Vulnerability Reportn8nio/n8n:2.40.7-09b3ce6

n8nio/n8n:2.40.7-09b3ce6n8nio/n8n:2.40.7
digestsha256:ffeb52485f78b1b06c9a832205853cf75da72a07a514c9a27724df85979d6c34

Executive Summary

Last scanned:

Threat Score
50/100CAUTION
Reputation
TRUSTED

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. An attacker could exploit CVE-2026-82659 to read local files or trigger server-side requests through nodemailer, or CVE-2026-93990 to inject malformed XML through libexpat, impacting n8n workflows that process untrusted input. Disabling nodemailer raw message options would eliminate the CVE-2026-82659 exposure, and upgrading affected dependencies to fixed versions would remove the top exposed findings. Note that CVE-2026-82659 applies only with authenticated access and use of nodemailer raw message options. The image is verified and digest-pinned, but it still carries 56 exposed findings, including 9 at severity 6.0 or higher and a maximum exposed severity of 6.38.

Hardening plan for this image · 3 steps

Included in Pro

Scanning procedure

  1. Vulnerability scan
    Full CVE sweep across OS packages and app dependencies
  2. Exploitability check
    CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
  3. Reachability analysis
    Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
  4. Runtime verification
    Live-container probes: exposed endpoints, feature flags, real defaults
  5. Supply chain analysis
    Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
  6. Hardening recommendations
    A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

