excalidash 1.4.1 Helm chart

Name: excalidash Helm chart 1.4.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

alekc

Scored 3 Oct 2026

Self-hosted Excalidraw dashboard with persistent storage, multi-user auth, and live collaboration.

Version 1.4.1 todaydeploys tag 0.6.3 0Artifact Hub

excalidash 1.4.1 deploys 2 container images: zimengxiong/excalidash-backend and zimengxiong/excalidash-frontend. Across them, 38 findings — 0 critical, 0 high. The highest contribution is GHSA-5j98-mcp5-4vw2 in glob 10.4.2, fixed in 10.5.0.

Radar Score

44000434

38 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
zimengxiong/excalidash-backend	0.6.3	00432	421
zimengxiong/excalidash-frontend	0.6.3	0002	19

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

38 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GHSA-5j98-mcp5-4vw2	glob@10.4.2	10.5.0
Medium	GHSA-3xgq-45jj-v275	cross-spawn@7.0.3	7.0.5
Medium	GHSA-3ppc-4f35-3m26	minimatch@9.0.5	9.0.6
Medium	GHSA-34x7-hfp2-rc4v	tar@6.2.1	7.5.7
Low	GHSA-mwp4-54f8-5fhr	ip-address@9.0.5	10.3.1
Low	GHSA-rgw5-rvv9-x895	brace-expansion@2.0.1	2.1.4
Low	GHSA-23hp-3jrh-7fpw	tar@6.2.1	7.5.19
Low	GHSA-8x88-c5mf-7j5w	tar@6.2.1	7.5.18
Low	GHSA-mh99-v99m-4gvg	brace-expansion@2.0.1	2.1.3
Low	GHSA-w4pp-8pjf-rmxw	pacote@18.0.6	21.5.1
Low	GHSA-7r86-cg39-jmmj	minimatch@9.0.5	9.0.7
Low	GHSA-ch52-4w7c-c8xp	http-cache-semantics@4.1.1	no fix listed
Low	GHSA-r292-9mhp-454m	tar@6.2.1	7.5.21
Low	GHSA-23c5-xmqv-rm74	minimatch@9.0.5	9.0.7
Low	GHSA-qffp-2rhf-9h96	tar@6.2.1	7.5.10
Low	GHSA-8qq5-rm4j-mr97	tar@6.2.1	7.5.3
Low	GHSA-73rr-hh4g-fpgx	diff@5.2.0	5.2.2
Low	GHSA-r6q2-hw4h-h46w	tar@6.2.1	7.5.4
Low	GHSA-f886-m6hf-6m8v	brace-expansion@2.0.1	2.0.3
Low	GHSA-6j4f-fj2g-mc7p	brace-expansion@2.0.1	2.1.5
Low	GHSA-qhr7-859c-m2p7	brace-expansion@2.0.1	2.1.6
Low	GHSA-9ppj-qmqm-q256	tar@6.2.1	7.5.11
Low	GHSA-rpw4-54j3-4h4q	ip-address@9.0.5	10.5.1
Low	GHSA-w8wr-v893-vjvp	tar@6.2.1	7.5.18
Low	GHSA-j6r3-76f7-8jcv	ip-address@9.0.5	10.7.1
Low	ALPINE-CVE-2026-103111	pcre2@10.48-r0	10.49-r0
Low	GHSA-52v5-jr5w-gjxr	sigstore@2.3.1	4.1.1
Low	ALPINE-CVE-2026-58055	nghttp2@1.69.0-r0	1.70.0-r0
Low	GHSA-v2v4-37r5-5v8g	ip-address@9.0.5	10.1.1
Low	GHSA-gvwx-54wh-qm9j	tar@6.2.1	7.5.17
Low	GHSA-h3mg-xc3c-68pw	ip-address@9.0.5	10.7.1
Low	GHSA-83g3-92jg-28cx	tar@6.2.1	7.5.8
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@2.0.1	2.1.2
Low	GHSA-vmf3-w455-68vh	tar@6.2.1	7.5.16
Low	GHSA-w9m9-85wc-3x92	postcss-selector-parser@6.1.0	6.1.3
Low	GHSA-q2hr-2g5m-vwhr	brace-expansion@2.0.1	2.1.7
Low	GHSA-jfc7-64v2-mr8c	@sigstore/core@1.1.0	3.2.1
Low	GHSA-v6h2-p8h4-qcjw	brace-expansion@2.0.1	2.0.2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.4.1latest	today	0.6.3	00434	440
1.4.0	3 days ago	0.6.0	002082	1,207

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/alekc/excalidash.svg)](https://charts.stackradar.io/charts/alekc/excalidash)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.