Https://github.com/n8n-io/n8n/compare/n8n@2.45.3...n8n@2.45.4

Questions
1

Hello team,
We tried to create a new build image version 2.45.4 but showing a vulnerability after pushing to ECR. Please find the screen shot. Please let us know which version we need to utilize

image
image1279×763 72.2 KB

Describe the problem/error/question

What is the error message (if any)?

Please share your workflow

(Select the nodes on your canvas and use the keyboard shortcuts CMD+C/CTRL+C and CMD+V/CTRL+V to copy and paste the workflow.)

Share the output returned by the last node

Information on your n8n setup

  • n8n version:
  • Database (default: SQLite):
  • n8n EXECUTIONS_PROCESS setting (default: own, main):
  • Running n8n via (Docker, npm, n8n cloud, desktop app):
  • Operating system:
2

Hi @Raghavendra908, Simone from the n8n support team here.
For CVE-2026-111497 (Node2Shell / Brotli decoder), the fix is included in the official n8n and runners Docker images starting with:

  • 2.44.6 on the 2.44 branch
  • 2.45.2 on the 2.45 branch

Both ship patched Node.js 26.12.1.

3

Hey @Raghavendra908 Your screenshot flags brotli:1.2.0-r1 in the custom image. Alpine lists 1.2.1-r0 as fixed for this CVE on 3.23/3.24. Updating n8n alone won’t clear an old OS package carried into your image. Update the base image or build step that supplies Brotli, then rebuild and scan the new image digest.

Could you share your Dockerfile, especially the FROM line and any package installs? That will help locate where 1.2.0-r1 is coming from.

4

Yes, the fix is to update from 1.2.0-r1 to 1.2.1-r0 by rebuilding the Docker image with the latest OS base image.

5

Thanks issue was fixed now
i have one more query

Subject: n8n Upgrade Guidance Required – Business License Expired / Renewal in Progress

Hello Support Team,

Our n8n Business license has expired, and the renewal/procurement process is currently under Legal review within our organization.

Meanwhile, we need to upgrade the n8n platform to address identified security vulnerabilities.

Could you please confirm whether we can proceed with the n8n upgrade while the Business license is expired? Additionally, please advise whether there are any licensing or technical restrictions that could affect the upgrade or our existing workflows, credentials, configurations, or Business features.

If upgrading with an expired license is not recommended, please advise on the appropriate approach while the renewal is being completed.

Regards,

6

Thanks issue was fixed now …I have another query

Thanks issue was fixed now
i have one more query

Subject: n8n Upgrade Guidance Required – Business License Expired / Renewal in Progress

Hello Support Team,

Our n8n Business license has expired, and the renewal/procurement process is currently under Legal review within our organization.

Meanwhile, we need to upgrade the n8n platform to address identified security vulnerabilities.

Could you please confirm whether we can proceed with the n8n upgrade while the Business license is expired? Additionally, please advise whether there are any licensing or technical restrictions that could affect the upgrade or our existing workflows, credentials, configurations, or Business features.

If upgrading with an expired license is not recommended, please advise on the appropriate approach while the renewal is being completed.

Regards,