143 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-76956MEDIUM6.38
libexpat
2.8.3-r1
fixed in 2.8.4-r0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-93990MEDIUM6.38
libexpat
2.8.3-r1
fixed in 2.8.5-r0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-83613MEDIUM6.38
@xmldom/xmldom
0.8.14
fixed in 0.8.15, 0.9.12
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-83614MEDIUM6.38
@xmldom/xmldom
0.8.14
fixed in 0.8.15, 0.9.12
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-83615MEDIUM6.38
@xmldom/xmldom
0.8.14
fixed in 0.8.15, 0.9.12
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-83616MEDIUM6.38
@xmldom/xmldom
0.8.14
fixed in 0.8.15, 0.9.12
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-83619MEDIUM6.38
@xmldom/xmldom
0.8.14
fixed in 0.8.15
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-82417MEDIUM6.38
qs
6.15.2
fixed in 6.16.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-82659MEDIUM6.03
nodemailer
8.0.10
fixed in 9.0.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-63073MEDIUM5.9
libcrypto3
3.5.7-r1
fixed in 3.5.8-r0
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-63073MEDIUM5.9
libssl3
3.5.7-r1
fixed in 3.5.8-r0
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-77301MEDIUM5.52
adm-zip
0.6.0
fixed in 0.6.1
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-76845MEDIUM5.52
adm-zip
0.6.0
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-71429MEDIUM5.27
stream-json
1.9.1
fixed in 3.5.0
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-59710MEDIUM5.18
showdown
2.1.0
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-59711MEDIUM5.18
showdown
2.1.0
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-2327MEDIUM5.1
markdown-it
13.0.2
fixed in 14.1.1
0.7%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-18798MEDIUM4.5
libcrypto3
3.5.7-r1
fixed in 3.5.8-r0
1.5%
Low-Moderate Risk
Directly Exposed
CVE-2026-63072MEDIUM4.5
libcrypto3
3.5.7-r1
fixed in 3.5.8-r0
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2026-63076MEDIUM4.5
libcrypto3
3.5.7-r1
fixed in 3.5.8-r0
1.8%
Low-Moderate Risk
Directly Exposed
CVE-2026-14457MEDIUM4.5
libcrypto3
3.5.7-r1
fixed in 3.5.8-r0
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2026-54874MEDIUM4.5
libcrypto3
3.5.7-r1
fixed in 3.5.8-r0
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2026-18798MEDIUM4.5
libssl3
3.5.7-r1
fixed in 3.5.8-r0
1.5%
Low-Moderate Risk
Directly Exposed
CVE-2026-63072MEDIUM4.5
libssl3
3.5.7-r1
fixed in 3.5.8-r0
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2026-63076MEDIUM4.5
libssl3
3.5.7-r1
fixed in 3.5.8-r0
1.8%
Low-Moderate Risk
Directly Exposed
CVE-2026-14457MEDIUM4.5
libssl3
3.5.7-r1
fixed in 3.5.8-r0
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2026-54874MEDIUM4.5
libssl3
3.5.7-r1
fixed in 3.5.8-r0
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2026-83610MEDIUM4.5
@xmldom/xmldom
0.8.14
fixed in 0.8.15, 0.9.12
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-83611MEDIUM4.5
@xmldom/xmldom
0.8.14
fixed in 0.8.15, 0.9.12
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-48988MEDIUM4.5
markdown-it
13.0.2
fixed in 14.2.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-76957LOW3.98
libexpat
2.8.3-r1
fixed in 2.8.4-r0
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-14456LOW3.83
libcrypto3
3.5.7-r1
fixed in 3.5.8-r0
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-63074LOW3.83
libcrypto3
3.5.7-r1
fixed in 3.5.8-r0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-63075LOW3.83
libcrypto3
3.5.7-r1
fixed in 3.5.8-r0
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-66046LOW3.83
libexpat
2.8.3-r1
fixed in 2.8.4-r0
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-76641LOW3.83
libexpat
2.8.3-r1
fixed in 2.8.4-r0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-14456LOW3.83
libssl3
3.5.7-r1
fixed in 3.5.8-r0
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-63074LOW3.83
libssl3
3.5.7-r1
fixed in 3.5.8-r0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-63075LOW3.83
libssl3
3.5.7-r1
fixed in 3.5.8-r0
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-59999LOW3.82
openssh-server
10.3_p1-r0
fixed in 10.3_p1-r1
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-59999LOW3.82
openssh-sftp-server
10.3_p1-r0
fixed in 10.3_p1-r1
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-19931LOW3.31
libcurl
8.21.0-r0
fixed in 8.22.0-r0
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-59998LOW3.31
openssh
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-60001LOW3.31
openssh
10.3_p1-r0
fixed in 10.3_p1-r1
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-59998LOW3.31
openssh-keygen
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-60001LOW3.31
openssh-keygen
10.3_p1-r0
fixed in 10.3_p1-r1
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-59998LOW3.31
openssh-server
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-60001LOW3.31
