joplin-server Helm chart
djjudas21Verified publisherScored 14 Sept 2026
This server allows you to sync any Joplin client
Latest 5.5.8 10 months agoapp version 2.14.2-beta 1Artifact Hub
joplin-server 5.5.8 deploys 1 container image: joplin/server. Across them, 313 findings — 1 critical, 4 high. The highest contribution is GHSA-wgrm-67xf-hhpq in pdfjs-dist 3.11.174, fixed in 4.2.67.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| joplin/ | 2.14.2-beta | 1466242 | 3,925 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-87f9-hvmw-gh4p | mermaid | 10.9.6 |
| Low | GHSA-v6wh-96g9-6wx3 | launch-editor | 2.14.1 |
| Low | DLA-4061-1 | libtasn1-6 | 4.16.0-2+deb11u2 |
| Low | GHSA-rgj7-g3m4-5g8c | sharp | 0.35.4 |
| Low | GHSA-378v-28hj-76wf | bn.js | 5.2.3 |
| Low | GHSA-fv7c-fp4j-7gwp | @babel/ | 7.29.4 |
| Low | GHSA-977x-g7h5-7qgw | elliptic | 6.5.7 |
| Low | GHSA-h8r8-wccr-v5f2 | dompurify | 3.3.2 |
| Low | GHSA-28wg-ghj8-5hjv | nanoid | 3.3.16 |
| Low | GHSA-m6fv-jmcg-4jfg | send | 0.19.0 |
| Low | GHSA-h7mw-gpvr-xq4m | dompurify | 3.4.0 |
| Low | GHSA-w9j2-pvgh-6h63 | axios | 0.31.1 |
| Low | GHSA-3wc5-fcw2-2329 | katex | 0.16.10 |
| Low | GHSA-mp7j-qc5w-4988 | websocket-driver | 0.7.5 |
| Low | GHSA-2v37-7h3g-55p8 | nanoid | 3.3.18 |
| Low | GHSA-58qx-3vcg-4xpx | ws | 8.20.1 |
| Low | GHSA-4vpr-x523-8j87 | svgo | 2.8.4 |
| Low | GHSA-fc9h-whq2-v747 | elliptic | 6.6.0 |
| Low | GHSA-3v7f-55p6-f55p | picomatch | 2.3.2 |
| Low | GHSA-qw6h-vgh9-j6wx | express | 4.20.0 |
| Low | GHSA-2v8p-3f2j-5mp7 | mermaid | 10.9.8 |
| Low | GHSA-mh29-5h37-fv8m | js-yaml | 3.14.2 |
| Low | GHSA-ghcm-xqfw-q4vr | mermaid | 10.9.6 |
| Low | GHSA-7q8q-rj6j-mhjq | axios | 0.33.0 |
| Low | GHSA-h67p-54hq-rp68 | js-yaml | 3.15.0 |
| Low | GHSA-6m6c-36f7-fhxh | mermaid | 10.9.6 |
| Low | GHSA-6v5v-wf23-fmfq | markdown-it | 14.2.0 |
| Low | DLA-4490-1 | openssl | 1.1.1w-0+deb11u5 |
| Low | GHSA-6v7q-wjvx-w8wg | basic-ftp | 5.2.2 |
| Low | GHSA-vhxf-7vqr-mrjg | dompurify | 3.2.4 |
| Low | GHSA-3jxr-9vmj-r5cp | brace-expansion | 1.1.16 |
| Low | GHSA-f5vj-f2hx-8m93 | webpack-dev-server | 5.2.6 |
| Low | GHSA-gh4j-gqv2-49f6 | fast-xml-parser | 5.7.0 |
| Low | GHSA-mwcw-c2x4-8c55 | nanoid | 3.3.8 |
| Low | GHSA-76mc-f452-cxcm | dompurify | 3.4.7 |
| Low | GHSA-q8mj-m7cp-5q26 | qs | 6.15.2 |
| Low | GHSA-5c6j-r48x-rmvq | serialize-javascript | 7.0.3 |
| Low | GHSA-vmf3-w455-68vh | tar | 7.5.16 |
| Low | GHSA-x5gf-qvw8-r2rm | pm2 | 7.0.0 |
| Low | DLA-4259-1 | systemd | 247.3-7+deb11u7 |
| Low | GHSA-xcj9-5m2h-648r | mermaid | 10.9.6 |
| Low | GHSA-5c9x-8gcm-mpgx | axios | 0.31.1 |
| Low | GHSA-vf2m-468p-8v99 | axios | 0.31.1 |
| Low | GHSA-39q2-94rc-95cp | dompurify | 3.4.0 |
| Low | GHSA-cj63-jhhr-wcxv | dompurify | 3.3.2 |
| Low | GHSA-qx2v-qp2m-jg93 | postcss | 8.5.10 |
| Low | DLA-3875-1 | gnutls28 | 3.7.1-5+deb11u6 |
| Low | GHSA-9h6g-pr28-7cqp | nodemailer | 6.9.9 |
| Low | GHSA-f7q4-pwc6-w24p | elliptic | 6.5.7 |
| Low | GHSA-rp9w-3fw7-7cwq | dompurify | 3.4.7 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 5.5.8latest | 10 months ago | 2.14.2-beta | 1466242 | 3,925 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.