paperless-ngx 0.5.0 Helm chart

Name: paperless-ngx Helm chart 0.5.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

adnoctem

Scored 8 Oct 2026

Paperless-NGX is a community-supported supercharged version of paperless - scan, index and archive all your physical documents

Version 0.5.0 yesterdayapp version 3.3.0 1Artifact Hub

paperless-ngx 0.5.0 deploys 5 container images: gotenberg/gotenberg, apache/tika, bitnamisecure/postgresql, bitnamisecure/redis and 1 more. Across them, 2,387 findings — 10 critical, 7 high — 4 on CISA KEV. The highest contribution is GHSA-f58c-gq56-vjjf in tika-parser-pdf-module 2.9.0, fixed in 3.2.2. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

25,2841073642,005

2,387 findings over 5 of 5 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
gotenberg/gotenberg	8.36.0	212011,271	14,778
apache/tika	2.9.0.0	8591369	5,937
bitnamisecure/postgresql	latest	0001	13
bitnamisecure/redis	latest	0000	0
ghcr.io/paperless-ngx/paperless-ngx	3.3.0	0172364	4,556

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

2,012 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-81893	gdk-pixbuf@2.42.12+dfsg-4+deb13u1	no fix listed
Low	UBUNTU-CVE-2026-47059	openjdk-17@17.0.8+7-1~22.04	17.0.20+8-1~22.04
Low	DEBIAN-CVE-2026-106394	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-79252	chromium@151.0.7922.137-1~deb13u1	152.0.7977.75-1~deb13u1
Low	UBUNTU-CVE-2023-29383	shadow@1:4.8.1-2ubuntu2.1	no fix listed
Low	DEBIAN-CVE-2026-79117	chromium@151.0.7922.137-1~deb13u1	152.0.7977.75-1~deb13u1
Low	DEBIAN-CVE-2026-106215	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106223	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106258	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106261	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106290	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106359	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-54875	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u3
Low	DEBIAN-CVE-2026-106564	imagemagick@8:7.1.1.43+dfsg1-1+deb13u12	no fix listed
Low	DEBIAN-CVE-2026-106568	imagemagick@8:7.1.1.43+dfsg1-1+deb13u12	no fix listed
Low	DEBIAN-CVE-2026-106569	imagemagick@8:7.1.1.43+dfsg1-1+deb13u12	no fix listed
Low	DEBIAN-CVE-2026-106572	imagemagick@8:7.1.1.43+dfsg1-1+deb13u12	no fix listed
Low	DEBIAN-CVE-2026-106573	imagemagick@8:7.1.1.43+dfsg1-1+deb13u12	no fix listed
Low	DEBIAN-CVE-2026-106574	imagemagick@8:7.1.1.43+dfsg1-1+deb13u12	no fix listed
Low	DEBIAN-CVE-2026-106575	imagemagick@8:7.1.1.43+dfsg1-1+deb13u12	no fix listed
Low	DEBIAN-CVE-2026-106576	imagemagick@8:7.1.1.43+dfsg1-1+deb13u12	no fix listed
Low	DEBIAN-CVE-2026-106577	imagemagick@8:7.1.1.43+dfsg1-1+deb13u12	no fix listed
Low	DEBIAN-CVE-2026-107208	imagemagick@8:7.1.1.43+dfsg1-1+deb13u12	no fix listed
Low	DEBIAN-CVE-2026-107210	imagemagick@8:7.1.1.43+dfsg1-1+deb13u12	no fix listed
Low	DEBIAN-CVE-2026-22185	openldap@2.6.10+dfsg-1	no fix listed
Low	DEBIAN-CVE-2026-97399	glibc@2.41-12+deb13u4	no fix listed
Low	UBUNTU-CVE-2026-41991	gzip@1.10-4ubuntu4.1	1.10-4ubuntu4.2
Low	DEBIAN-CVE-2026-106243	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-94285	libx11@2:1.8.12-1	no fix listed
Low	DEBIAN-CVE-2026-106213	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106184	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106202	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106231	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	UBUNTU-CVE-2025-9820	gnutls28@3.7.3-4ubuntu1.2	3.7.3-4ubuntu1.8
Low	DEBIAN-CVE-2026-79055	chromium@151.0.7922.137-1~deb13u1	152.0.7977.75-1~deb13u1
Low	DEBIAN-CVE-2026-79222	chromium@151.0.7922.137-1~deb13u1	152.0.7977.75-1~deb13u1
Low	DEBIAN-CVE-2026-106196	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106198	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106221	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-87551	chromium@151.0.7922.137-1~deb13u1	153.0.8010.47-2~deb13u1
Low	DEBIAN-CVE-2025-15224	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-91739	chromium@151.0.7922.137-1~deb13u1	153.0.8010.47-2~deb13u1
Low	DEBIAN-CVE-2026-25832	mbedtls@3.6.6-0.1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-91713	chromium@151.0.7922.137-1~deb13u1	153.0.8010.47-2~deb13u1
Low	DEBIAN-CVE-2026-106188	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106363	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106277	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106336	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106392	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106185	chromium@151.0.7922.137-1~deb13u1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.5.0latest	yesterday	3.3.0	1073642,005	25,284
0.4.2	1 month ago	3.1.3	1073822,125	26,706

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/adnoctem/paperless-ngx.svg)](https://charts.stackradar.io/charts/adnoctem/paperless-ngx)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.