audiobookshelf 1.1.1 Helm chart

Name: audiobookshelf Helm chart 1.1.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

charts-derwitt-dev

Not scored yet

A Helm chart for Audiobookshelf. Audiobookshelf is a self-hosted audiobook and podcast server that syncs listening progress across clients. Runs rootless with a read-only root filesystem. Libraries are configured in the app UI against the paths supplied through mediaMounts.

Version 1.1.1 todayapp version 2.36.1 0Artifact Hub

audiobookshelf 1.1.1 deploys 1 container image: ghcr.io/advplyr/audiobookshelf. The highest contribution is GHSA-r5fr-rjxr-66jc in lodash 4.17.21, fixed in 4.18.0.

Radar Score

Not yet scored

The daily scoring run has not folded the 1 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/advplyr/audiobookshelf	2.36.1	0132104	1,658

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

137 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-pmwg-cvhr-8vh7	axios@0.27.2	0.31.1
Low	GHSA-qffp-2rhf-9h96	tar@6.2.1	7.5.10
Low	GHSA-23hp-3jrh-7fpw	tar@6.2.1	7.5.19
Low	GHSA-hmw2-7cc7-3qxx	form-data@4.0.0	4.0.6
Low	ALPINE-CVE-2026-54874	openssl@3.5.6-r0	3.5.8-r0
Low	GHSA-7r86-cg39-jmmj	minimatch@9.0.5	9.0.7
Low	GHSA-vghf-hv5q-vc2g	validator@13.9.0	13.15.22
Low	ALPINE-CVE-2026-42766	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-2m8v-j782-fhvr	socket.io-parser@4.2.4	4.2.7
Low	GHSA-8qq5-rm4j-mr97	tar@6.2.1	7.5.3
Low	GHSA-fvcv-3m26-pcqx	axios@0.27.2	0.31.0
Low	ALPINE-CVE-2026-63075	openssl@3.5.6-r0	3.5.8-r0
Low	GHSA-rcmh-qjqh-p98v	nodemailer@6.9.13	7.0.11
Low	GHSA-23c5-xmqv-rm74	minimatch@9.0.5	9.0.7
Low	GHSA-73rr-hh4g-fpgx	diff@5.2.0	5.2.2
Low	GHSA-8x88-c5mf-7j5w	tar@6.2.1	7.5.18
Low	GHSA-rv95-896h-c2vc	express@4.18.2	4.19.2
Low	GHSA-6457-6jrx-69cr	sequelize@6.35.2	6.37.8
Low	GHSA-mm7p-fcc7-pg87	nodemailer@6.9.13	7.0.7
Low	GHSA-mwp4-54f8-5fhr	ip-address@9.0.5	10.3.1
Low	ALPINE-CVE-2026-75803	openssl@3.5.6-r0	3.5.8-r0
Low	GHSA-6chq-wfr3-2hj9	axios@0.27.2	0.31.1
Low	GHSA-r6q2-hw4h-h46w	tar@6.2.1	7.5.4
Low	GHSA-r292-9mhp-454m	tar@6.2.1	7.5.21
Low	GHSA-r4q5-vmmm-2653	follow-redirects@1.15.5	1.16.0
Low	GHSA-wf5p-g6vw-rhxx	axios@0.27.2	0.28.0
Low	GHSA-w5hq-g745-h8pq	uuid@8.3.2	11.1.1
Low	GHSA-w4pp-8pjf-rmxw	pacote@18.0.6	21.5.1
Low	GHSA-9ppj-qmqm-q256	tar@6.2.1	7.5.11
Low	GHSA-3p68-rc4w-qgx5	axios@0.27.2	0.31.0
Low	GHSA-f886-m6hf-6m8v	brace-expansion@1.1.11	1.1.13
Low	ALPINE-CVE-2026-42767	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-83g3-92jg-28cx	tar@6.2.1	7.5.8
Low	ALPINE-CVE-2026-63074	openssl@3.5.6-r0	3.5.8-r0
Low	GHSA-w8wr-v893-vjvp	tar@6.2.1	7.5.18
Low	ALPINE-CVE-2026-34181	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-m7pr-hjqh-92cm	axios@0.27.2	0.31.1
Low	GHSA-p6gq-j5cr-w38f	nodemailer@6.9.13	9.0.1
Low	GHSA-869p-cjfg-cm3x	jws@3.2.2	3.2.3
Low	GHSA-mmx7-hfxf-jppx	axios@0.27.2	0.33.0
Low	GHSA-vvjj-xcjg-gr5g	nodemailer@6.9.13	8.0.5
Low	GHSA-52v5-jr5w-gjxr	sigstore@2.3.1	4.1.1
Low	GHSA-cm22-4g7w-348p	serve-static@1.15.0	1.16.0
Low	GHSA-r5mx-6wc6-7h9w	dottie@2.0.6	2.0.7
Low	GHSA-gvwx-54wh-qm9j	tar@6.2.1	7.5.17
Low	GHSA-9965-vmph-33xx	validator@13.9.0	13.15.20
Low	GHSA-v2v4-37r5-5v8g	ip-address@9.0.5	10.1.1
Low	GHSA-m6fv-jmcg-4jfg	send@0.18.0	0.19.0
Low	GHSA-w9j2-pvgh-6h63	axios@0.27.2	0.31.1
Low	GHSA-58qx-3vcg-4xpx	ws@8.11.0	8.20.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.1latest	today	2.36.1	—	—
1.1.0	1 month ago	2.36.0	0133109	1,724

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/charts-derwitt-dev/audiobookshelf.svg)](https://charts.stackradar.io/charts/charts-derwitt-dev/audiobookshelf)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.