Skip to content
QuenchWorks

n8n 0.1.18

Chart · Workflow · standard · v0.1.18

digest pinnedcosign signedSPDX SBOMSLSA provenanceamd64 · arm64

Fair-code workflow automation platform — build integrations and automations across 400+ apps via a visual node editor, with native AI/LLM agent nodes. Node build on a hardened nonroot Wolfi base; the flagged transitive npm CVE class is cleared image-side with pinned overrides.

Version

0.1.20 · latest0.1.190.1.18

The latest line lives at the base page; older lines have their own page so you can pin and verify exactly that version. Only the most recent releases are listed — an older chart pins an older image digest.

Released version

This is the 0.1.18 release of the n8n chart, published 2026-10-01. For the live security report and the currently deployed image digest, see the latest release.

Signed
cosign keyless
SBOM
SPDX, on image
Provenance
SLSA build
Architectures
amd64, arm64
Runs as
nonroot (uid 1001)
Root filesystem
read-only

Security report (Trivy)

F· 0/10019 fixable · rebuild clears them

Vulnerability detail

n8n 2.40.7 · 26 CVE
CVESeverityPackageInstalledFixed inTitle
CVE-2026-100721CRITICALvm23.11.73.12.2vm2: NodeVM custom resolution bypasses external path boundaries
CVE-2026-102828CRITICALsimple-git3.36.04.0.1simple-git: simple-git unsafe-operation guard does not block trailer command configuration
CVE-2026-102829CRITICAL@simple-git/argv-parser1.1.12.0.1simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection
CVE-2026-92934CRITICALvm23.11.73.11.8vm2: vm2 before 3.11.8 Sandbox Escape RCE via AggregateError
CVE-2026-92953CRITICALvm23.11.73.11.8vm2: vm2 3.11.0 through 3.11.7 Prototype Pollution via TypedArray
CVE-2026-92954CRITICALvm23.11.73.11.8vm2: vm2 3.10.0 through 3.11.5 Denial of Service via Host Promise
CVE-2026-92955CRITICALvm23.11.73.11.8vm2: vm2 before 3.11.8 Sandbox Escape via NodeVM
CVE-2026-100722HIGHvm23.11.73.12.2vm2: vm2: Denial of Service via unhandled Promise rejection in construct trap
CVE-2026-102826HIGHsimple-git3.36.04.0.0simple-git: simple-git allows command execution through unblocked Git configuration includes
CVE-2026-102827HIGHsimple-git3.36.04.0.0simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)
CVE-2026-104850HIGH@modelcontextprotocol/sdk1.26.01.31.0MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server
CVE-2026-87776HIGHcompression1.8.11.8.2compression: compression: Denial of Service via memory leak on premature response close
CVE-2026-92959HIGHvm23.11.73.11.8vm2: vm2: Asynchronous code execution bypass via Promise thenable assimilation
CVE-2026-93687HIGHbraces3.0.3— not fixablebraces: braces: Denial of Service via Stack Overflow from Deeply Nested Patterns
CVE-2026-100723MEDIUMvm23.11.73.12.2vm2: vm2: Information disclosure via zlib shared buffer pool
CVE-2026-104182MEDIUMstream-json3.5.03.6.0stream-json: stream-json: Denial of Service via inefficient comment scanning
CVE-2026-104183MEDIUMstream-json3.5.03.6.0stream-json: stream-json: Object prototype manipulation via crafted JSON input
CVE-2026-86597MEDIUMsnowflake-sdk2.1.03.3.0Snowflake drivers writes sensitive information to logs
CVE-2026-92933MEDIUMvm23.11.73.11.8vm2: vm2: Information Disclosure via util.getCallSites
CVE-2024-1899MEDIUMshowdown2.1.0— not fixableShowdown vulnerable to Regular Expression Denial of Service (ReDoS) in link/anchor parsing
CVE-2025-57665MEDIUMelement-plus2.4.3— not fixableElement Plus Link component (el-link) implements insufficient input validation for the href attribute
CVE-2026-59710MEDIUMshowdown2.1.0— not fixableshowdown: Showdown: Stored Cross-Site Scripting via unescaped table header ID attributes in markdown
CVE-2026-59711MEDIUMshowdown2.1.0— not fixableshowdown: Showdown: Cross-site scripting via unescaped metadata title allows arbitrary code execution
CVE-2026-97058MEDIUMsprintf-js1.0.3— not fixablesprintf-js: sprintf-js: Denial of Service via unbounded precision specifiers
CVE-2026-97058MEDIUMsprintf-js1.1.3— not fixablesprintf-js: sprintf-js: Denial of Service via unbounded precision specifiers
CVE-2026-105799LOW@langchain/redis1.0.11.1.1LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values
7
Critical
7
High
11
Medium
1
Low
0
Unknown

Security report (Trivy) · image n8n 2.40.7

Install the chart

Deploy to Kubernetes with hardened defaults. The chart pins its image by signed digest, so you never track it yourself.

Install (pinned to 0.1.18)

helm install my-n8n oci://ghcr.io/quenchworks/charts/n8n --version 0.1.18
Chart version
0.1.18
Chart license
LicenseRef-n8n-Sustainable-Use-License-1.0
App license
LicenseRef-n8n-Sustainable-Use-License-1.0
Service port
5678
Signed
cosign (keyless)
Released
2026-10-01

Verify the chart

cosign verify ghcr.io/quenchworks/charts/n8n:0.1.18 \
  --certificate-identity-regexp 'https://github.com/quenchworks/.+' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Transparency

The chart publishes its attestations on GitHub and the image it deploys carries its own on the same digest, publicly verifiable with the commands above. Both log to the Sigstore transparency log (Rekor), which cosign verify checks for you.

View the imageView on ArtifactHubChart source

Upstream project: https://n8n.io