paperless-ngx 0.5.0 Helm chart
adnoctemVerified publisherScored 7 Oct 2026
Paperless-NGX is a community-supported supercharged version of paperless - scan, index and archive all your physical documents
Version 0.5.0 todayapp version 3.3.0 1Artifact Hub
paperless-ngx 0.5.0 deploys 5 container images: gotenberg/gotenberg, apache/tika, bitnamisecure/postgresql, bitnamisecure/redis and 1 more. Across them, 2,366 findings — 10 critical, 7 high — 4 on CISA KEV. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.9.0, fixed in 3.2.2. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| gotenberg/ | 8.36.0 | 211971,275 | 14,270 |
| apache/ | 2.9.0.0 | 8591369 | 5,937 |
| bitnamisecure/ | latest | 0001 | 13 |
| bitnamisecure/ | latest | 0000 | 0 |
| ghcr.io/ | 3.3.0 | 0172343 | 4,438 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
High findings
High: findings whose contribution to the Radar Score is 40–69. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| High | DEBIAN-CVE-2018-10583 | libreoffice | no fix listed |
| High | UBUNTU-CVE-2025-6965 | sqlite3 | 3.37.2-2ubuntu0.5 |
| High | USN-6986-1 | openssl | 3.0.2-0ubuntu1.18 |
| High | UBUNTU-CVE-2023-2650 | openssl | 3.0.2-0ubuntu1.10+Fips1 |
| High | USN-7257-1 | krb5 | 1.19.2-2ubuntu0.5 |
| High | UBUNTU-CVE-2024-2511 | openssl | 3.0.2-0ubuntu1.17 |
| High | DEBIAN-CVE-2023-34152 | imagemagick | no fix listed |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 0.5.0latest | today | 3.3.0 | 1073601,988 | 24,658 |
| 0.4.2 | 1 month ago | 3.1.3 | 1073782,108 | 26,077 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.