joplin-server Helm chart
djjudas21Verified publisherScored 14 Sept 2026
This server allows you to sync any Joplin client
Latest 5.5.8 10 months agoapp version 2.14.2-beta 1Artifact Hub
joplin-server 5.5.8 deploys 1 container image: joplin/server. Across them, 313 findings — 1 critical, 4 high. The highest contribution is GHSA-wgrm-67xf-hhpq in pdfjs-dist 3.11.174, fixed in 4.2.67.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| joplin/ | 2.14.2-beta | 1466242 | 3,925 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-79cf-xcqc-c78w | webpack-dev-server | 5.2.4 |
| Low | DLA-4492-1 | gnutls28 | 3.7.1-5+deb11u9 |
| Low | GHSA-2x7j-588g-ccc2 | nodemailer | 9.1.0 |
| Low | GHSA-36jr-mh4h-2g58 | d3-color | 3.1.0 |
| Low | GHSA-5p4m-2wfm-xmqj | js-yaml | 3.15.1 |
| Low | GHSA-55q2-fjhq-7xh7 | dompurify | 3.4.13 |
| Low | DLA-4176-1 | openssl | 1.1.1w-0+deb11u3 |
| Low | GHSA-4mjr-xmp4-gh2g | qs | 6.16.0 |
| Low | DLA-3930-1 | libsepol | 3.1-1+deb11u1 |
| Low | GHSA-48c2-rrv3-qjmp | yaml | 1.10.3 |
| Low | GHSA-xx6v-rp6x-q39c | axios | 0.31.1 |
| Low | DLA-4181-1 | glibc | 2.31-13+deb11u13 |
| Low | GHSA-f88m-g3jw-g9cj | sharp | 0.35.0 |
| Low | GHSA-m4gq-x24j-jpmf | mermaid | 10.9.3 |
| Low | GHSA-898c-q2cr-xwhg | axios | 0.32.0 |
| Low | GHSA-r7g4-qg5f-qqm2 | nodemailer | 8.0.8 |
| Low | DLA-4065-1 | krb5 | 1.18.3-6+deb11u6 |
| Low | GHSA-848j-6mx2-7j84 | elliptic | no fix listed |
| Low | GHSA-x2rg-q646-7m2v | koa | 2.16.1 |
| Low | GHSA-268h-hp4c-crq3 | nodemailer | 8.0.9 |
| Low | GHSA-9gqv-wp59-fq42 | http-proxy-middleware | 2.0.9 |
| Low | GHSA-wqvq-jvpq-h66f | nodemailer | 8.0.9 |
| Low | GHSA-4www-5p9h-95mh | http-proxy-middleware | 2.0.8 |
| Low | DLA-4306-1 | pam | 1.4.0-9+deb11u2 |
| Low | GHSA-2qvq-rjwj-gvw9 | handlebars | 4.7.9 |
| Low | GHSA-cmwh-pvxp-8882 | dompurify | 3.4.11 |
| Low | GHSA-gvmj-g25r-r7wr | dompurify | 3.4.8 |
| Low | GHSA-wmmp-3585-3rmp | nodemailer | 9.1.0 |
| Low | DLA-4130-1 | shadow | 1:4.8.1-1+deb11u1 |
| Low | GHSA-cjmm-f4jc-qw8r | dompurify | 3.3.2 |
| Low | GHSA-w7fw-mjwx-w883 | qs | 6.14.2 |
| Low | GHSA-mx8g-39q3-5c79 | webpack-dev-server | 5.2.5 |
| Low | GHSA-6rw7-vpxm-498p | qs | 6.14.1 |
| Low | DLA-4143-1 | glibc | 2.31-13+deb11u12 |
| Low | DLA-4195-1 | krb5 | 1.18.3-6+deb11u7 |
| Low | GHSA-v422-hmwv-36x6 | body-parser | 1.20.6 |
| Low | GHSA-8m3c-c648-2xjj | nodemailer | 9.1.1 |
| Low | GHSA-v6h2-p8h4-qcjw | brace-expansion | 1.1.12 |
| Low | GHSA-c7w3-x93f-qmm8 | nodemailer | 8.0.4 |
| Low | GHSA-gg4h-3hg2-grpc | joi | 17.13.5 |
| Low | GHSA-6w3j-5fw6-r9vr | joi | 17.13.6 |
| Low | GHSA-78xj-cgh5-2h22 | ip | 1.1.9 |
| Low | GHSA-75v8-2h7p-7m2m | formidable | 2.1.3 |
| Low | GHSA-7rx3-28cr-v5wh | handlebars | 4.7.9 |
| Low | GHSA-xhjh-pmcv-23jw | axios | 0.31.1 |
| Low | GHSA-38r7-794h-5758 | webpack | 5.104.0 |
| Low | GHSA-8fgc-7cc6-rx7x | webpack | 5.104.1 |
| Low | GHSA-jgmv-j7ww-jx2x | koa | 2.16.2 |
| Low | DLA-4437-1 | gnupg2 | 2.2.27-2+deb11u3 |
| Low | GHSA-76c9-3jph-rj3q | on-headers | 1.1.0 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 5.5.8latest | 10 months ago | 2.14.2-beta | 1466242 | 3,925 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.