paperless-ngx Helm chart

Name: paperless-ngx Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

crystalnet

Scored 15 Sept 2026

A community-supported supercharged version of paperless with an included ftp server: scan, index and archive all your physical documents.

Latest 0.2.22 1 year agoapp version 2.13.1 1Artifact Hub

paperless-ngx 0.2.22 deploys 3 container images: ghcr.io/paperless-ngx/paperless-ngx, bitnami/postgresql and bitnami/redis. Across the 1 measured, 1,271 findings — 2 critical, 4 high — 1 on CISA KEV. The highest contribution is DEBIAN-CVE-2025-27363 in freetype 2.12.1+dfsg-5+deb12u3, fixed in 2.12.1+dfsg-5+deb12u4. Chart.yaml declares kubeVersion >=1.22.0-0; rendered for Kubernetes 1.22.0.

Radar Score

12,924241661,097

1,271 findings over 1 of 3 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/paperless-ngx/paperless-ngx×4	2.13.1	241661,097	12,924
bitnami/postgresql	17.0.0-debian-12-r9	—	unmeasured
bitnami/redis	7.4.1-debian-12-r0	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

1,097 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-0965	libssh@0.10.6-0+deb12u1	no fix listed
Low	GHSA-5239-wwwm-4pmq	pygments@2.18.0	2.20.0
Low	DEBIAN-CVE-2024-25269	libheif@1.15.1-1	no fix listed
Low	DEBIAN-CVE-2026-46693	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u10
Low	DEBIAN-CVE-2025-50422	cairo@1.16.0-7	no fix listed
Low	DEBIAN-CVE-2026-61081	mariadb@1:10.11.6-0+deb12u1	no fix listed
Low	DEBIAN-CVE-2023-37769	pixman@0.42.2-1	no fix listed
Low	DEBIAN-CVE-2025-6170	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3
Low	DEBIAN-CVE-2025-43903	poppler@22.12.0-2+b1	22.12.0-2+deb12u3
Low	DEBIAN-CVE-2026-52296	ffmpeg@7:5.1.6-0+deb12u1	no fix listed
Low	DEBIAN-CVE-2024-45993	giflib@5.2.1-2.5	no fix listed
Low	DEBIAN-CVE-2026-57062	gnupg2@2.2.40-1.1	no fix listed
Low	DEBIAN-CVE-2023-48161	giflib@5.2.1-2.5	no fix listed
Low	DEBIAN-CVE-2026-66011	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	no fix listed
Low	DEBIAN-CVE-2025-43718	poppler@22.12.0-2+b1	22.12.0-2+deb12u2
Low	GHSA-6vgw-5pg2-w6jp	pip@24.2	26.0
Low	DEBIAN-CVE-2023-6228	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-1485	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u9
Low	DEBIAN-CVE-2026-53910	diffutils@1:3.8-4	no fix listed
Low	DEBIAN-CVE-2023-52426	expat@2.5.0-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2013-4472	poppler@22.12.0-2+b1	no fix listed
Low	DEBIAN-CVE-2023-1916	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-52297	ffmpeg@7:5.1.6-0+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-86137	libxml2@2.9.14+dfsg-1.3~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-86141	libxml2@2.9.14+dfsg-1.3~deb12u1	no fix listed
Low	DEBIAN-CVE-2023-31439	systemd@252.30-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2023-39742	giflib@5.2.1-2.5	no fix listed
Low	DEBIAN-CVE-2026-24515	expat@2.5.0-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2023-31437	systemd@252.30-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2023-38560	ghostscript@10.03.1~dfsg-1	no fix listed
Low	DEBIAN-CVE-2023-31438	systemd@252.30-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2023-3164	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-89156	pcre2@10.42-1	10.42-1+deb12u1
Low	DEBIAN-CVE-2026-57053	libidn@1.41-1	no fix listed
Low	DEBIAN-CVE-2024-45157	mbedtls@2.28.3-1	no fix listed
Low	DEBIAN-CVE-2026-16517	libarchive@3.6.2-1+deb12u1	3.6.2-1+deb12u5
Low	DEBIAN-CVE-2025-9165	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-86424	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	no fix listed
Low	DEBIAN-CVE-2023-30571	libarchive@3.6.2-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-8534	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-5958	sed@4.9-1	4.9-1+deb12u1
Low	DEBIAN-CVE-2026-6368	glibc@2.36-9+deb12u8	no fix listed
Low	DEBIAN-CVE-2026-61862	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u13
Low	DEBIAN-CVE-2026-61864	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u13
Low	DEBIAN-CVE-2026-61865	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u13
Low	DEBIAN-CVE-2026-61869	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u13
Low	DEBIAN-CVE-2026-61872	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u13

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.22latest	1 year ago	2.13.1	241661,097	12,924

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/crystalnet/paperless-ngx.svg)](https://charts.stackradar.io/charts/crystalnet/paperless-ngx)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.