penpot Helm chart
codechemVerified publisherScored 20 Sept 2026
CodeChem Penpot Helm Chart
Latest 1.0.10app version 1.16.0-beta 5Artifact Hub
penpot 1.0.10 deploys 3 container images: penpotapp/backend, penpotapp/exporter and penpotapp/frontend. Across them, 2,197 findings — 19 critical, 50 high — 12 on CISA KEV. The highest contribution is UBUNTU-CVE-2023-38545 in curl 7.81.0-1ubuntu1.6, fixed in 7.81.0-1ubuntu1.14.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
3 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| penpotapp/ | 1.16.0-beta | 1019221767 | 12,828 |
| penpotapp/ | 1.16.0-beta | 927247821 | 14,599 |
| penpotapp/ | 1.16.0-beta | 041059 | 967 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
1,257 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-33636 | libpng1.6 | 1.6.37-3ubuntu0.5 |
| Low | UBUNTU-CVE-2023-27536 | curl | 7.81.0-1ubuntu1.10 |
| Low | GHSA-3pxv-7cmr-fjr4 | log4j-core | 2.25.4 |
| Low | UBUNTU-CVE-2024-56406 | perl | 5.34.0-3ubuntu1.4 |
| Low | UBUNTU-CVE-2024-37370 | krb5 | 1.19.2-2ubuntu0.4 |
| Low | UBUNTU-CVE-2023-38546 | curl | 7.81.0-1ubuntu1.14 |
| Low | GHSA-h7cp-r72f-jxh6 | pbkdf2 | 3.1.3 |
| Low | GHSA-34x7-hfp2-rc4v | tar | 7.5.7 |
| Low | UBUNTU-CVE-2022-37051 | poppler | 22.02.0-2ubuntu0.3 |
| Low | UBUNTU-CVE-2023-3316 | tiff | 4.3.0-6ubuntu0.5 |
| Low | UBUNTU-CVE-2026-6100 | python3.10 | 3.10.12-1~22.04.16 |
| Low | UBUNTU-CVE-2024-9287 | python3.10 | 3.10.12-1~22.04.7 |
| Low | UBUNTU-CVE-2017-7475 | cairo | no fix listed |
| Low | UBUNTU-CVE-2026-41142 | openexr | no fix listed |
| Low | UBUNTU-CVE-2026-9076 | openssl | 3.0.2-0ubuntu1.25 |
| Low | UBUNTU-CVE-2023-28484 | libxml2 | 2.9.13+dfsg-1ubuntu0.3 |
| Low | UBUNTU-CVE-2022-37050 | poppler | 22.02.0-2ubuntu0.3 |
| Low | UBUNTU-CVE-2026-82209 | curl | no fix listed |
| Low | UBUNTU-CVE-2026-45445 | openssl | 3.0.2-0ubuntu1.25 |
| Low | UBUNTU-CVE-2021-45942 | openexr | no fix listed |
| Low | UBUNTU-CVE-2025-58364 | cups | 2.4.1op1-1ubuntu4.12 |
| Low | UBUNTU-CVE-2022-37052 | poppler | 22.02.0-2ubuntu0.3 |
| Low | UBUNTU-CVE-2022-38349 | poppler | 22.02.0-2ubuntu0.3 |
| Low | UBUNTU-CVE-2023-2283 | libssh | 0.9.6-2ubuntu0.22.04.1 |
| Low | UBUNTU-CVE-2026-4224 | python3.10 | 3.10.12-1~22.04.16 |
| Low | UBUNTU-CVE-2024-25269 | libheif | 1.12.0-2ubuntu0.1~esm2 |
| Low | UBUNTU-CVE-2021-46312 | djvulibre | 3.5.28-2ubuntu0.22.04.2 |
| Low | UBUNTU-CVE-2026-63072 | openssl | 3.0.2-0ubuntu1.29 |
| Low | DSA-5330-1 | curl | 7.74.0-1.3+deb11u5 |
| Low | UBUNTU-CVE-2026-7210 | python3.10 | no fix listed |
| Low | UBUNTU-CVE-2026-12087 | perl | 5.34.0-3ubuntu1.8 |
| Low | GHSA-6fmv-xxpf-w3cw | plexus-utils | 3.6.1 |
| Low | UBUNTU-CVE-2023-47038 | perl | 5.34.0-3ubuntu1.3 |
| Low | UBUNTU-CVE-2022-3599 | tiff | 4.3.0-6ubuntu0.2 |
| Low | GHSA-ch7q-gpff-h9hp | undertow-core | 2.2.34.Final |
| Low | UBUNTU-CVE-2022-3598 | tiff | 4.3.0-6ubuntu0.2 |
| Low | UBUNTU-CVE-2023-29469 | libxml2 | 2.9.13+dfsg-1ubuntu0.3 |
| Low | UBUNTU-CVE-2023-2603 | libcap2 | 1:2.44-1ubuntu0.22.04.1 |
| Low | GHSA-mh99-v99m-4gvg | brace-expansion | 1.1.17 |
| Low | UBUNTU-CVE-2025-8194 | python3.10 | 3.10.12-1~22.04.11 |
| Low | GHSA-pwqr-wmgm-9rr8 | netty-codec-http | 4.1.132.Final |
| Low | UBUNTU-CVE-2025-5318 | libssh | 0.9.6-2ubuntu0.22.04.4 |
| Low | UBUNTU-CVE-2026-15308 | python3.10 | 3.10.12-1~22.04.18 |
| Low | UBUNTU-CVE-2026-0915 | glibc | 2.35-0ubuntu3.13 |
| Low | UBUNTU-CVE-2025-4802 | glibc | 2.35-0ubuntu3.10 |
| Low | UBUNTU-CVE-2023-50495 | ncurses | no fix listed |
| Low | GHSA-rgw5-rvv9-x895 | brace-expansion | 1.1.18 |
| Low | UBUNTU-CVE-2026-4775 | tiff | no fix listed |
| Low | UBUNTU-CVE-2026-5773 | curl | 7.81.0-1ubuntu1.24 |
| Low | UBUNTU-CVE-2023-5981 | gnutls28 | 3.7.3-4ubuntu1.3 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/codechem/penpot)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.