n8nio/n8n:2.44.4 container image
Docker HubScanned 21 Oct 2026
Deployed by 1 of 18,208 indexed charts (latest versions) at this tag.Docker Hub all tags of n8nio/n8n
n8nio/n8n:2.44.4 resolved to c72fa9f1bd9b, scanned 21 Oct 2026: 69 findings, 0 critical; deployed by 1 chart, among them n8n.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
69 distinct on this digest
Findings for digest c72fa9f1bd9b as scanned on 21 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 21 Oct 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-8r5x-fm3f-whwj | handlebars | 4.7.10 |
| Medium | GHSA-v5mp-jgw5-2x6j | toml | 4.1.2 |
| Medium | GHSA-2x7j-588g-ccc2 | nodemailer | 9.1.0 |
| Low | GHSA-p8wg-vrv2-v86f | handlebars | 4.7.10 |
| Low | GHSA-vfj7-8cjw-p6xm | braces | no fix listed |
| Low | ALPINE-CVE-2026-77214 | expat | 2.9.0-r0 |
| Low | GHSA-x6jw-m9v5-85vh | simple-git | 4.0.1 |
| Low | ALPINE-CVE-2026-4775 | tiff | 4.7.2-r0 |
| Low | GHSA-82x6-q7mm-w9cf | toml | 4.2.0 |
| Low | GHSA-r7fv-28h4-cvq7 | markdown-it | 14.3.2 |
| Low | GHSA-g4wm-2vf7-vfgr | simple-git | 4.0.0 |
| Low | GHSA-8r9p-f939-6h3c | follow-redirects | 1.16.1 |
| Low | GHSA-ch52-4w7c-c8xp | http-cache-semantics | no fix listed |
| Low | GHSA-v5rq-49vh-5v5c | @simple-git/ | 2.0.1 |
| Low | GHSA-858h-whjf-mvg5 | simple-git | 4.0.0 |
| Low | ALPINE-CVE-2026-85091 | zlib | 1.3.2-r1 |
| Low | GHSA-rfgv-xxqx-mfg5 | undici | 6.28.1 |
| Low | GHSA-5m5x-9j46-h678 | element-plus | no fix listed |
| Low | GHSA-6j4f-fj2g-mc7p | brace-expansion | 5.0.10 |
| Low | GHSA-qhr7-859c-m2p7 | brace-expansion | 5.0.11 |
| Low | GHSA-2vr4-cq9g-pvrc | ip-address | 10.5.1 |
| Low | GHSA-p6gq-j5cr-w38f | nodemailer | 9.0.1 |
| Low | GHSA-gqvv-2mrq-wpjv | hono | 4.13.5 |
| Low | GHSA-rmmh-p597-ppvv | showdown | no fix listed |
| Low | GHSA-v53p-9fqp-m79j | nodemailer | 10.0.6 |
| Low | GHSA-38c4-r59v-3vqw | markdown-it | 14.1.1 |
| Low | GHSA-wmmp-3585-3rmp | nodemailer | 9.1.0 |
| Low | GHSA-cc9r-2j5m-2m83 | nodemailer | 9.1.0 |
| Low | GHSA-m6rx-h84q-8r95 | @langchain/ | 1.3.1 |
| Low | GHSA-rpw4-54j3-4h4q | ip-address | 10.5.1 |
| Low | GHSA-j6r3-76f7-8jcv | ip-address | 10.7.1 |
| Low | GHSA-crvj-82cr-hjcx | hono | 4.13.5 |
| Low | GHSA-3wwx-pv8p-q78v | undici | 6.28.1 |
| Low | GHSA-rj75-hqrm-r3gf | postcss-selector-parser | 7.1.6 |
| Low | GHSA-3pph-fpjx-jg34 | multer | 2.4.0 |
| Low | GHSA-g6gw-c38x-mqfc | hono | 4.13.5 |
| Low | GHSA-22g5-r2x5-97cx | showdown | no fix listed |
| Low | GHSA-h3mg-xc3c-68pw | ip-address | 10.7.1 |
| Low | GHSA-cr32-g25g-vxjj | showdown | no fix listed |
| Low | GHSA-4p3w-j4w9-5jqw | moment | 2.31.0 |
| Low | ALPINE-CVE-2026-102633 | expat | 2.9.0-r0 |
| Low | GHSA-6v5v-wf23-fmfq | markdown-it | 14.2.0 |
| Low | GHSA-4mjr-xmp4-gh2g | qs | 6.16.0 |
| Low | GHSA-8m3c-c648-2xjj | nodemailer | 9.1.1 |
| Low | GHSA-hp3w-g68c-fv3c | sprintf-js | no fix listed |
| Low | GHSA-q3jh-wrc6-jgq8 | follow-redirects | 1.16.1 |
| Low | GHSA-8vvx-rff5-p5rq | nodemailer | 10.0.2 |
| Low | GHSA-5r4p-p66f-jhc7 | hono | 4.13.11 |
| Low | GHSA-jm63-cq47-j5jp | @modelcontextprotocol/ | 2.3.0 |
| Low | GHSA-q2hr-2g5m-vwhr | brace-expansion | 5.0.12 |