StackRadar

zammad 4.0.5 Helm chart

devplayer0Verified publisher

Scored 14 Sept 2026

Zammad is a web based open source helpdesk/customer support system with many features to manage customer communication via several channels like telephone, facebook, twitter, chat and e-mails.

Version 4.0.5 5 years agodeploys tag 1.6.9-debian-10-r169 1Artifact Hub

zammad 4.0.5 deploys 4 container images: bitnami/memcached, zammad/zammad-docker-compose and bitnami/postgresql. Across the 2 measured, 361 findings8 critical, 13 high 4 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.11.1, fixed in 2.12.2.

Radar Score

6,110813114226

361 findings over 2 of 4 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
bitnami/memcached1.6.9-debian-10-r169unmeasured
zammad/zammad-docker-compose×2zammad-elasticsearch-4.1.0-317441642,394
bitnami/postgresql11.12.0-debian-10-r20unmeasured
zammad/zammad-docker-compose×7zammad-4.1.0-3119731623,716

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

226 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGHSA-rqv2-275x-2jq5rack@2.2.32.2.6.1
LowGHSA-xj5v-6v4g-jfw6rack@2.2.32.2.8.1
LowGHSA-vfm5-rmrh-j26vactionpack@5.2.4.67.0.8.7
LowGHSA-93pm-5p5f-3ghxrack@2.2.32.2.6.1
LowGHSA-v55j-83pf-r9cqactionview@5.2.4.67.2.3.1
LowGHSA-c6qg-cjj8-47qprack@2.2.32.2.6.4
LowGHSA-23c2-gwp5-pxw9globalid@0.4.21.0.1
LowDLA-3112-1bzip2@1.0.6-9.2~deb10u11.0.6-9.2~deb10u2
LowDLA-3134-1tzdata@2021a-0+deb10u12021a-0+deb10u7
LowDLA-3161-1tzdata@2021a-0+deb10u12021a-0+deb10u8
LowDLA-3189-1postgresql-11@11.12-0+deb10u111.18-0+deb10u1
LowDLA-3316-1postgresql-11@11.12-0+deb10u111.19-0+deb10u1
LowDLA-3366-1tzdata@2021a-0+deb10u12021a-0+deb10u10
LowDLA-3412-1tzdata@2021a-0+deb10u12021a-0+deb10u11
LowDLA-3482-1debian-archive-keyring@2019.1+deb10u12019.1+deb10u2
LowDLA-3684-1tzdata@2021a-0+deb10u12021a-0+deb10u12
LowDLA-3788-1tzdata@2021a-0+deb10u12024a-0+deb10u1
LowDSA-5085-2expat@2.2.6-2+deb10u12.2.6-2+deb10u4
LowGHSA-fghv-69vj-qj49netty-codec-http@4.1.49.Final4.1.125.Final
LowGHSA-8678-w3jw-xfc2nokogiri@1.11.51.19.4
LowGHSA-vvfq-8hwr-qm4mnokogiri@1.11.51.18.3
LowGHSA-6wx8-w4f5-wwcrconcurrent-ruby@1.1.81.3.7
LowGHSA-4mrv-5p47-p938msgpack@1.2.41.8.2
LowGHSA-5w6v-399v-w3ccnokogiri@1.11.51.18.8
LowGHSA-wfpw-mmfh-qq69nokogiri@1.11.51.19.4
LowGHSA-r95h-9x8f-r3f7nokogiri@1.11.51.16.5

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
4.0.5latest5 years ago1.6.9-debian-10-r1698131142266,110

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/devplayer0/zammad.svg)](https://charts.stackradar.io/charts/devplayer0/zammad)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.