n8nio/n8n:2.43.3 container image
Docker HubScanned 13 Oct 2026
Deployed by 1 of 18,117 indexed charts (latest versions) at this tag.Docker Hub all tags of n8nio/n8n
n8nio/n8n:2.43.3 resolved to d4eca183959b, scanned 13 Oct 2026: 137 findings, 0 critical; deployed by 1 chart, among them n8n.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
119 distinct on this digest
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest d4eca183959b as scanned on 13 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 13 Oct 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-2vr4-cq9g-pvrc | ip-address | 10.5.1 |
| Low | GHSA-p6gq-j5cr-w38f | nodemailer | 9.0.1 |
| Low | ALPINE-CVE-2026-76956 | expat | 2.8.4-r0 |
| Low | ALPINE-CVE-2026-63074 | openssl | 3.5.8-r0 |
| Low | GHSA-gqvv-2mrq-wpjv | hono | 4.13.5 |
| Low | GHSA-rmmh-p597-ppvv | showdown | no fix listed |
| Low | GHSA-v53p-9fqp-m79j | nodemailer | 10.0.6 |
| Low | ALPINE-CVE-2026-89157 | pcre2 | 10.48-r0 |
| Low | GHSA-38c4-r59v-3vqw | markdown-it | 14.1.1 |
| Low | GHSA-wmmp-3585-3rmp | nodemailer | 9.1.0 |
| Low | GHSA-cc9r-2j5m-2m83 | nodemailer | 9.1.0 |
| Low | GHSA-qw65-cvwx-89v3 | fast-uri | 3.1.7 |
| Low | GHSA-m6rx-h84q-8r95 | @langchain/ | 1.3.1 |
| Low | GHSA-rpw4-54j3-4h4q | ip-address | 10.5.1 |
| Low | ALPINE-CVE-2026-103111 | pcre2 | 10.49-r0 |
| Low | GHSA-j6r3-76f7-8jcv | ip-address | 10.7.1 |
| Low | GHSA-crvj-82cr-hjcx | hono | 4.13.5 |
| Low | GHSA-3wwx-pv8p-q78v | undici | 6.28.1 |
| Low | GHSA-m9gg-hp2v-232j | @grpc/ | 1.14.5 |
| Low | GHSA-rj75-hqrm-r3gf | postcss-selector-parser | 7.1.6 |
| Low | ALPINE-CVE-2026-60001 | openssh | 10.3_p1-r1 |
| Low | GHSA-3pph-fpjx-jg34 | multer | 2.4.0 |
| Low | GHSA-g6gw-c38x-mqfc | hono | 4.13.5 |
| Low | GHSA-22g5-r2x5-97cx | showdown | no fix listed |
| Low | GHSA-h3mg-xc3c-68pw | ip-address | 10.7.1 |
| Low | GHSA-6qxp-vccf-f47h | @modelcontextprotocol/ | 1.31.0 |
| Low | GHSA-cr32-g25g-vxjj | showdown | no fix listed |
| Low | ALPINE-CVE-2026-89160 | pcre2 | 10.48-r0 |
| Low | GHSA-4p3w-j4w9-5jqw | moment | 2.31.0 |
| Low | ALPINE-CVE-2026-89158 | pcre2 | 10.48-r0 |
| Low | ALPINE-CVE-2026-59999 | openssh | 10.3_p1-r1 |
| Low | GHSA-j95f-988m-3j2f | @tiptap/ | 3.30.5 |
| Low | GHSA-6v5v-wf23-fmfq | markdown-it | 14.2.0 |
| Low | GHSA-4mjr-xmp4-gh2g | qs | 6.16.0 |
| Low | GHSA-8m3c-c648-2xjj | nodemailer | 9.1.1 |
| Low | ALPINE-CVE-2026-89156 | pcre2 | 10.48-r0 |
| Low | ALPINE-CVE-2026-89161 | pcre2 | 10.48-r0 |
| Low | GHSA-hp3w-g68c-fv3c | sprintf-js | no fix listed |
| Low | GHSA-j5f4-cc29-5x44 | adm-zip | 0.6.1 |
| Low | GHSA-8vvx-rff5-p5rq | nodemailer | 10.0.2 |
| Low | ALPINE-CVE-2026-76957 | expat | 2.8.4-r0 |
| Low | ALPINE-CVE-2026-59998 | openssh | 10.3_p1-r1 |
| Low | GHSA-vwc7-r8mq-g2x9 | adm-zip | no fix listed |
| Low | GHSA-q2hr-2g5m-vwhr | brace-expansion | 5.0.12 |
| Low | GHSA-8238-w5pm-2374 | adm-zip | 0.6.1 |
| Low | ALPINE-CVE-2026-59995 | openssh | 10.3_p1-r1 |
| Low | ALPINE-CVE-2026-59996 | openssh | 10.3_p1-r1 |
| Low | GHSA-528h-pc64-c93x | stream-json | 3.5.0 |
| Low | GHSA-g2v6-rqmx-r4w6 | @vue/ | 3.5.42 |
| Low | GHSA-hqr4-qq8f-hg3x | stream-json | 3.6.0 |