audiobookshelf 1.1.1 Helm chart

Name: audiobookshelf Helm chart 1.1.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

charts-derwitt-dev

Scored 30 Sept 2026

A Helm chart for Audiobookshelf. Audiobookshelf is a self-hosted audiobook and podcast server that syncs listening progress across clients. Runs rootless with a read-only root filesystem. Libraries are configured in the app UI against the paths supplied through mediaMounts.

Version 1.1.1 13 days agoapp version 2.36.1 0Artifact Hub

audiobookshelf 1.1.1 deploys 1 container image: ghcr.io/advplyr/audiobookshelf. Across them, 140 findings — 0 critical, 1 high. The highest contribution is GHSA-r5fr-rjxr-66jc in lodash 4.17.21, fixed in 4.18.0.

Radar Score

1,7490139100

140 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/advplyr/audiobookshelf	2.36.1	0139100	1,749

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

100 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-w8wr-v893-vjvp	tar@6.2.1	7.5.18
Low	GHSA-869p-cjfg-cm3x	jws@3.2.2	3.2.3
Low	GHSA-w9j2-pvgh-6h63	axios@0.27.2	0.31.1
Low	ALPINE-CVE-2026-42767	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-52v5-jr5w-gjxr	sigstore@2.3.1	4.1.1
Low	GHSA-7q8q-rj6j-mhjq	axios@0.27.2	0.33.0
Low	GHSA-cm22-4g7w-348p	serve-static@1.15.0	1.16.0
Low	GHSA-v2v4-37r5-5v8g	ip-address@9.0.5	10.1.1
Low	GHSA-gvwx-54wh-qm9j	tar@6.2.1	7.5.17
Low	ALPINE-CVE-2026-34181	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-9965-vmph-33xx	validator@13.9.0	13.15.20
Low	GHSA-83g3-92jg-28cx	tar@6.2.1	7.5.8
Low	GHSA-5c9x-8gcm-mpgx	axios@0.27.2	0.31.1
Low	GHSA-vf2m-468p-8v99	axios@0.27.2	0.31.1
Low	GHSA-m6fv-jmcg-4jfg	send@0.18.0	0.19.0
Low	GHSA-4mjr-xmp4-gh2g	qs@6.11.0	6.16.0
Low	GHSA-qw6h-vgh9-j6wx	express@4.18.2	4.20.0
Low	GHSA-8m3c-c648-2xjj	nodemailer@6.9.13	9.1.1
Low	GHSA-58qx-3vcg-4xpx	ws@8.11.0	8.20.1
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@1.1.11	1.1.16
Low	GHSA-r7g4-qg5f-qqm2	nodemailer@6.9.13	8.0.8
Low	GHSA-vmf3-w455-68vh	tar@6.2.1	7.5.16
Low	GHSA-xx6v-rp6x-q39c	axios@0.27.2	0.31.1
Low	GHSA-w9m9-85wc-3x92	postcss-selector-parser@6.1.0	6.1.3
Low	GHSA-898c-q2cr-xwhg	axios@0.27.2	0.32.0
Low	GHSA-jfc7-64v2-mr8c	@sigstore/core@1.1.0	3.2.1
Low	GHSA-268h-hp4c-crq3	nodemailer@6.9.13	8.0.9
Low	GHSA-wqvq-jvpq-h66f	nodemailer@6.9.13	8.0.9
Low	ALPINE-CVE-2026-42769	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-45446	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-w7fw-mjwx-w883	qs@6.11.0	6.14.2
Low	GHSA-rpw4-54j3-4h4q	ip-address@9.0.5	10.5.1
Low	GHSA-c7w3-x93f-qmm8	nodemailer@6.9.13	8.0.4
Low	GHSA-6vj9-mwq6-2f5v	nodemailer@6.9.13	10.0.2
Low	GHSA-6rw7-vpxm-498p	qs@6.11.0	6.14.1
Low	GHSA-v422-hmwv-36x6	body-parser@1.20.1	1.20.6
Low	GHSA-v6h2-p8h4-qcjw	brace-expansion@1.1.11	1.1.12
Low	ALPINE-CVE-2026-42768	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-xhjh-pmcv-23jw	axios@0.27.2	0.31.1
Low	ALPINE-CVE-2026-42770	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-78xj-cgh5-2h22	ip@2.0.0	2.0.1
Low	GHSA-76c9-3jph-rj3q	on-headers@1.0.2	1.1.0
Low	RUSTSEC-2024-0436	paste@1.0.15	no fix listed
Low	RUSTSEC-2026-0097	rand@0.9.1	0.8.6
Low	RUSTSEC-2026-0105	core2@0.4.0	no fix listed
Low	RUSTSEC-2026-0190	anyhow@1.0.98	1.0.103
Low	RUSTSEC-2026-0204	crossbeam-epoch@0.9.18	0.9.20
Low	GHSA-pxg6-pf52-xh8x	cookie@0.4.2	0.7.0
Low	GHSA-vpq2-c234-7xj6	@tootallnate/once@1.1.2	2.0.1
Low	GHSA-cq8v-f236-94qc	rand@0.9.1	0.9.3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.2latest	yesterday	2.37.0	012496	1,403
1.1.1	13 days ago	2.36.1	0139100	1,749
1.1.0	1 month ago	2.36.0	0140113	1,899

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/charts-derwitt-dev/audiobookshelf.svg)](https://charts.stackradar.io/charts/charts-derwitt-dev/audiobookshelf)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.