StackRadar

bookstack 0.3.1 Helm chart

bookstack-mgVerified publisher

Scored 14 Sept 2026

A Helm chart for deploying BookStack using the LinuxServer.io container

Version 0.3.1app version 26.05.20260528 2Artifact Hub

bookstack 0.3.1 deploys 2 container images: library/busybox and linuxserver/bookstack. Across them, 155 findings0 critical, 2 high. The highest contribution is ALPINE-CVE-2026-49975 in nginx 1.28.3-r2, fixed in 1.28.3-r3.

Radar Score

1,8960233120

155 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
library/busybox1.3700000
linuxserver/bookstack26.05.2026052802331201,896

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

155 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowALPINE-CVE-2026-63072openssl@3.5.6-r03.5.8-r0
LowALPINE-CVE-2026-56434nginx@1.28.3-r21.28.3-r6
LowALPINE-CVE-2026-11586curl@8.19.0-r08.22.0-r0
LowALPINE-CVE-2026-45445openssl@3.5.6-r03.5.7-r0
LowALPINE-CVE-2026-80230curl@8.19.0-r08.22.0-r0
LowALPINE-CVE-2026-76641expat@2.7.5-r02.8.4-r0
LowALPINE-CVE-2026-44186apache2@2.4.67-r02.4.68-r0
LowALPINE-CVE-2026-54874openssl@3.5.6-r03.5.8-r0
LowALPINE-CVE-2026-42766openssl@3.5.6-r03.5.7-r0
LowALPINE-CVE-2026-34501apr-util@1.6.3-r21.6.4-r0
LowALPINE-CVE-2026-34502apr-util@1.6.3-r21.6.4-r0
LowALPINE-CVE-2026-9546curl@8.19.0-r08.22.0-r0
LowALPINE-CVE-2026-63075openssl@3.5.6-r03.5.8-r0
LowALPINE-CVE-2026-45186expat@2.7.5-r02.8.1-r0
LowALPINE-CVE-2026-33630c-ares@1.34.6-r01.34.8-r0
LowGHSA-f5gf-2cj8-52g2dompdf/dompdf@v3.1.53.1.6
LowALPINE-CVE-2026-48913apache2@2.4.67-r02.4.68-r0
LowALPINE-CVE-2026-82208curl@8.19.0-r08.22.0-r0
LowALPINE-CVE-2026-48142nginx@1.28.3-r21.28.3-r4
LowALPINE-CVE-2026-12064curl@8.19.0-r08.22.0-r0
LowALPINE-CVE-2026-8932curl@8.19.0-r08.22.0-r0
LowALPINE-CVE-2026-8286curl@8.19.0-r08.22.0-r0
LowALPINE-CVE-2026-75803openssl@3.5.6-r03.5.8-r0
LowALPINE-CVE-2025-49506apr-util@1.6.3-r21.6.4-r0
LowALPINE-CVE-2026-40164jq@1.8.1-r01.8.2-r0
LowALPINE-CVE-2026-39979jq@1.8.1-r01.8.2-r0
LowALPINE-CVE-2026-43951apache2@2.4.67-r02.4.68-r0
LowALPINE-CVE-2026-8458curl@8.19.0-r08.22.0-r0
LowALPINE-CVE-2026-6253curl@8.19.0-r08.20.0-r0
LowGHSA-2q4p-g7hv-5rgvleague/commonmark@2.8.22.9.0
LowALPINE-CVE-2026-9547curl@8.19.0-r08.22.0-r0
LowGHSA-8hg6-c449-896mdompdf/dompdf@v3.1.53.1.6
LowALPINE-CVE-2026-6276curl@8.19.0-r08.20.0-r0
LowGHSA-jjv6-8j6v-6j52league/commonmark@2.8.22.9.1
LowALPINE-CVE-2026-76956expat@2.7.5-r02.8.4-r0
LowGHSA-j8pm-gj4c-rq4xleague/commonmark@2.8.22.9.1
LowALPINE-CVE-2026-29170apache2@2.4.67-r02.4.68-r0
LowGHSA-8rr7-cvq3-gmfhleague/commonmark@2.8.22.10.0
LowALPINE-CVE-2026-9080curl@8.19.0-r08.22.0-r0
LowALPINE-CVE-2026-42767openssl@3.5.6-r03.5.7-r0
LowALPINE-CVE-2026-5545curl@8.19.0-r08.20.0-r0
LowALPINE-CVE-2026-9545curl@8.19.0-r08.22.0-r0
LowALPINE-CVE-2026-76642util-linux@2.41.4-r02.41.6-r0
LowALPINE-CVE-2026-63074openssl@3.5.6-r03.5.8-r0
LowALPINE-CVE-2026-34181openssl@3.5.6-r03.5.7-r0
LowGHSA-f8fg-pg57-v4j8league/commonmark@2.8.22.9.1
LowGHSA-cx96-42px-69fmdompdf/dompdf@v3.1.53.1.6
LowGHSA-v5mv-p594-2x33guzzlehttp/guzzle@7.10.57.15.2
LowALPINE-CVE-2026-6429curl@8.19.0-r08.20.0-r0
LowGHSA-j8qw-6jw8-r297dompdf/dompdf@v3.1.53.1.6

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.3.1latest26.05.2026052802331201,896

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/bookstack-mg/bookstack.svg)](https://charts.stackradar.io/charts/bookstack-mg/bookstack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 13 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.