openssh-server
10.3_p1-r0
fixed in 10.3_p1-r1
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-59998LOW3.31
openssh-sftp-server
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-60001LOW3.31
openssh-sftp-server
10.3_p1-r0
fixed in 10.3_p1-r1
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-75803LOW3.15
libcrypto3
3.5.7-r1
fixed in 3.5.8-r0
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-75803LOW3.15
libssl3
3.5.7-r1
fixed in 3.5.8-r0
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-82562LOW3.15
qs
6.15.2
fixed in 6.16.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-63376LOW3.15
toml
3.0.0
fixed in 4.1.2
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-77465LOW2.98
toml
3.0.0
fixed in 4.2.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-60002LOW2.87
openssh
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-60002LOW2.87
openssh-keygen
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-60002LOW2.87
openssh-server
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-60002LOW2.87
openssh-sftp-server
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-73282LOW2.86
openssh
10.3_p1-r0
fixed in 10.3_p1-r1
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-73282LOW2.86
openssh-keygen
10.3_p1-r0
fixed in 10.3_p1-r1
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-73282LOW2.86
openssh-server
10.3_p1-r0
fixed in 10.3_p1-r1
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-73282LOW2.86
openssh-sftp-server
10.3_p1-r0
fixed in 10.3_p1-r1
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-59995LOW2.75
openssh
10.3_p1-r0
fixed in 10.3_p1-r1
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-59996LOW2.75
openssh
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-59997LOW2.75
openssh
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-73283LOW2.75
openssh
10.3_p1-r0
fixed in 10.3_p1-r1
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-59995LOW2.75
openssh-keygen
10.3_p1-r0
fixed in 10.3_p1-r1
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-59996LOW2.75
openssh-keygen
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-59997LOW2.75
openssh-keygen
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-73283LOW2.75
openssh-keygen
10.3_p1-r0
fixed in 10.3_p1-r1
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-59995LOW2.75
openssh-server
10.3_p1-r0
fixed in 10.3_p1-r1
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-59996LOW2.75
openssh-server
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-59997LOW2.75
openssh-server
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-73283LOW2.75
openssh-server
10.3_p1-r0
fixed in 10.3_p1-r1
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-59995LOW2.75
openssh-sftp-server
10.3_p1-r0
fixed in 10.3_p1-r1
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-59996LOW2.75
openssh-sftp-server
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-59997LOW2.75
openssh-sftp-server
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-73283LOW2.75
openssh-sftp-server
10.3_p1-r0
fixed in 10.3_p1-r1
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-60000LOW2.7
openssh
10.3_p1-r0
fixed in 10.3_p1-r1
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-60000LOW2.7
openssh-keygen
10.3_p1-r0
fixed in 10.3_p1-r1
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-60000LOW2.7
openssh-server
10.3_p1-r0
fixed in 10.3_p1-r1
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-60000LOW2.7
openssh-sftp-server
10.3_p1-r0
fixed in 10.3_p1-r1
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-83608LOW2.63
@xmldom/xmldom
0.8.14
fixed in 0.8.15, 0.9.12
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-82208LOW2.45
libcurl
8.21.0-r0
fixed in 8.22.0-r0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-59999LOW2.29
openssh
10.3_p1-r0
fixed in 10.3_p1-r1
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-59999LOW2.29
openssh-keygen
10.3_p1-r0
fixed in 10.3_p1-r1
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-13608LOW1.89
libcurl
8.21.0-r0
fixed in 8.22.0-r0
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-18924LOW1.89
libcurl
8.21.0-r0
fixed in 8.22.0-r0
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-80230LOW1.89
libcurl
8.21.0-r0
fixed in 8.22.0-r0
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-80231LOW1.89
libcurl
8.21.0-r0
fixed in 8.22.0-r0
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-80255LOW1.89
libcurl
8.21.0-r0
fixed in 8.22.0-r0
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-73281LOW1.78
openssh
10.3_p1-r0
fixed in 10.3_p1-r1
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-73281LOW1.78
openssh-keygen
10.3_p1-r0
fixed in 10.3_p1-r1
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-73281LOW1.78
openssh-server
10.3_p1-r0
fixed in 10.3_p1-r1
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-73281LOW1.78
openssh-sftp-server
10.3_p1-r0
fixed in 10.3_p1-r1
