kroki Helm chart

Name: kroki Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cowboysysop

Scored 14 Sept 2026

Creates diagrams from textual descriptions

Latest 6.1.0 7 months agodeploys tag 0.29.1 6Artifact Hub

kroki 6.1.0 deploys 5 container images: yuzutech/kroki, yuzutech/kroki-bpmn, yuzutech/kroki-diagramsnet, yuzutech/kroki-excalidraw and 1 more. Across the 4 measured, 589 findings — 0 critical, 6 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.3.5-r0, fixed in 3.3.6-r0.

Radar Score

6,74306110473

589 findings over 4 of 5 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
yuzutech/kroki	0.29.1	—	not yet scanned
yuzutech/kroki-bpmn	0.29.1	0125110	1,557
yuzutech/kroki-diagramsnet	0.29.1	0125109	1,544
yuzutech/kroki-excalidraw	0.29.1	0233145	2,017
yuzutech/kroki-mermaid	0.29.1	0227109	1,625

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

184 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-3832	gnutls@3.8.8-r0	3.8.13-r0
Low	ALPINE-CVE-2026-50219	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-25834	mbedtls@3.6.5-r0	3.6.6-r0
Low	ALPINE-CVE-2026-56409	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-39314	cups@2.4.11-r0	2.4.18-r0
Low	ALPINE-CVE-2026-27171	zlib@1.3.1-r2	1.3.2-r0
Low	ALPINE-CVE-2026-34990	cups@2.4.11-r0	2.4.18-r0
Low	ALPINE-CVE-2026-32777	expat@2.7.3-r0	2.7.5-r0
Low	ALPINE-CVE-2026-56132	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-32778	expat@2.7.3-r0	2.7.5-r0
Low	GHSA-cmwh-pvxp-8882	dompurify@3.1.6	3.4.11
Low	GHSA-gvmj-g25r-r7wr	dompurify@3.1.6	3.4.8
Low	ALPINE-CVE-2026-32776	expat@2.7.3-r0	2.7.5-r0
Low	ALPINE-CVE-2026-6042	musl@1.2.5-r9	1.2.5-r10
Low	GHSA-cjmm-f4jc-qw8r	dompurify@3.1.6	3.3.2
Low	GHSA-w9m9-85wc-3x92	postcss-selector-parser@7.1.0	7.1.3
Low	ALPINE-CVE-2026-22795	openssl@3.3.5-r0	3.3.6-r0
Low	ALPINE-CVE-2026-56131	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-5419	gnutls@3.8.8-r0	3.8.13-r0
Low	ALPINE-CVE-2025-69277	libsodium@1.0.20-r0	1.0.20-r1
Low	GHSA-39h7-pwv7-rc3x	@excalidraw/excalidraw@0.18.0	0.18.1
Low	GHSA-39h7-pwv7-rc3x	@excalidraw/mermaid-to-excalidraw@1.1.2	1.1.3
Low	ALPINE-CVE-2026-34757	libpng@1.6.53-r0	1.6.57-r0
Low	ALPINE-CVE-2025-68160	openssl@3.3.5-r0	3.3.6-r0
Low	ALPINE-CVE-2025-9820	gnutls@3.8.8-r0	3.8.12-r0
Low	ALPINE-CVE-2026-41080	expat@2.7.3-r0	2.8.1-r0
Low	ALPINE-CVE-2025-69418	openssl@3.3.5-r0	3.3.6-r0
Low	ALPINE-CVE-2025-46394	busybox@1.37.0-r13	1.37.0-r14
Low	ALPINE-CVE-2026-24515	expat@2.7.3-r0	2.7.4-r0
Low	GHSA-c4c3-pg64-4m4v	mermaid@10.9.3	10.9.8
Low	ALPINE-CVE-2024-58251	busybox@1.37.0-r13	1.37.0-r14
Low	GHSA-vxr8-fq34-vvx9	dompurify@3.1.6	3.4.9
Low	GHSA-c2j3-45gr-mqc4	dompurify@3.1.6	3.4.12
Low	GHSA-x4vx-rjvf-j5p4	dompurify@3.1.6	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
6.1.0latest	7 months ago	0.29.1	06110473	6,743

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cowboysysop/kroki.svg)](https://charts.stackradar.io/charts/cowboysysop/kroki)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.