StackRadar

joplin-server 5.5.8 Helm chart

djjudas21Verified publisher

Scored 14 Sept 2026

This server allows you to sync any Joplin client

Version 5.5.8 10 months agoapp version 2.14.2-beta 1Artifact Hub

joplin-server 5.5.8 deploys 1 container image: joplin/server. Across them, 313 findings1 critical, 4 high. The highest contribution is GHSA-wgrm-67xf-hhpq in pdfjs-dist 3.11.174, fixed in 4.2.67.

Radar Score

3,9251466242

313 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
joplin/server2.14.2-beta14662423,925

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

242 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGHSA-5p2g-fcmc-qvqqimage-size@1.0.2no fix listed
LowGHSA-w3rx-r6r6-pgprimage-size@1.0.2no fix listed
LowGHSA-jchw-25xp-jwwcfollow-redirects@1.14.51.15.4
LowGHSA-rv95-896h-c2vcexpress@4.18.24.19.2
LowGHSA-qxrj-hx23-xp82@koa/cors@3.4.35.0.0
LowGHSA-76p7-773f-r4q5serialize-javascript@6.0.16.0.2
LowGHSA-mm7p-fcc7-pg87nodemailer@6.9.77.0.7
LowGHSA-xv26-6w52-cph6websocket-driver@0.7.40.7.5
LowGHSA-c2c7-rcm5-vvqjpicomatch@2.3.02.3.2
LowGHSA-2g4f-4pwh-qvx6ajv@6.12.66.14.0
LowGHSA-6chq-wfr3-2hj9axios@0.25.00.31.1
LowGHSA-p8p7-x288-28g6request@2.88.2no fix listed
LowGHSA-r6q2-hw4h-h46wtar@6.2.07.5.4
LowGHSA-2883-xcg3-v3hhjs-yaml@3.14.13.15.2
LowGHSA-xjpj-3mr7-gcpfhandlebars@4.7.74.7.9
LowGHSA-r292-9mhp-454mtar@6.2.07.5.21
LowGHSA-r4q5-vmmm-2653follow-redirects@1.14.51.16.0
LowGHSA-r28c-9q8g-f849postcss@8.4.318.5.18
LowGHSA-fj3w-jwp8-x2g3fast-xml-parser@4.1.24.5.4
LowGHSA-wf5p-g6vw-rhxxaxios@0.25.00.28.0
LowGHSA-395f-4hp3-45gvshell-quote@1.7.41.9.0
LowGHSA-c83g-rgw3-j3cxbrowserslist@4.21.44.28.7
LowGHSA-w5hq-g745-h8pquuid@8.3.211.1.1
LowGHSA-w4pp-8pjf-rmxwpacote@17.0.421.5.1
LowDSA-5650-1util-linux@2.36.1-8+deb11u12.36.1-8+deb11u2
LowGHSA-65x3-rw7q-gx94multiparty@4.2.34.3.0
LowGHSA-2328-f5f3-gj25node-forge@1.3.11.4.0
LowGHSA-7gcc-r8m5-44qmkoa@2.14.22.16.4
LowGHSA-rp42-5vxx-qpwrbasic-ftp@5.0.35.3.0
LowGHSA-9ppj-qmqm-q256tar@6.2.07.5.11
LowGHSA-2p49-hgcm-8545svgo@2.8.02.8.3
LowGHSA-968p-4wvh-cqc8@babel/runtime-corejs3@7.23.27.26.10
LowGHSA-968p-4wvh-cqc8@babel/runtime@7.22.57.26.10
LowGHSA-968p-4wvh-cqc8@babel/helpers@7.22.57.26.10
LowGHSA-3p68-rc4w-qgx5axios@0.25.00.31.0
LowGHSA-rxrc-rgv4-jpvxreact-devtools-core@4.26.14.28.4
LowGHSA-7fh5-64p2-3v2jpostcss@8.4.248.4.31
LowGHSA-64mm-vxmg-q3vjhttp-proxy-middleware@2.0.62.0.10
LowGHSA-xwg4-73v4-xw9wnanoid@3.3.73.3.12
LowDSA-5726-1krb5@1.18.3-6+deb11u41.18.3-6+deb11u5
LowGHSA-f886-m6hf-6m8vbrace-expansion@1.1.111.1.13
LowGHSA-xh3c-6gcq-g4rvmultiparty@4.2.34.3.0
LowGHSA-fxqj-rqcc-2cmppostcss@8.4.318.5.23
LowGHSA-cg87-wmx4-v546katex@0.16.90.16.21
LowGHSA-83g3-92jg-28cxtar@6.2.07.5.8
LowGHSA-f98w-7cxr-ff2hkatex@0.16.90.16.10
LowGHSA-38c4-r59v-3vqwmarkdown-it@13.0.214.1.1
LowDLA-4321-1openssl@1.1.1w-0+deb11u11.1.1w-0+deb11u4
LowDLA-3926-1perl@5.32.1-4+deb11u25.32.1-4+deb11u4
LowGHSA-qj8w-gfj5-8c6vserialize-javascript@6.0.17.0.5

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
5.5.8latest10 months ago2.14.2-beta14662423,925

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/djjudas21/joplin-server.svg)](https://charts.stackradar.io/charts/djjudas21/joplin-server)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.