joplin-server 5.5.8 Helm chart
djjudas21Verified publisherScored 14 Sept 2026
This server allows you to sync any Joplin client
Version 5.5.8 10 months agoapp version 2.14.2-beta 1Artifact Hub
joplin-server 5.5.8 deploys 1 container image: joplin/server. Across them, 313 findings — 1 critical, 4 high. The highest contribution is GHSA-wgrm-67xf-hhpq in pdfjs-dist 3.11.174, fixed in 4.2.67.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| joplin/ | 2.14.2-beta | 1466242 | 3,925 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-cvv5-9h9w-qp2m | systeminformation | 5.23.7 |
| Low | GHSA-vcc3-ghjq-m6fr | decode-uri-component | 0.5.0 |
| Low | GHSA-rhx6-c78j-4q9w | path-to-regexp | 0.1.12 |
| Low | GHSA-v62p-rq8g-8h59 | pbkdf2 | 3.1.3 |
| Low | GHSA-62hf-57xw-28j9 | axios | 0.31.1 |
| Low | GHSA-h7cp-r72f-jxh6 | pbkdf2 | 3.1.3 |
| Low | GHSA-mmhx-hmjr-r674 | dompurify | 3.1.3 |
| Low | GHSA-34x7-hfp2-rc4v | tar | 7.5.7 |
| Low | GHSA-3g43-6gmg-66jw | axios | 0.31.1 |
| Low | GHSA-cxjh-pqwp-8mfp | follow-redirects | 1.15.6 |
| Low | GHSA-554w-wpv2-vw27 | node-forge | 1.3.2 |
| Low | GHSA-hfxv-24rg-xrqf | axios | 0.32.0 |
| Low | GHSA-v56q-mh7h-f735 | immutable | 4.3.9 |
| Low | GHSA-j5f8-grm9-p9fc | axios | 0.32.0 |
| Low | GHSA-rgw5-rvv9-x895 | brace-expansion | 1.1.18 |
| Low | GHSA-9cx6-37pm-9jff | handlebars | 4.7.9 |
| Low | GHSA-pw2r-vq6v-hr8c | follow-redirects | 1.14.8 |
| Low | GHSA-xpqw-6gx7-v673 | svgo | 2.8.1 |
| Low | GHSA-f5x3-32g6-xq36 | tar | 6.2.1 |
| Low | GHSA-j8xg-fqg3-53r7 | word-wrap | 1.2.4 |
| Low | GHSA-5m6q-g25r-mvwx | node-forge | 1.4.0 |
| Low | GHSA-4vvj-4cpr-p986 | webpack | 5.94.0 |
| Low | GHSA-6g55-p6wh-862q | postcss | 8.5.12 |
| Low | GHSA-pmwg-cvhr-8vh7 | axios | 0.31.1 |
| Low | GHSA-8gc5-j5rx-235r | fast-xml-parser | 4.5.5 |
| Low | GHSA-qffp-2rhf-9h96 | tar | 7.5.10 |
| Low | GHSA-22p9-wv53-3rq4 | linkify-it | 5.0.1 |
| Low | GHSA-23hp-3jrh-7fpw | tar | 7.5.19 |
| Low | GHSA-52cp-r559-cp3m | js-yaml | 3.15.0 |
| Low | GHSA-q67f-28xg-22rw | node-forge | 1.4.0 |
| Low | GHSA-hmw2-7cc7-3qxx | form-data | 2.5.6 |
| Low | GHSA-7r86-cg39-jmmj | minimatch | 3.1.3 |
| Low | GHSA-c27g-q93r-2cwf | launch-editor | 2.9.0 |
| Low | GHSA-x9w5-v3q2-3rhw | browserify-sign | 4.2.2 |
| Low | GHSA-952p-6rrq-rcjv | micromatch | 4.0.8 |
| Low | GHSA-8qq5-rm4j-mr97 | tar | 7.5.3 |
| Low | GHSA-776f-qx25-q3cc | xml2js | 0.5.0 |
| Low | GHSA-fvcv-3m26-pcqx | axios | 0.31.0 |
| Low | GHSA-rcmh-qjqh-p98v | nodemailer | 7.0.11 |
| Low | GHSA-qxch-whhj-8956 | multiparty | 4.3.0 |
| Low | GHSA-23c5-xmqv-rm74 | minimatch | 3.1.4 |
| Low | GHSA-ppp5-5v6c-4jwp | node-forge | 1.4.0 |
| Low | GHSA-mh99-v99m-4gvg | brace-expansion | 1.1.17 |
| Low | GHSA-rpmf-866q-6p89 | basic-ftp | 5.3.1 |
| Low | GHSA-gcx4-mw62-g8wm | rollup | 2.79.2 |
| Low | GHSA-73rr-hh4g-fpgx | diff | 5.2.2 |
| Low | GHSA-w27v-7q3p-w38r | svgo | 2.8.4 |
| Low | GHSA-73wf-gq98-2v4g | browserslist | 4.28.7 |
| Low | GHSA-8x88-c5mf-7j5w | tar | 7.5.18 |
| Low | GHSA-v245-v573-v5vm | linkify-it | 5.0.2 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 5.5.8latest | 10 months ago | 2.14.2-beta | 1466242 | 3,925 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.