dawarich 2.9.1 Helm chart
cogitriVerified publisherScored 23 Sept 2026
Self-hosted alternative to Google Location History
Version 2.9.1 yesterdayapp version 1.15.1 1Artifact Hub
dawarich 2.9.1 deploys 3 container images: library/busybox, freikin/dawarich and public.ecr.aws/docker/library/redis. Across them, 590 findings — 0 critical, 2 high. The highest contribution is GHSA-r5fr-rjxr-66jc in lodash 4.17.21, fixed in 4.18.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| library/ | latest | 0000 | 0 |
| freikin/ | 1.15.1 | 0269505 | 5,869 |
| public.ecr.aws/ | 8.8.0-alpine | 0048 | 168 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2023-30571 | libarchive | no fix listed |
| Low | DEBIAN-CVE-2025-10911 | libxslt | no fix listed |
| Low | DEBIAN-CVE-2026-33916 | node-handlebars | no fix listed |
| Low | GHSA-2qvq-rjwj-gvw9 | handlebars | 4.7.9 |
| Low | DEBIAN-CVE-2026-56288 | patch | no fix listed |
| Low | DEBIAN-CVE-2026-56289 | patch | no fix listed |
| Low | GO-2025-4008 | stdlib | 1.24.8 |
| Low | GO-2025-4010 | stdlib | 1.24.8 |
| Low | DEBIAN-CVE-2025-69645 | binutils | no fix listed |
| Low | DEBIAN-CVE-2026-5745 | libarchive | no fix listed |
| Low | DEBIAN-CVE-2026-1527 | node-undici | no fix listed |
| Low | GHSA-4992-7rv2-5pvq | undici | 7.24.0 |
| Low | DEBIAN-CVE-2025-60753 | libarchive | no fix listed |
| Low | DEBIAN-CVE-2026-50812 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2026-76781 | libxml2 | no fix listed |
| Low | DEBIAN-CVE-2026-18495 | tiff | no fix listed |
| Low | GO-2025-4014 | stdlib | 1.24.8 |
| Low | DEBIAN-CVE-2026-53655 | node-tar | no fix listed |
| Low | DEBIAN-CVE-2025-69646 | binutils | no fix listed |
| Low | GHSA-46q3-7gv7-qmgg | net-imap | 0.5.15 |
| Low | DEBIAN-CVE-2026-18938 | p11-kit | no fix listed |
| Low | DEBIAN-CVE-2025-8225 | binutils | no fix listed |
| Low | DEBIAN-CVE-2026-86805 | glibc | no fix listed |
| Low | GO-2026-4976 | stdlib | 1.25.10 |
| Low | DEBIAN-CVE-2025-5278 | coreutils | no fix listed |
| Low | GO-2026-5856 | stdlib | 1.25.12 |
| Low | GO-2025-4007 | stdlib | 1.24.9 |
| Low | GO-2026-4980 | stdlib | 1.25.10 |
| Low | DEBIAN-CVE-2024-7883 | llvm-toolchain-19 | no fix listed |
| Low | GO-2026-5039 | stdlib | 1.25.11 |
| Low | GO-2025-3849 | stdlib | 1.23.12 |
| Low | GO-2025-4013 | stdlib | 1.24.8 |
| Low | GO-2026-4946 | stdlib | 1.25.9 |
| Low | DEBIAN-CVE-2026-12003 | python3.13 | no fix listed |
| Low | DEBIAN-CVE-2025-6141 | ncurses | no fix listed |
| Low | GHSA-v3r7-h72x-cjcm | undici | 7.29.0 |
| Low | GO-2026-4603 | stdlib | 1.25.8 |
| Low | DEBIAN-CVE-2010-4756 | glibc | no fix listed |
| Low | DEBIAN-CVE-2026-48934 | nodejs | no fix listed |
| Low | GO-2026-4982 | stdlib | 1.25.10 |
| Low | GO-2026-6091 | stdlib | 1.25.13 |
| Low | DEBIAN-CVE-2026-15059 | systemd | no fix listed |
| Low | DEBIAN-CVE-2024-56433 | shadow | no fix listed |
| Low | DEBIAN-CVE-2024-25260 | elfutils | no fix listed |
| Low | DEBIAN-CVE-2025-61143 | tiff | no fix listed |
| Low | GHSA-8xcm-r25x-g524 | undici | 7.29.0 |
| Low | GHSA-x2f5-4prf-w687 | json | 2.19.9 |
| Low | DEBIAN-CVE-2026-19548 | binutils | no fix listed |
| Low | DEBIAN-CVE-2026-13573 | llvm-toolchain-19 | no fix listed |
| Low | DEBIAN-CVE-2026-13574 | llvm-toolchain-19 | no fix listed |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 2.9.1latest | yesterday | 1.15.1 | 0273513 | 6,037 |
| 2.8.4 | 9 days ago | 1.14.5 | 0273513 | 6,037 |
| 2.8.3 | 16 days ago | 1.14.4 | 0048 | 168 |
| 2.8.2 | 19 days ago | 1.14.2 | 0048 | 168 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.