ALPINE-CVE-2026-60002 | openssh | 10.3_p1-r1 |
| Low | GHSA-g4wm-2vf7-vfgr | simple-git | 4.0.0 |
| Low | GHSA-ch52-4w7c-c8xp | http-cache-semantics | no fix listed |
| Low | ALPINE-CVE-2026-80229 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-76641 | expat | 2.8.4-r0 |
| Low | GHSA-mghh-pgcx-3jjj | axios | 1.20.0 |
| Low | ALPINE-CVE-2026-86145 | pcre2 | 10.48-r0 |
| Low | GHSA-v5rq-49vh-5v5c | @simple-git/ | 2.0.1 |
| Low | GHSA-542g-h47m-68v8 | axios | 1.20.0 |
| Low | GHSA-c29m-xwm3-cm6r | axios | 1.20.0 |
| Low | GHSA-858h-whjf-mvg5 | simple-git | 4.0.0 |
| Low | ALPINE-CVE-2026-82209 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-85091 | zlib | 1.3.2-r1 |
| Low | GHSA-pqg4-j6r4-53mv | shell-quote | 1.11.0 |
| Low | GHSA-6h8r-xr42-gp59 | @xmldom/ | 0.8.15 |
| Low | GHSA-x97p-jq2g-jp4f | axios | 1.20.0 |
| Low | ALPINE-CVE-2026-80255 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-13608 | curl | 8.22.0-r0 |