zammad Helm chart

Name: zammad Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

devplayer0

Scored 14 Sept 2026

Zammad is a web based open source helpdesk/customer support system with many features to manage customer communication via several channels like telephone, facebook, twitter, chat and e-mails.

Latest 4.0.5 5 years agodeploys tag 1.6.9-debian-10-r169 1Artifact Hub

zammad 4.0.5 deploys 4 container images: bitnami/memcached, zammad/zammad-docker-compose and bitnami/postgresql. Across the 2 measured, 361 findings — 8 critical, 13 high — 4 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.11.1, fixed in 2.12.2.

Radar Score

6,110813114226

361 findings over 2 of 4 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
bitnami/memcached	1.6.9-debian-10-r169	—	unmeasured
zammad/zammad-docker-compose×2	zammad-elasticsearch-4.1.0-31	744164	2,394
bitnami/postgresql	11.12.0-debian-10-r20	—	unmeasured
zammad/zammad-docker-compose×7	zammad-4.1.0-31	1973162	3,716

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

226 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-qw3f-w4pf-jh5f	tika-core@1.24	1.28.3
Low	GHSA-7g2v-jj9q-g3rg	rack@2.2.3	2.2.11
Low	DSA-5122-1	gzip@1.9-3	1.9-3+deb10u1
Low	DSA-5123-1	xz-utils@5.2.4-1	5.2.4-1+deb10u1
Low	GHSA-3pxv-7cmr-fjr4	log4j-core@2.11.1	2.25.4
Low	GHSA-9v8j-x534-2fx3	ruby-saml@1.10.2	1.18.0
Low	DSA-5073-1	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u2
Low	GHSA-vg3r-rm7w-2xgh	rexml@3.1.9	3.2.7
Low	GHSA-57rv-r2g8-2cj3	netty-codec-http@4.1.49.Final	4.1.133.Final
Low	GHSA-h8w8-99g7-qmvj	concurrent-ruby@1.1.8	1.3.7
Low	GHSA-mxw3-3hh2-x2mh	rack@2.2.3	2.2.22
Low	DLA-3288-1	curl@7.64.0-4+deb10u2	7.64.0-4+deb10u4
Low	DLA-3651-1	postgresql-11@11.12-0+deb10u1	11.22-0+deb10u1
Low	GHSA-pp92-crg2-gfv9	oauth2@1.4.4	2.0.22
Low	GHSA-6xw4-3v39-52mm	rack@2.2.3	2.2.20
Low	GHSA-pwqr-wmgm-9rr8	netty-codec-http@4.1.49.Final	4.1.132.Final
Low	DSA-5087-1	cyrus-sasl2@2.1.27+dfsg-1+deb10u1	2.1.27+dfsg-1+deb10u2
Low	GHSA-3wrr-7qpf-2prh	jackson-databind@2.10.4	2.14.0
Low	GHSA-mqvp-7rrg-9jxc	poi-scratchpad@4.1.2	5.2.1
Low	GHSA-rrfc-7g8p-99q8	rails-html-sanitizer@1.3.0	1.4.4
Low	GHSA-vmwr-mc7x-5vc3	rexml@3.1.9	3.3.6
Low	GHSA-8cgq-6mh2-7j6v	rack@2.2.3	2.2.12
Low	GHSA-625h-95r8-8xpm	rack@2.2.3	2.2.18
Low	DSA-5142-1	libxml2@2.9.4+dfsg1-7+deb10u2	2.9.4+dfsg1-7+deb10u4
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.49.Final	4.1.137.Final
Low	GHSA-2x63-gw47-w4mm	websocket-driver@0.7.3	0.8.2
Low	GHSA-w9pc-fmgc-vxvw	rack@2.2.3	2.2.19
Low	GHSA-285m-vhfq-xx4h	elasticsearch@7.10.1	7.17.14
Low	GHSA-9h9g-93gc-623h	rails-html-sanitizer@1.3.0	1.4.4
Low	DLA-3781-1	libgd2@2.2.5-5.2	2.2.5-5.2+deb10u1
Low	GHSA-hhhw-99gj-p3c3	snakeyaml@1.26	1.31
Low	DSA-5147-1	dpkg@1.19.7	1.19.8
Low	DLA-3682-1	ncurses@6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u5
Low	GHSA-5jpm-x58v-624v	netty-codec-http@4.1.49.Final	4.1.108.Final
Low	GHSA-6xx3-rg99-gc3p	bcprov-jdk15on@1.64	1.66
Low	GHSA-6xx3-rg99-gc3p	bc-fips@1.0.2	1.0.2.1
Low	GHSA-gmg8-593g-7mv3	poi-ooxml@4.1.2	5.4.0
Low	GHSA-3p8m-j85q-pgmj	netty-codec@4.1.49.Final	4.1.125.Final
Low	GHSA-mcvf-2q2m-x72m	rails-html-sanitizer@1.3.0	1.4.4
Low	GHSA-c2f4-cvqm-65w2	puma@4.3.8	5.6.8
Low	GHSA-mj4r-2hfc-f8p6	netty-codec@4.1.49.Final	4.1.133.Final
Low	GHSA-c653-97m9-rcg9	netty-handler@4.1.49.Final	4.1.135.Final
Low	GHSA-vc5p-v9hr-52mj	log4j-core@2.11.1	2.25.3
Low	GHSA-cgx6-hpwq-fhv5	nokogiri@1.11.5	1.13.5
Low	GHSA-x4h9-gwv3-r4m4	ruby-saml@1.10.2	1.18.0
Low	GHSA-fq42-c5rg-92c2	nokogiri@1.11.5	1.13.2
Low	GHSA-6jqx-86gh-f27w	netty-codec-http@4.1.49.Final	4.1.136.Final
Low	GHSA-v435-xc8x-wvr9	bcprov-jdk15on@1.64	1.78
Low	GHSA-g98m-96g9-wfjq	bundler@1.17.2	2.1.0
Low	GHSA-v569-hp3g-36wr	rack@2.2.3	2.2.23

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
4.0.5latest	5 years ago	1.6.9-debian-10-r169	813114226	6,110

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/devplayer0/zammad.svg)](https://charts.stackradar.io/charts/devplayer0/zammad)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.