zammad Helm chart

Name: zammad Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

devplayer0

Scored 14 Sept 2026

Zammad is a web based open source helpdesk/customer support system with many features to manage customer communication via several channels like telephone, facebook, twitter, chat and e-mails.

Latest 4.0.5 5 years agodeploys tag 1.6.9-debian-10-r169 1Artifact Hub

zammad 4.0.5 deploys 4 container images: bitnami/memcached, zammad/zammad-docker-compose and bitnami/postgresql. Across the 2 measured, 361 findings — 8 critical, 13 high — 4 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.11.1, fixed in 2.12.2.

Radar Score

6,110813114226

361 findings over 2 of 4 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
bitnami/memcached	1.6.9-debian-10-r169	—	unmeasured
zammad/zammad-docker-compose×2	zammad-elasticsearch-4.1.0-31	744164	2,394
bitnami/postgresql	11.12.0-debian-10-r20	—	unmeasured
zammad/zammad-docker-compose×7	zammad-4.1.0-31	1973162	3,716

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

361 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-wg6q-6289-32hp	bcpkix-jdk15on@1.64	1.84
Low	GHSA-4h8f-2wvx-gg5w	bcprov-jdk15on@1.64	1.78
Low	DLA-3223-1	giflib@5.1.4-3	5.1.4-3+deb10u1
Low	DLA-3165-1	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u6
Low	GHSA-8vqr-qjwx-82mw	rack@2.2.3	2.2.23
Low	GHSA-wjxj-5m7g-mg7q	bcprov-jdk15on@1.64	no fix listed
Low	GHSA-xp5h-f8jf-rc8q	actionview@5.2.4.6	6.1.7.3
Low	GHSA-h27x-rffw-24p4	addressable@2.5.2	2.9.0
Low	GHSA-w5gg-2q56-6h4f	elasticsearch@7.10.1	7.17.19
Low	DLA-3782-1	util-linux@2.33.1-0.1	2.33.1-0.1+deb10u1
Low	DLA-3586-1	ncurses@6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u4
Low	DLA-3692-1	curl@7.64.0-4+deb10u2	7.64.0-4+deb10u8
Low	DLA-3119-1	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u5
Low	DLA-3763-1	curl@7.64.0-4+deb10u2	7.64.0-4+deb10u9
Low	DLA-3263-1	libtasn1-6@4.13-3	4.13-3+deb10u1
Low	DLA-3758-1	tiff@4.1.0+git191117-2~deb10u2	4.1.0+git191117-2~deb10u9
Low	GHSA-pj73-v5mw-pm9j	activesupport@5.2.4.6	6.1.7.3
Low	GHSA-5fvx-2jj3-6mff	elasticsearch@7.10.1	7.10.2
Low	GHSA-67mf-3cr5-8w23	bc-fips@1.0.2	1.0.2.6
Low	DLA-3203-1	nginx@1.14.2-2+deb10u4	1.14.2-2+deb10u5
Low	DLA-3398-1	curl@7.64.0-4+deb10u2	7.64.0-4+deb10u6
Low	GHSA-rrqh-93c8-j966	ruby-saml@1.10.2	1.18.1
Low	GHSA-xxqh-mfjm-7mv9	netty-codec-http@4.1.49.Final	4.1.133.Final
Low	DLA-3072-1	postgresql-11@11.12-0+deb10u1	11.17-0+deb10u1
Low	DSA-5006-1	postgresql-11@11.12-0+deb10u1	11.14-0+deb10u1
Low	GHSA-r995-q44h-hr64	webrick@1.4.2	1.8.2
Low	DLA-3070-1	gnutls28@3.6.7-4+deb10u7	3.6.7-4+deb10u9
Low	GHSA-p9fm-f462-ggrg	activestorage@5.2.4.6	7.2.3.1
Low	GHSA-4xqq-m2hx-25v8	rexml@3.1.9	3.3.2
Low	GHSA-c4rq-3m3g-8wgx	nokogiri@1.11.5	1.19.3
Low	DLA-3783-1	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u7
Low	DLA-3764-1	postgresql-11@11.12-0+deb10u1	11.22-0+deb10u2
Low	GHSA-fccg-mwvh-qqg4	netty-handler@4.1.49.Final	4.1.137.Final
Low	GHSA-4cx2-fc23-5wg6	bcpkix-jdk15on@1.64	1.79
Low	GHSA-9cv2-cfxc-v4v2	nokogiri@1.11.5	1.19.4
Low	GHSA-phwj-rprq-35pp	nokogiri@1.11.5	1.19.4
Low	GHSA-hr8g-6v94-x4m9	bcprov-jdk15on@1.64	no fix listed
Low	GHSA-ghhp-3qvg-889p	websocket-driver@0.7.3	0.8.1
Low	DLA-3278-1	tiff@4.1.0+git191117-2~deb10u2	4.1.0+git191117-2~deb10u5
Low	GHSA-33ph-fccm-39pj	websocket-driver@0.7.3	0.8.1
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.49.Final	4.1.136.Final
Low	DLA-3341-1	curl@7.64.0-4+deb10u2	7.64.0-4+deb10u5
Low	DLA-3600-1	postgresql-11@11.12-0+deb10u1	11.21-0+deb10u2
Low	GHSA-5prr-v3j2-97mh	nokogiri@1.11.5	1.19.4
Low	DLA-3472-1	libx11@2:1.6.7-1+deb10u2	2:1.6.7-1+deb10u3
Low	GHSA-6cqp-g7gg-8hr5	netty-codec-http@4.1.49.Final	4.1.136.Final
Low	DLA-3740-1	gnutls28@3.6.7-4+deb10u7	3.6.7-4+deb10u12
Low	GHSA-9hf4-67fc-4vf4	puma@4.3.8	5.6.9
Low	GHSA-p67v-3w7g-wjg7	nokogiri@1.11.5	1.19.4
Low	GHSA-wjv4-x9w8-wm3h	nokogiri@1.11.5	1.19.4

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
4.0.5latest	5 years ago	1.6.9-debian-10-r169	813114226	6,110

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/devplayer0/zammad.svg)](https://charts.stackradar.io/charts/devplayer0/zammad)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.