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-82209LOW1.58
libcurl
8.21.0-r0
fixed in 8.22.0-r0
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-60002NONE0
openssh-client-common
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Not Applicable
CVE-2026-60002NONE0
openssh-client-default
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Not Applicable
CVE-2026-60002NONE0
openssh-server-common
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Not Applicable
CVE-2026-59999NONE0
openssh-client-common
10.3_p1-r0
fixed in 10.3_p1-r1
0.2%
Theoretical Threat
Not Applicable
CVE-2026-60000NONE0
openssh-client-common
10.3_p1-r0
fixed in 10.3_p1-r1
1.2%
Low-Moderate Risk
Not Applicable
CVE-2026-59999NONE0
openssh-client-default
10.3_p1-r0
fixed in 10.3_p1-r1
0.2%
Theoretical Threat
Not Applicable
CVE-2026-60000NONE0
openssh-client-default
10.3_p1-r0
fixed in 10.3_p1-r1
1.2%
Low-Moderate Risk
Not Applicable
CVE-2026-59999NONE0
openssh-server-common
10.3_p1-r0
fixed in 10.3_p1-r1
0.2%
Theoretical Threat
Not Applicable
CVE-2026-60000NONE0
openssh-server-common
10.3_p1-r0
fixed in 10.3_p1-r1
1.2%
Low-Moderate Risk
Not Applicable
CVE-2026-59998NONE0
openssh-client-common
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Not Applicable
CVE-2026-60001NONE0
openssh-client-common
10.3_p1-r0
fixed in 10.3_p1-r1
0.7%
Theoretical Threat
Not Applicable
CVE-2026-59998NONE0
openssh-client-default
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Not Applicable
CVE-2026-60001NONE0
openssh-client-default
10.3_p1-r0
fixed in 10.3_p1-r1
0.7%
Theoretical Threat
Not Applicable
CVE-2026-59998NONE0
openssh-server-common
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Not Applicable
CVE-2026-60001NONE0
openssh-server-common
10.3_p1-r0
fixed in 10.3_p1-r1
0.7%
Theoretical Threat
Not Applicable
CVE-2026-73282NONE0
openssh-client-common
10.3_p1-r0
fixed in 10.3_p1-r1
0.2%
Theoretical Threat
Not Applicable
CVE-2026-73282NONE0
openssh-client-default
10.3_p1-r0
fixed in 10.3_p1-r1
0.2%
Theoretical Threat
Not Applicable
CVE-2026-73282NONE0
openssh-server-common
10.3_p1-r0
fixed in 10.3_p1-r1
0.2%
Theoretical Threat
Not Applicable
CVE-2026-59995NONE0
openssh-client-common
10.3_p1-r0
fixed in 10.3_p1-r1
0.3%
Theoretical Threat
Not Applicable
CVE-2026-59996NONE0
openssh-client-common
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Not Applicable
CVE-2026-59997NONE0
openssh-client-common
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Not Applicable
CVE-2026-73283NONE0
openssh-client-common
10.3_p1-r0
fixed in 10.3_p1-r1
<0.1%
Theoretical Threat
Not Applicable
CVE-2026-59995NONE0
openssh-client-default
10.3_p1-r0
fixed in 10.3_p1-r1
0.3%
Theoretical Threat
Not Applicable
CVE-2026-59996NONE0
openssh-client-default
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Not Applicable
CVE-2026-59997NONE0
openssh-client-default
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Not Applicable
CVE-2026-73283NONE0
openssh-client-default
10.3_p1-r0
fixed in 10.3_p1-r1
<0.1%
Theoretical Threat
Not Applicable
CVE-2026-59995NONE0
openssh-server-common
10.3_p1-r0
fixed in 10.3_p1-r1
0.3%
Theoretical Threat
Not Applicable
CVE-2026-59996NONE0
openssh-server-common
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Not Applicable
CVE-2026-59997NONE0
openssh-server-common
10.3_p1-r0
fixed in 10.3_p1-r1
0.5%
Theoretical Threat
Not Applicable
CVE-2026-73283NONE0
openssh-server-common
10.3_p1-r0
fixed in 10.3_p1-r1
<0.1%
Theoretical Threat
Not Applicable
CVE-2026-73281NONE0
openssh-client-common
10.3_p1-r0
fixed in 10.3_p1-r1
0.2%
Theoretical Threat
Not Applicable
CVE-2026-73281NONE0
openssh-client-default
10.3_p1-r0
fixed in 10.3_p1-r1
0.2%
Theoretical Threat
Not Applicable
CVE-2026-73281NONE0
openssh-server-common
10.3_p1-r0
fixed in 10.3_p1-r1
0.2%
Theoretical Threat
Not Applicable
CVE-2026-80229NONE0
libcurl
8.21.0-r0
fixed in 8.22.0-r0
0.9%
Theoretical Threat
Not Applicable
CVE-2026-80256NONE0
libcurl
8.21.0-r0
fixed in 8.22.0-r0
—
Not Applicable
GHSA-j95f-988m-3j2fNONE0
@tiptap/core
3.27.0
fixed in 3.30.5
—
Not Applicable
GHSA-cp6q-959q-f8rhNONE0
@tiptap/core
3.27.0
fixed in 3.30.4
—
Not Applicable
CVE-2025-57665NONE0
element-plus
2.4.3
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-84363NONE0
hono
4.12.34
fixed in 4.13.5
0.4%
Theoretical Threat
Not Applicable
CVE-2026-84364NONE0
hono
4.12.34
fixed in 4.13.5
0.5%
Theoretical Threat
Not Applicable
CVE-2026-84365NONE0
hono
4.12.34
fixed in 4.13.5
0.4%
Theoretical Threat
Not Applicable
GHSA-2x7j-588g-ccc2NONE0
nodemailer
8.0.10
fixed in 9.1.0
—
Not Applicable
GHSA-8m3c-c648-2xjjNONE0
nodemailer
8.0.10
fixed in 9.1.1
—
Not Applicable
GHSA-cc9r-2j5m-2m83NONE0
nodemailer
8.0.10
fixed in 9.1.0
—
Not Applicable
GHSA-wmmp-3585-3rmpNONE0
nodemailer
8.0.10
fixed in 9.1.0
—
Not Applicable
CVE-2024-1899NONE0
showdown
2.1.0
No fix yet
0.8%
Theoretical Threat
Not Applicable

Want to check another image? Run a full scan with the Docker Security Scanner.