StackRadar

kroki 6.2.0 Helm chart

cowboysysopVerified publisher

Scored 13 Oct 2026

Creates diagrams from textual descriptions

Version 6.2.0 5 days agoapp version 0.33.0 6Artifact Hub

kroki 6.2.0 deploys 5 container images: yuzutech/kroki, yuzutech/kroki-bpmn, yuzutech/kroki-diagramsnet, yuzutech/kroki-excalidraw and 1 more. Across the 4 measured, 205 findings — 0 critical, 1 high. The highest contribution is GHSA-r5fr-rjxr-66jc in lodash-es 4.17.21, fixed in 4.18.0.

Radar Score

2,2530126178

205 findings over 4 of 5 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images
ImageTagVulnerabilitiesRadar Score
yuzutech/kroki0.33.0—not yet scanned
yuzutech/kroki-bpmn0.33.000641512
yuzutech/kroki-diagramsnet0.33.000641512
yuzutech/kroki-excalidraw0.33.001855717
yuzutech/kroki-mermaid0.33.000641512

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

64 distinct across the version’s images
SeverityAdvisoryPackageFixed in
HighGHSA-r5fr-rjxr-66jclodash-es@4.17.214.18.0
MediumALPINE-CVE-2021-27219glib@2.88.1-r12.66.6-r0
MediumALPINE-CVE-2026-63073openssl@3.5.7-r03.5.8-r0
MediumALPINE-CVE-2026-63076openssl@3.5.7-r03.5.8-r0
MediumALPINE-CVE-2026-18798openssl@3.5.7-r03.5.8-r0
MediumGHSA-f23m-r3pf-42rhlodash-es@4.17.214.18.0
MediumGHSA-xxjr-mmjv-4gpglodash-es@4.17.214.17.23
MediumALPINE-CVE-2026-14457openssl@3.5.7-r03.5.8-r0
MediumALPINE-CVE-2026-63072openssl@3.5.7-r03.5.8-r0
LowGHSA-vxpw-j846-p89qundici@6.26.06.27.0
LowALPINE-CVE-2026-63075openssl@3.5.7-r03.5.8-r0
LowGHSA-vfj7-8cjw-p6xmbraces@3.0.3no fix listed
LowALPINE-CVE-2026-14456openssl@3.5.7-r03.5.8-r0
LowGHSA-mwp4-54f8-5fhrip-address@10.2.010.3.1
LowGHSA-rgw5-rvv9-x895brace-expansion@5.0.65.0.9
LowGHSA-mh99-v99m-4gvgbrace-expansion@5.0.65.0.8
LowGHSA-68fv-2mgg-jv7qsource-map-js@1.2.11.2.2
LowALPINE-CVE-2026-54874openssl@3.5.7-r03.5.8-r0
LowGHSA-23hp-3jrh-7fpwtar@7.5.167.5.19
LowGHSA-ch52-4w7c-c8xphttp-cache-semantics@4.2.0no fix listed
LowGHSA-r292-9mhp-454mtar@7.5.167.5.21
LowALPINE-CVE-2026-85091zlib@1.3.2-r01.3.2-r1
LowGHSA-8x88-c5mf-7j5wtar@7.5.167.5.18
LowALPINE-CVE-2026-75803openssl@3.5.7-r03.5.8-r0
LowGHSA-rfgv-xxqx-mfg5undici@6.26.06.28.1
LowGHSA-4xrf-jv44-h6hhip-address@10.2.010.2.2
LowGHSA-6j4f-fj2g-mc7pbrace-expansion@5.0.65.0.10
LowGHSA-qhr7-859c-m2p7brace-expansion@5.0.65.0.11
LowGHSA-3rrr-jr9j-h3q3mermaid@11.15.011.16.1
LowGHSA-22jq-vg5j-6vggip-address@10.2.010.2.1
LowGHSA-2vr4-cq9g-pvrcip-address@10.2.010.5.1
LowALPINE-CVE-2026-63074openssl@3.5.7-r03.5.8-r0
LowGHSA-2v37-7h3g-55p8nanoid@4.0.25.1.6
LowGHSA-xwg4-73v4-xw9wnanoid@4.0.25.1.11
LowGHSA-rpw4-54j3-4h4qip-address@10.2.010.5.1
LowGHSA-w8wr-v893-vjvptar@7.5.167.5.18
LowGHSA-j6r3-76f7-8jcvip-address@10.2.010.7.1
LowGHSA-6x64-9x62-f2gxmermaid@11.15.011.16.1
LowGHSA-2v8p-3f2j-5mp7mermaid@11.15.011.16.1
LowGHSA-3wwx-pv8p-q78vundici@6.26.06.28.1
LowGHSA-rj75-hqrm-r3gfpostcss-selector-parser@7.1.47.1.6
LowGHSA-rhh3-jpg6-66xhmermaid@11.15.011.16.1
LowGHSA-gvwx-54wh-qm9jtar@7.5.167.5.17
LowGHSA-h3mg-xc3c-68pwip-address@10.2.010.7.1
LowGHSA-p88m-4jfj-68fvundici@6.26.06.27.0
LowGHSA-28wg-ghj8-5hjvnanoid@4.0.25.1.16
LowGHSA-3jxr-9vmj-r5cpbrace-expansion@5.0.65.0.7
LowGHSA-mwcw-c2x4-8c55nanoid@4.0.25.0.9
LowGHSA-q2hr-2g5m-vwhrbrace-expansion@5.0.65.0.12
LowGHSA-55q2-fjhq-7xh7dompurify@3.4.123.4.13

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
6.2.0latest5 days ago0.33.001261782,253
6.1.08 months ago0.29.1421545698,527

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/cowboysysop/kroki.svg)](https://charts.stackradar.io/charts/cowboysysop/kroki)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Oct 2026 · scanned 13 Oct 2026 · advisories as of 13 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.