audiobookshelf 1.1.1 Helm chart

Name: audiobookshelf Helm chart 1.1.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

charts-derwitt-dev

Not scored yet

A Helm chart for Audiobookshelf. Audiobookshelf is a self-hosted audiobook and podcast server that syncs listening progress across clients. Runs rootless with a read-only root filesystem. Libraries are configured in the app UI against the paths supplied through mediaMounts.

Version 1.1.1 todayapp version 2.36.1 0Artifact Hub

audiobookshelf 1.1.1 deploys 1 container image: ghcr.io/advplyr/audiobookshelf. The highest contribution is GHSA-r5fr-rjxr-66jc in lodash 4.17.21, fixed in 4.18.0.

Radar Score

Not yet scored

The daily scoring run has not folded the 1 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/advplyr/audiobookshelf	2.36.1	0132104	1,658

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

137 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-qw6h-vgh9-j6wx	express@4.18.2	4.20.0
Low	ALPINE-CVE-2026-42769	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-7q8q-rj6j-mhjq	axios@0.27.2	0.33.0
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@1.1.11	1.1.16
Low	GHSA-vmf3-w455-68vh	tar@6.2.1	7.5.16
Low	GHSA-5c9x-8gcm-mpgx	axios@0.27.2	0.31.1
Low	GHSA-vf2m-468p-8v99	axios@0.27.2	0.31.1
Low	GHSA-2x7j-588g-ccc2	nodemailer@6.9.13	9.1.0
Low	GHSA-jfc7-64v2-mr8c	@sigstore/core@1.1.0	3.2.1
Low	ALPINE-CVE-2026-45446	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-4mjr-xmp4-gh2g	qs@6.11.0	6.16.0
Low	GHSA-xx6v-rp6x-q39c	axios@0.27.2	0.31.1
Low	GHSA-898c-q2cr-xwhg	axios@0.27.2	0.32.0
Low	GHSA-r7g4-qg5f-qqm2	nodemailer@6.9.13	8.0.8
Low	GHSA-268h-hp4c-crq3	nodemailer@6.9.13	8.0.9
Low	GHSA-wqvq-jvpq-h66f	nodemailer@6.9.13	8.0.9
Low	ALPINE-CVE-2026-42768	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-wmmp-3585-3rmp	nodemailer@6.9.13	9.1.0
Low	GHSA-w9m9-85wc-3x92	postcss-selector-parser@6.1.0	6.1.3
Low	GHSA-w7fw-mjwx-w883	qs@6.11.0	6.14.2
Low	ALPINE-CVE-2026-42770	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-6rw7-vpxm-498p	qs@6.11.0	6.14.1
Low	GHSA-v422-hmwv-36x6	body-parser@1.20.1	1.20.6
Low	GHSA-8m3c-c648-2xjj	nodemailer@6.9.13	9.1.1
Low	GHSA-v6h2-p8h4-qcjw	brace-expansion@1.1.11	1.1.12
Low	GHSA-c7w3-x93f-qmm8	nodemailer@6.9.13	8.0.4
Low	GHSA-78xj-cgh5-2h22	ip@2.0.0	2.0.1
Low	GHSA-xhjh-pmcv-23jw	axios@0.27.2	0.31.1
Low	GHSA-76c9-3jph-rj3q	on-headers@1.0.2	1.1.0
Low	RUSTSEC-2024-0436	paste@1.0.15	no fix listed
Low	RUSTSEC-2026-0097	rand@0.9.1	0.8.6
Low	RUSTSEC-2026-0105	core2@0.4.0	no fix listed
Low	RUSTSEC-2026-0190	anyhow@1.0.98	1.0.103
Low	RUSTSEC-2026-0204	crossbeam-epoch@0.9.18	0.9.20
Low	GHSA-pxg6-pf52-xh8x	cookie@0.4.2	0.7.0
Low	GHSA-vpq2-c234-7xj6	@tootallnate/once@1.1.2	2.0.1
Low	GHSA-cq8v-f236-94qc	rand@0.9.1	0.9.3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.1latest	today	2.36.1	—	—
1.1.0	1 month ago	2.36.0	0133109	1,724

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/charts-derwitt-dev/audiobookshelf.svg)](https://charts.stackradar.io/charts/charts-derwitt-dev/audiobookshelf)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.