hedgedoc 5.0.0 Helm chart

Name: hedgedoc Helm chart 5.0.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

ernail-hedgedoc

Scored 14 Sept 2026

A lightweight Helm chart for HedgeDoc that prioritizes transparency and flexibility

Version 5.0.0app version 1.10.8 0Artifact Hub

hedgedoc 5.0.0 deploys 1 container image: quay.io/hedgedoc/hedgedoc. Across them, 151 findings — 0 critical, 0 high. The highest contribution is GHSA-hrpp-h998-j3pp in qs 2.3.3, fixed in 6.2.4.

Radar Score

1,7550024127

151 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
quay.io/hedgedoc/hedgedoc	1.10.8	0024127	1,755

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

127 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-vcc3-ghjq-m6fr	decode-uri-component@0.2.2	0.5.0
Low	GHSA-vxpw-j846-p89q	undici@6.25.0	6.27.0
Low	GHSA-62hf-57xw-28j9	axios@1.15.0	1.15.1
Low	GHSA-x6wf-f3px-wcqx	xmldom@0.1.31	no fix listed
Low	GHSA-x6wf-f3px-wcqx	@xmldom/xmldom@0.8.12	0.8.13
Low	GHSA-34x7-hfp2-rc4v	tar@6.2.1	7.5.7
Low	GHSA-q8qp-cvcw-x6jj	axios@1.15.0	1.15.2
Low	GHSA-3g43-6gmg-66jw	axios@1.15.0	1.15.2
Low	GHSA-777c-7fjr-54vf	axios@1.15.0	1.16.0
Low	GHSA-hfxv-24rg-xrqf	axios@1.15.0	1.16.0
Low	GHSA-j5f8-grm9-p9fc	axios@1.15.0	1.16.0
Low	GHSA-r635-g3xr-vw7x	engine.io@6.6.6	6.6.7
Low	GHSA-rgw5-rvv9-x895	brace-expansion@5.0.5	5.0.9
Low	GHSA-gr94-w7qr-f4j3	engine.io@6.6.6	6.6.7
Low	GHSA-pmwg-cvhr-8vh7	axios@1.15.0	1.15.1
Low	GHSA-qffp-2rhf-9h96	tar@6.2.1	7.5.10
Low	GHSA-22p9-wv53-3rq4	linkify-it@4.0.1	5.0.1
Low	GHSA-j759-j44w-7fr8	xmldom@0.1.31	no fix listed
Low	GHSA-j759-j44w-7fr8	@xmldom/xmldom@0.8.12	0.8.13
Low	GHSA-23hp-3jrh-7fpw	tar@6.2.1	7.5.19
Low	GHSA-93r5-fhx6-vmg9	@xmldom/xmldom@0.8.12	0.8.15
Low	GHSA-965w-775f-mr7g	xmldom@0.1.31	no fix listed
Low	GHSA-965w-775f-mr7g	@xmldom/xmldom@0.8.12	0.8.15
Low	GHSA-h452-7996-h45h	cookiejar@2.0.6	2.1.4
Low	GHSA-52cp-r559-cp3m	js-yaml@4.1.1	4.3.0
Low	GHSA-27p8-2357-5qqv	xmldom@0.1.31	no fix listed
Low	GHSA-27p8-2357-5qqv	@xmldom/xmldom@0.8.12	0.8.15
Low	GHSA-4w3w-2rp5-g8jm	@xmldom/xmldom@0.8.12	0.8.14
Low	GHSA-4w3w-2rp5-g8jm	xmldom@0.1.31	no fix listed
Low	GHSA-c7q8-3ch8-vqpv	@xmldom/xmldom@0.8.12	0.8.15
Low	GHSA-c7q8-3ch8-vqpv	xmldom@0.1.31	no fix listed
Low	GHSA-w2rr-34g9-rvrj	xmldom@0.1.31	no fix listed
Low	GHSA-w2rr-34g9-rvrj	@xmldom/xmldom@0.8.12	0.8.14
Low	GHSA-8344-3jmq-59r6	xmldom@0.1.31	no fix listed
Low	GHSA-8344-3jmq-59r6	@xmldom/xmldom@0.8.12	0.8.15
Low	GHSA-hmw2-7cc7-3qxx	form-data@1.0.0-rc3	2.5.6
Low	GHSA-2m8v-j782-fhvr	socket.io-parser@4.2.6	4.2.7
Low	GHSA-8qq5-rm4j-mr97	tar@6.2.1	7.5.3
Low	GHSA-776f-qx25-q3cc	xml2js@0.2.8	0.5.0
Low	GHSA-wh4c-j3r5-mjhp	xmldom@0.1.31	no fix listed
Low	GHSA-x4fp-j954-r2f4	@xmldom/xmldom@0.8.12	0.8.15
Low	GHSA-mh99-v99m-4gvg	brace-expansion@5.0.5	5.0.8
Low	GHSA-8x88-c5mf-7j5w	tar@6.2.1	7.5.18
Low	GHSA-v245-v573-v5vm	linkify-it@4.0.1	5.0.2
Low	GHSA-cqhc-2h57-wpxf	mariadb@3.4.5	3.4.6
Low	GHSA-mwp4-54f8-5fhr	ip-address@10.1.0	10.3.1
Low	GHSA-6chq-wfr3-2hj9	axios@1.15.0	1.15.1
Low	GHSA-p8p7-x288-28g6	request@2.88.2	no fix listed
Low	GHSA-r6q2-hw4h-h46w	tar@6.2.1	7.5.4
Low	GHSA-2883-xcg3-v3hh	js-yaml@4.1.1	4.3.2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
5.0.0latest	—	1.10.8	0024127	1,755

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/ernail-hedgedoc/hedgedoc.svg)](https://charts.stackradar.io/charts/ernail-hedgedoc/hedgedoc)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.