paperless-ngx 2.1.6 Helm chart

Name: paperless-ngx Helm chart 2.1.6: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

charts-derwitt-dev

Scored 7 Oct 2026

A Helm chart for paperless-ngx (https://docs.paperless-ngx.com/)

Version 2.1.6 yesterdayapp version 3.3.0 0Artifact Hub

paperless-ngx 2.1.6 deploys 1 container image: ghcr.io/paperless-ngx/paperless-ngx. Across them, 416 findings — 0 critical, 1 high. The highest contribution is DEBIAN-CVE-2023-34152 in imagemagick 8:7.1.1.43+dfsg1-1+deb13u12, with no fix listed.

Radar Score

4,4380172343

416 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/paperless-ngx/paperless-ngx	3.3.0	0172343	4,438

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

343 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-86137	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	GHSA-54p9-h82j-f925	multidict@6.7.1	6.9.1
Low	DEBIAN-CVE-2023-39327	openjpeg2@2.5.3-2.1~deb13u2	no fix listed
Low	DEBIAN-CVE-2026-39316	cups@2.4.10-3+deb13u2	no fix listed
Low	DEBIAN-CVE-2026-41079	cups@2.4.10-3+deb13u2	no fix listed
Low	DEBIAN-CVE-2026-56392	coreutils@9.7-3	no fix listed
Low	DEBIAN-CVE-2026-36849	tiff@4.7.0-3+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-54370	acl@2.3.2-2+b1	no fix listed
Low	DEBIAN-CVE-2026-60747	mariadb@1:11.8.6-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2023-39328	openjpeg2@2.5.3-2.1~deb13u2	no fix listed
Low	DEBIAN-CVE-2026-19542	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-73066	tesseract@5.5.0-1+b1	no fix listed
Low	DEBIAN-CVE-2026-18393	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-56391	coreutils@9.7-3	no fix listed
Low	DEBIAN-CVE-2026-60331	mariadb@1:11.8.6-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2025-58436	cups@2.4.10-3+deb13u2	no fix listed
Low	DEBIAN-CVE-2026-18090	gdk-pixbuf@2.42.12+dfsg-4+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-73067	tesseract@5.5.0-1+b1	no fix listed
Low	DEBIAN-CVE-2026-39314	cups@2.4.10-3+deb13u2	no fix listed
Low	DEBIAN-CVE-2026-18938	p11-kit@0.25.5-3	no fix listed
Low	DEBIAN-CVE-2026-50813	sqlite3@3.46.1-7+deb13u2	no fix listed
Low	DEBIAN-CVE-2017-14159	openldap@2.6.10+dfsg-1	no fix listed
Low	DEBIAN-CVE-2017-18018	coreutils@9.7-3	no fix listed
Low	DEBIAN-CVE-2025-66442	mbedtls@3.6.6-0.1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-16768	gdk-pixbuf@2.42.12+dfsg-4+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-11850	krb5@1.21.3-5+deb13u1	no fix listed
Low	DEBIAN-CVE-2025-66382	expat@2.8.3-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2005-2541	tar@1.35+dfsg-3.1	no fix listed
Low	DEBIAN-CVE-2025-10966	curl@8.14.1-2+deb13u5	no fix listed
Low	GHSA-xpv3-w29h-x7cv	oauthlib@3.3.1	4.0.0
Low	DEBIAN-CVE-2026-87875	cups@2.4.10-3+deb13u2	no fix listed
Low	DEBIAN-CVE-2026-27171	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed
Low	DEBIAN-CVE-2026-86805	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-60184	mariadb@1:11.8.6-0+deb13u1	no fix listed
Low	GO-2026-4869	stdlib@go1.24.4	1.25.9
Low	DEBIAN-CVE-2025-59529	avahi@0.8-16	no fix listed
Low	DEBIAN-CVE-2026-64685	imagemagick@8:7.1.1.43+dfsg1-1+deb13u12	no fix listed
Low	DEBIAN-CVE-2025-59800	ghostscript@10.05.1~dfsg-1+deb13u2	no fix listed
Low	DEBIAN-CVE-2026-95512	freetype@2.13.3+dfsg-1+deb13u1	no fix listed
Low	DEBIAN-CVE-2023-30571	libarchive@3.7.4-4+deb13u1	no fix listed
Low	DEBIAN-CVE-2025-10911	libxslt@1.1.35-1.2+deb13u3	no fix listed
Low	DEBIAN-CVE-2025-60753	libarchive@3.7.4-4+deb13u1	no fix listed
Low	DEBIAN-CVE-2025-14017	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-5745	libarchive@3.7.4-4+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-76781	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-34933	avahi@0.8-16	no fix listed
Low	DEBIAN-CVE-2026-50812	sqlite3@3.46.1-7+deb13u2	no fix listed
Low	DEBIAN-CVE-2026-18495	tiff@4.7.0-3+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-15059	systemd@257.13-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2025-68276	avahi@0.8-16	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.1.6latest	yesterday	3.3.0	0172343	4,438
2.1.5	11 days ago	3.2.1	0174392	4,924
2.1.4	1 month ago	3.1.3	0190463	5,857

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/charts-derwitt-dev/paperless-ngx.svg)](https://charts.stackradar.io/charts/charts-derwitt-dev/paperless-ngx)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.