joplin-server Helm chart

Name: joplin-server Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

djjudas21

Scored 14 Sept 2026

This server allows you to sync any Joplin client

Latest 5.5.8 10 months agoapp version 2.14.2-beta 1Artifact Hub

joplin-server 5.5.8 deploys 1 container image: joplin/server. Across them, 313 findings — 1 critical, 4 high. The highest contribution is GHSA-wgrm-67xf-hhpq in pdfjs-dist 3.11.174, fixed in 4.2.67.

Radar Score

3,9251466242

313 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
joplin/server	2.14.2-beta	1466242	3,925

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

313 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-9ppj-qmqm-q256	tar@6.2.0	7.5.11
Low	GHSA-2p49-hgcm-8545	svgo@2.8.0	2.8.3
Low	GHSA-968p-4wvh-cqc8	@babel/helpers@7.22.5	7.26.10
Low	GHSA-968p-4wvh-cqc8	@babel/runtime-corejs3@7.23.2	7.26.10
Low	GHSA-968p-4wvh-cqc8	@babel/runtime@7.22.5	7.26.10
Low	GHSA-3p68-rc4w-qgx5	axios@0.25.0	0.31.0
Low	GHSA-rxrc-rgv4-jpvx	react-devtools-core@4.26.1	4.28.4
Low	GHSA-7fh5-64p2-3v2j	postcss@8.4.24	8.4.31
Low	GHSA-64mm-vxmg-q3vj	http-proxy-middleware@2.0.6	2.0.10
Low	GHSA-xwg4-73v4-xw9w	nanoid@3.3.7	3.3.12
Low	DSA-5726-1	krb5@1.18.3-6+deb11u4	1.18.3-6+deb11u5
Low	GHSA-f886-m6hf-6m8v	brace-expansion@1.1.11	1.1.13
Low	GHSA-xh3c-6gcq-g4rv	multiparty@4.2.3	4.3.0
Low	GHSA-fxqj-rqcc-2cmp	postcss@8.4.31	8.5.23
Low	GHSA-cg87-wmx4-v546	katex@0.16.9	0.16.21
Low	GHSA-83g3-92jg-28cx	tar@6.2.0	7.5.8
Low	GHSA-f98w-7cxr-ff2h	katex@0.16.9	0.16.10
Low	GHSA-38c4-r59v-3vqw	markdown-it@13.0.2	14.1.1
Low	DLA-4321-1	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u4
Low	DLA-3926-1	perl@5.32.1-4+deb11u2	5.32.1-4+deb11u4
Low	GHSA-qj8w-gfj5-8c6v	serialize-javascript@6.0.1	7.0.5
Low	GHSA-w8wr-v893-vjvp	tar@6.2.0	7.5.18
Low	GHSA-2wm5-q62r-hmrv	colord@2.9.3	2.9.4
Low	GHSA-m7pr-hjqh-92cm	axios@0.25.0	0.31.1
Low	GHSA-9jgg-88mc-972h	webpack-dev-server@4.15.1	5.2.1
Low	GHSA-jp2q-39xq-3w4g	fast-xml-parser@4.1.2	4.5.5
Low	GHSA-49q7-c7j4-3p7m	elliptic@6.5.4	6.5.7
Low	GHSA-hpcv-96wg-7vj8	dompurify@3.0.5	3.4.6
Low	GHSA-p6gq-j5cr-w38f	nodemailer@6.9.7	9.0.1
Low	GHSA-6x64-9x62-f2gx	mermaid@10.6.1	10.9.8
Low	DLA-3910-1	e2fsprogs@1.46.2-2	1.46.2-2+deb11u1
Low	GHSA-mmx7-hfxf-jppx	axios@0.25.0	0.33.0
Low	GHSA-vvjj-xcjg-gr5g	nodemailer@6.9.7	8.0.5
Low	MAL-2022-4691	monorepo-symlink-test@0.0.0	no fix listed
Low	GHSA-4v9v-hfq4-rm2v	webpack-dev-server@4.15.1	5.2.1
Low	DSA-5678-1	glibc@2.31-13+deb11u7	2.31-13+deb11u10
Low	GHSA-r47g-fvhr-h676	dompurify@3.0.5	3.4.6
Low	DLA-4267-1	gnutls28@3.7.1-5+deb11u3	3.7.1-5+deb11u8
Low	DLA-4063-1	gnutls28@3.7.1-5+deb11u3	3.7.1-5+deb11u7
Low	GHSA-52v5-jr5w-gjxr	sigstore@2.1.0	4.1.1
Low	GHSA-65ch-62r8-g69g	node-forge@1.3.1	1.3.2
Low	GHSA-cm22-4g7w-348p	serve-static@1.15.0	1.16.0
Low	GHSA-q7cg-457f-vx79	joi@17.11.0	17.13.4
Low	GHSA-crv5-9vww-q3g8	dompurify@3.0.5	3.4.0
Low	GHSA-m28w-2pqf-7qgj	webpack-dev-server@4.15.1	5.2.6
Low	GHSA-p9pc-299p-vxgp	yargs-parser@7.0.0	13.1.2
Low	GHSA-gvwx-54wh-qm9j	tar@6.2.0	7.5.17
Low	GHSA-v9jr-rg53-9pgp	dompurify@3.0.5	3.4.0
Low	GHSA-434g-2637-qmqr	elliptic@6.5.4	6.5.6
Low	GHSA-vjh7-7g9h-fjfh	elliptic@6.5.4	6.6.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
5.5.8latest	10 months ago	2.14.2-beta	1466242	3,925

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/djjudas21/joplin-server.svg)](https://charts.stackradar.io/charts/djjudas21/joplin-server)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.