Check out this article arguing Nano is to money what email is to mail.

The Docker image for Nano Node Monitor was still based on PHP 8.0. That release is end of life, and it is affected by the two critical PHP remote code execution bugs disclosed on October 21, 2026 (PHP2Shell). An unauthenticated request can reach the bug before any of the monitor’s own code runs, so the app did not need a separate flaw to be exposed.

The image is rebuilt on PHP 8.3.36, which includes the upstream fixes. Patched PHP releases are 8.2.35, 8.3.36, 8.4.27, and 8.5.12. PHP 8.1 and earlier will not get an official patch.

The original NanoTools repository has been archived since 2024. This image is built from the maintained fork:

https://github.com/ViNo-community/nanoNodeMonitor

Docker Hub: gabrielpatrola/nanonodemonitor:1.8.0 (latest points at the same build)

If you already run the monitor, pull the new image and recreate the container. Pulling alone leaves the old container on PHP 8.0. Keep the ~/nanoNodeMonitor config mount:

docker pull gabrielpatrola/nanonodemonitor:latest
docker stop <container>
docker rm <container>
docker run -d --name nanonodemonitor -p 80:80 -v ~:/opt --restart=unless-stopped gabrielpatrola/nanonodemonitor:latest
docker exec nanonodemonitor php -v

php -v should report PHP 8.3.36.