paperless-ngx 2.1.5 Helm chart

Name: paperless-ngx Helm chart 2.1.5: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

charts-derwitt-dev

Scored 27 Sept 2026

A Helm chart for paperless-ngx (https://docs.paperless-ngx.com/)

Version 2.1.5 yesterdayapp version 3.2.1 0Artifact Hub

paperless-ngx 2.1.5 deploys 1 container image: ghcr.io/paperless-ngx/paperless-ngx. Across them, 406 findings — 0 critical, 1 high. The highest contribution is DEBIAN-CVE-2023-34152 in imagemagick 8:7.1.1.43+dfsg1-1+deb13u12, with no fix listed.

Radar Score

4,1750168337

406 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/paperless-ngx/paperless-ngx	3.2.1	0168337	4,175

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

406 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	DEBIAN-CVE-2026-67215	cjson@1.7.18-3.1+deb13u1	no fix listed
Medium	DEBIAN-CVE-2021-36691	jpeg-xl@0.11.2-0.1~deb13u2	no fix listed
Medium	DEBIAN-CVE-2026-18924	curl@8.14.1-2+deb13u5	no fix listed
Medium	DEBIAN-CVE-2026-39919	ghostscript@10.05.1~dfsg-1+deb13u1	10.05.1~dfsg-1+deb13u2
Medium	DEBIAN-CVE-2026-64830	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Medium	DEBIAN-CVE-2026-48163	mariadb@1:11.8.6-0+deb13u1	no fix listed
Medium	DEBIAN-CVE-2017-11754	imagemagick@8:7.1.1.43+dfsg1-1+deb13u12	no fix listed
Medium	DEBIAN-CVE-2017-11755	imagemagick@8:7.1.1.43+dfsg1-1+deb13u12	no fix listed
Medium	DEBIAN-CVE-2018-18064	cairo@1.18.4-1+b1	no fix listed
Medium	DEBIAN-CVE-2025-29070	lcms2@2.16-2+deb13u2	no fix listed
Medium	DEBIAN-CVE-2026-8927	curl@8.14.1-2+deb13u5	no fix listed
Medium	DEBIAN-CVE-2015-9019	libxslt@1.1.35-1.2+deb13u3	no fix listed
Medium	DEBIAN-CVE-2017-11695	nss@2:3.110-1+deb13u4	no fix listed
Medium	DEBIAN-CVE-2017-11696	nss@2:3.110-1+deb13u4	no fix listed
Medium	DEBIAN-CVE-2017-11698	nss@2:3.110-1+deb13u4	no fix listed
Medium	DEBIAN-CVE-2026-85091	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed
Medium	DEBIAN-CVE-2026-58049	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Medium	DEBIAN-CVE-2026-66036	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Medium	DEBIAN-CVE-2019-1010025	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-8926	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-6653	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-64835	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-14164	libarchive@3.7.4-4+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-30999	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2017-9083	poppler@25.03.0-5+deb13u4	no fix listed
Low	DEBIAN-CVE-2017-7475	cairo@1.18.4-1+b1	no fix listed
Low	DEBIAN-CVE-2018-1000520	mbedtls@3.6.6-0.1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-29036	cjson@1.7.18-3.1+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-8286	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-54411	pam@1.7.0-5	no fix listed
Low	DEBIAN-CVE-2026-67216	cjson@1.7.18-3.1+deb13u1	no fix listed
Low	DEBIAN-CVE-2016-8678	imagemagick@8:7.1.1.43+dfsg1-1+deb13u12	no fix listed
Low	DEBIAN-CVE-2026-82560	perl@5.40.1-6+deb13u1	no fix listed
Low	DEBIAN-CVE-2020-24890	libraw@0.21.4-2+deb13u1	no fix listed
Low	PYSEC-2026-3717	django@5.2.16	5.2.17
Low	DEBIAN-CVE-2017-11697	nss@2:3.110-1+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-6791	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-93990	expat@2.8.3-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-41992	gzip@1.13-1	1.13-1+deb13u1
Low	DEBIAN-CVE-2026-80229	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-9538	perl@5.40.1-6+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-74860	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-66041	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2017-7275	imagemagick@8:7.1.1.43+dfsg1-1+deb13u12	no fix listed
Low	DEBIAN-CVE-2024-2236	libgcrypt20@1.11.0-7+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-25833	mbedtls@3.6.6-0.1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-64832	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-84384	libheif@1.19.8-1+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-84447	libheif@1.19.8-1+deb13u1	no fix listed
Low	DEBIAN-CVE-2025-69720	ncurses@6.5+20250216-2	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.1.5latest	yesterday	3.2.1	0168337	4,175
2.1.4	23 days ago	3.1.3	0186407	5,122

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/charts-derwitt-dev/paperless-ngx.svg)](https://charts.stackradar.io/charts/charts-derwitt-dev/paperless-ngx)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.