paperless-ngx 0.5.0 Helm chart

Name: paperless-ngx Helm chart 0.5.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

adnoctem

Scored 8 Oct 2026

Paperless-NGX is a community-supported supercharged version of paperless - scan, index and archive all your physical documents

Version 0.5.0 yesterdayapp version 3.3.0 1Artifact Hub

paperless-ngx 0.5.0 deploys 5 container images: gotenberg/gotenberg, apache/tika, bitnamisecure/postgresql, bitnamisecure/redis and 1 more. Across them, 2,387 findings — 10 critical, 7 high — 4 on CISA KEV. The highest contribution is GHSA-f58c-gq56-vjjf in tika-parser-pdf-module 2.9.0, fixed in 3.2.2. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

25,2841073642,005

2,387 findings over 5 of 5 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
gotenberg/gotenberg	8.36.0	212011,271	14,778
apache/tika	2.9.0.0	8591369	5,937
bitnamisecure/postgresql	latest	0001	13
bitnamisecure/redis	latest	0000	0
ghcr.io/paperless-ngx/paperless-ngx	3.3.0	0172364	4,556

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

2,012 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-15028	libarchive@3.7.4-4+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106266	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106280	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106288	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106289	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106297	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106324	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106422	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106425	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-18508	tar@1.35+dfsg-3.1	no fix listed
Low	DEBIAN-CVE-2026-106327	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106344	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106369	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106384	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106416	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106222	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106237	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106299	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106396	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106408	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2025-68972	gnupg2@2.4.7-21+deb13u1+b5	no fix listed
Low	UBUNTU-CVE-2026-45186	expat@2.4.7-1ubuntu0.2	2.4.7-1ubuntu0.8
Low	DEBIAN-CVE-2026-106332	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106348	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106216	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106192	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106331	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106353	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106246	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106250	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106259	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106267	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106270	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106296	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106301	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106307	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106391	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106397	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106403	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106404	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106407	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106427	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106333	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106284	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106304	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106321	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106330	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106338	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106343	chromium@151.0.7922.137-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106354	chromium@151.0.7922.137-1~deb13u1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.5.0latest	yesterday	3.3.0	1073642,005	25,284
0.4.2	1 month ago	3.1.3	1073822,125	26,706

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/adnoctem/paperless-ngx.svg)](https://charts.stackradar.io/charts/adnoctem/paperless-ngx)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.