n8n-nodes-base
Follow this packageGet the evidence behind this dependency. Browse imported advisories below, or check an exact version against OSV now. View source coverage.
Behind the package
View on npmExplore what the publisher declares for the latest npm release. These details are not a safety score; listed attestations have not been independently verified here.
Base nodes of n8n
Direct dependencies of 2.15.1
- gm
1.25.1 - pg
8.17.0 - ics
2.40.0 - vm2
^3.10.5 - aws4
1.11.0 - cron
4.4.0 - mqtt
5.7.2 - rhea
3.0.4 - uuid
10.0.0 - xlsx
https://cdn.sheetjs.com/xlsx-0.20.2/xlsx-0.20.2.tgz - isbot
3.6.13 - jsdom
23.0.1 - luxon
3.7.2 - mssql
10.0.2 - redis
4.6.14 - rrule
2.8.1 - alasql
4.4.0 - fflate
0.7.4 - ldapts
4.2.6 - lodash
4.17.23 - mysql2
3.17.0 - semver
7.5.4 - ts-ics
1.2.2 - xml2js
0.6.2 - @n8n/di
0.10.0 - amqplib
0.10.6 - cheerio
1.0.0-rc.6 - js-nacl
1.4.0 - kafkajs
2.2.4 - mongodb
6.11.0 - otpauth
9.1.1 - rfc2047
4.0.1 - chokidar
4.0.3 - node-ssh
13.2.0 - oracledb
6.9.0 - showdown
2.1.0 - @n8n/imap
0.16.0 - csv-parse
5.5.0 - fast-glob
3.2.12 - iso-639-1
2.1.15 - minifaker
1.34.1 - basic-auth
2.0.1 - iconv-lite
0.6.3 - mailparser
3.9.3 - mime-types
3.0.2 - nodemailer
7.0.11 - pdfjs-dist
5.3.31 - pg-promise
11.9.1 - rss-parser
3.13.0 - simple-git
3.32.3 - @n8n/config
2.14.0 - @n8n/errors
0.6.0 - change-case
4.1.2 - eventsource
2.0.2 - isolated-vm
^6.0.2 - promise-ftp
1.3.5 - tmp-promise
3.0.3 - html-to-text
9.0.5 - jsonwebtoken
9.0.3 - n8n-workflow
2.15.0 - lossless-json
1.0.5 - sanitize-html
2.12.1 - snowflake-sdk
2.1.0 - currency-codes
2.1.0 - generate-schema
2.6.0 - moment-timezone
0.5.48 - get-system-fonts
2.0.2 - ssh2-sftp-client
12.1.0 - @thednp/dommatrix
^2.0.12 - node-html-markdown
1.2.0 - xmlhttprequest-ssl
3.1.0 - fastest-levenshtein
1.0.16 - @mozilla/readability
0.6.0 - @aws-sdk/client-sso-oidc
3.808.0 - @kafkajs/confluent-schema-registry
3.8.0
Fetched 31/10/2026, 08:13:11 UTC · Original registry metadata
Release history
Explore up to 40 recent releases. Pick a version for an OSV check; registry metadata alone does not tell you whether a release has known vulnerabilities.
Check the version you ship.
Get a fresh OSV lookup for an exact release. We send the package name and version to OSV without storing a report.
Advisories & recorded fixes
No advisories are indexed for this package on this page. Check an exact version for a fresh lookup; an empty catalog result does not establish safety.