zammad 4.0.5 Helm chart
devplayer0Verified publisherScored 14 Sept 2026
Zammad is a web based open source helpdesk/customer support system with many features to manage customer communication via several channels like telephone, facebook, twitter, chat and e-mails.
Version 4.0.5 5 years agodeploys tag 1.6.9-debian-10-r169 1Artifact Hub
zammad 4.0.5 deploys 4 container images: bitnami/memcached, zammad/zammad-docker-compose and bitnami/postgresql. Across the 2 measured, 361 findings — 8 critical, 13 high — 4 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.11.1, fixed in 2.12.2.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| bitnami/ | 1.6.9-debian-10-r169 | — | unmeasured |
| zammad/ | zammad-elasticsearch-4.1.0-31 | 744164 | 2,394 |
| bitnami/ | 11.12.0-debian-10-r20 | — | unmeasured |
| zammad/ | zammad-4.1.0-31 | 1973162 | 3,716 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Critical findings
Critical: findings whose contribution to the Radar Score is 70–100. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | GHSA-jfh8-c2jp-5v3qKEV | log4j-core | 2.12.2 |
| Critical | GHSA-f58c-gq56-vjjf | tika-core | 3.2.2 |
| Critical | GHSA-f58c-gq56-vjjf | tika-parsers | 2.0.0 |
| Critical | GHSA-7rjr-3q55-vv33KEV | log4j-core | 2.12.2 |
| Critical | GHSA-p6xc-xr62-6r2g | log4j-core | 2.12.3 |
| Critical | GHSA-754f-8gm6-c4r2 | ruby-saml | 1.12.4 |
| Critical | GHSA-mjmj-j48q-9wg2 | snakeyaml | 2.0 |
| Critical | GHSA-p72g-pv48-7w9x | tika-parsers | 2.0.0-ALPHA |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 4.0.5latest | 5 years ago | 1.6.9-debian-10-r169 | 813114226 | 6,110 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.