penpot Helm chart

Name: penpot Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

codechem

Scored 20 Sept 2026

CodeChem Penpot Helm Chart

Latest 1.0.10app version 1.16.0-beta 5Artifact Hub

penpot 1.0.10 deploys 3 container images: penpotapp/backend, penpotapp/exporter and penpotapp/frontend. Across them, 2,197 findings — 19 critical, 50 high — 12 on CISA KEV. The highest contribution is UBUNTU-CVE-2023-38545 in curl 7.81.0-1ubuntu1.6, fixed in 7.81.0-1ubuntu1.14.

Radar Score

28,39419504781,647

2,197 findings over 3 of 3 images measured

KEV ×12 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
penpotapp/backend	1.16.0-beta	1019221767	12,828
penpotapp/exporter	1.16.0-beta	927247821	14,599
penpotapp/frontend	1.16.0-beta	041059	967

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

297 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	DLA-3859-1	systemd@247.3-7+deb11u1	247.3-7+deb11u6
Medium	UBUNTU-CVE-2023-28879	ghostscript@9.55.0~dfsg1-0ubuntu5.1	9.55.0~dfsg1-0ubuntu5.2
Medium	GHSA-f9xh-2qgp-cq57	jackson-databind@2.9.10.1	2.9.10.8
Medium	GHSA-4jrv-ppp4-jm57	gson@2.7	2.8.9
Medium	GHSA-m6x4-97wx-4q27	jackson-databind@2.9.10.1	2.9.10.8
Medium	GHSA-fqwf-pjwf-7vqv	jackson-databind@2.9.10.1	2.9.10.4
Medium	UBUNTU-CVE-2022-37454	python3.10@3.10.6-1~22.04	3.10.6-1~22.04.2
Medium	GHSA-r3gr-cxrf-hg25	jackson-databind@2.9.10.1	2.9.10.8
Medium	DSA-5523-1	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u10
Medium	GHSA-h3cw-g4mq-c5x2	jackson-databind@2.9.10.1	2.9.10.6
Medium	DSA-5417-1	openssl@1.1.1n-0+deb11u3	1.1.1n-0+deb11u5
Medium	GHSA-j823-4qch-3rgm	jackson-databind@2.9.10.1	2.9.10.5
Medium	GHSA-2p57-rm9w-gvfp	ip@1.1.8	no fix listed
Medium	UBUNTU-CVE-2022-42898	krb5@1.19.2-2	1.19.2-2ubuntu0.1
Medium	GHSA-5p34-5m6p-p58g	jackson-databind@2.9.10.1	2.9.10.4
Medium	UBUNTU-CVE-2024-7264	curl@7.81.0-1ubuntu1.6	7.81.0-1ubuntu1.17
Medium	GHSA-c265-37vj-cwcc	jackson-databind@2.9.10.1	2.9.10.5
Medium	GHSA-9vvp-fxw6-jcxr	jackson-databind@2.9.10.1	2.9.10.4
Medium	UBUNTU-CVE-2024-5535	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.17
Medium	GHSA-wh8g-3j2c-rqj5	jackson-databind@2.9.10.1	2.9.10.8
Medium	UBUNTU-CVE-2023-43115	ghostscript@9.55.0~dfsg1-0ubuntu5.1	9.55.0~dfsg1-0ubuntu5.5
Medium	GHSA-5949-rw7g-wx7w	jackson-databind@2.9.10.1	2.9.10.7
Medium	GHSA-qjw2-hr98-qgfh	jackson-databind@2.9.10.1	2.9.10.6
Medium	DSA-5343-1	openssl@1.1.1n-0+deb11u3	1.1.1n-0+deb11u4
Medium	UBUNTU-CVE-2019-2126	aom@3.3.0-1	no fix listed
Medium	DLA-3942-1	openssl@1.1.1n-0+deb11u3	1.1.1n-0+deb11u6
Medium	DLA-3942-2	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u2
Medium	UBUNTU-CVE-2022-4304	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.8
Medium	UBUNTU-CVE-2022-40304	libxml2@2.9.13+dfsg-1ubuntu0.1	2.9.13+dfsg-1ubuntu0.2
Medium	GHSA-h4rc-386g-6m85	jackson-databind@2.9.10.1	2.9.10.4
Medium	UBUNTU-CVE-2020-10735	python3.10@3.10.6-1~22.04	no fix listed
Medium	GHSA-m72m-mhq2-9p6c	jsoup@1.7.2	1.14.2
Medium	GHSA-8w26-6f25-cm9x	jackson-databind@2.9.10.1	2.9.10.8
Medium	GHSA-r695-7vr9-jgc2	jackson-databind@2.9.10.1	2.9.10.8
Medium	GHSA-v585-23hc-c647	jackson-databind@2.9.10.1	2.9.10.8
Medium	GHSA-89qr-369f-5m5x	jackson-databind@2.9.10.1	2.9.10.8
Medium	GHSA-8c4j-34r4-xr8g	jackson-databind@2.9.10.1	2.9.10.8
Medium	GHSA-cvm9-fjm9-3572	jackson-databind@2.9.10.1	2.9.10.8
Medium	GHSA-9m6f-7xcq-8vf8	jackson-databind@2.9.10.1	2.9.10.8
Medium	GHSA-vfqx-33qm-g869	jackson-databind@2.9.10.1	2.9.10.8
Medium	GHSA-58pp-9c76-5625	jackson-databind@2.9.10.1	2.9.10.4
Medium	GHSA-rf6r-2c4q-2vwg	jackson-databind@2.9.10.1	2.9.10.4
Medium	UBUNTU-CVE-2022-48522	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.3
Medium	GHSA-v3xw-c963-f5hc	jackson-databind@2.9.10.1	2.9.10.4
Medium	UBUNTU-CVE-2026-45447	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.25
Medium	GHSA-758m-v56v-grj4	jackson-databind@2.9.10.1	2.9.10.4
Medium	GHSA-mc6h-4qgp-37qh	jackson-databind@2.9.10.1	2.9.10.5
Medium	GHSA-c2q3-4qrh-fm48	jackson-databind@2.9.10.1	2.9.10.5
Medium	UBUNTU-CVE-2019-9543	poppler@22.02.0-2ubuntu0.1	no fix listed
Medium	GHSA-95cm-88f5-f2c7	jackson-databind@2.9.10.1	2.9.10.4

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.10latest	—	1.16.0-beta	19504781,647	28,394

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/codechem/penpot.svg)](https://charts.stackradar.io/charts/codechem/penpot)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.