hedgedoc 5.0.0 Helm chart

Name: hedgedoc Helm chart 5.0.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

ernail-hedgedoc

Scored 14 Sept 2026

A lightweight Helm chart for HedgeDoc that prioritizes transparency and flexibility

Version 5.0.0app version 1.10.8 0Artifact Hub

hedgedoc 5.0.0 deploys 1 container image: quay.io/hedgedoc/hedgedoc. Across them, 151 findings — 0 critical, 0 high. The highest contribution is GHSA-hrpp-h998-j3pp in qs 2.3.3, fixed in 6.2.4.

Radar Score

1,7550024127

151 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
quay.io/hedgedoc/hedgedoc	1.10.8	0024127	1,755

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

151 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-27p8-2357-5qqv	@xmldom/xmldom@0.8.12	0.8.15
Low	GHSA-4w3w-2rp5-g8jm	@xmldom/xmldom@0.8.12	0.8.14
Low	GHSA-4w3w-2rp5-g8jm	xmldom@0.1.31	no fix listed
Low	GHSA-c7q8-3ch8-vqpv	xmldom@0.1.31	no fix listed
Low	GHSA-c7q8-3ch8-vqpv	@xmldom/xmldom@0.8.12	0.8.15
Low	GHSA-w2rr-34g9-rvrj	@xmldom/xmldom@0.8.12	0.8.14
Low	GHSA-w2rr-34g9-rvrj	xmldom@0.1.31	no fix listed
Low	GHSA-8344-3jmq-59r6	@xmldom/xmldom@0.8.12	0.8.15
Low	GHSA-8344-3jmq-59r6	xmldom@0.1.31	no fix listed
Low	GHSA-hmw2-7cc7-3qxx	form-data@1.0.0-rc3	2.5.6
Low	GHSA-2m8v-j782-fhvr	socket.io-parser@4.2.6	4.2.7
Low	GHSA-8qq5-rm4j-mr97	tar@6.2.1	7.5.3
Low	GHSA-776f-qx25-q3cc	xml2js@0.2.8	0.5.0
Low	GHSA-wh4c-j3r5-mjhp	xmldom@0.1.31	no fix listed
Low	GHSA-x4fp-j954-r2f4	@xmldom/xmldom@0.8.12	0.8.15
Low	GHSA-mh99-v99m-4gvg	brace-expansion@5.0.5	5.0.8
Low	GHSA-8x88-c5mf-7j5w	tar@6.2.1	7.5.18
Low	GHSA-v245-v573-v5vm	linkify-it@4.0.1	5.0.2
Low	GHSA-cqhc-2h57-wpxf	mariadb@3.4.5	3.4.6
Low	GHSA-mwp4-54f8-5fhr	ip-address@10.1.0	10.3.1
Low	GHSA-6chq-wfr3-2hj9	axios@1.15.0	1.15.1
Low	GHSA-p8p7-x288-28g6	request@2.88.2	no fix listed
Low	GHSA-r6q2-hw4h-h46w	tar@6.2.1	7.5.4
Low	GHSA-2883-xcg3-v3hh	js-yaml@4.1.1	4.3.2
Low	GHSA-3w6x-2g7m-8v23	axios@1.15.0	1.15.2
Low	GHSA-r292-9mhp-454m	tar@6.2.1	7.5.21
Low	GHSA-w5hq-g745-h8pq	uuid@3.4.0	11.1.1
Low	GHSA-w4pp-8pjf-rmxw	pacote@21.5.0	21.5.1
Low	GHSA-9ppj-qmqm-q256	tar@6.2.1	7.5.11
Low	GHSA-jqh4-m9w3-8hp9	axios@1.15.0	1.18.0
Low	GHSA-xwg4-73v4-xw9w	nanoid@3.3.11	3.3.12
Low	GHSA-6h8r-xr42-gp59	xmldom@0.1.31	no fix listed
Low	GHSA-6h8r-xr42-gp59	@xmldom/xmldom@0.8.12	0.8.15
Low	GHSA-f4gw-2p7v-4548	axios@1.15.0	1.18.0
Low	GHSA-42h9-826w-cgv3	axios@1.15.0	1.18.0
Low	GHSA-pmv8-rq9r-6j72	axios@1.15.0	1.18.0
Low	GHSA-mwf2-3pr3-8698	axios@1.15.0	1.18.0
Low	GHSA-h6q6-9hqw-rwfv	xmldom@0.1.31	0.5.0
Low	GHSA-83g3-92jg-28cx	tar@6.2.1	7.5.8
Low	GHSA-38c4-r59v-3vqw	markdown-it@13.0.2	14.1.1
Low	GHSA-w8wr-v893-vjvp	tar@6.2.1	7.5.18
Low	GHSA-m7pr-hjqh-92cm	axios@1.15.0	1.15.1
Low	GHSA-hpcv-96wg-7vj8	dompurify@3.4.0	3.4.6
Low	GHSA-6gmq-8vp8-gcm6	xmldom@0.1.31	no fix listed
Low	GHSA-6gmq-8vp8-gcm6	@xmldom/xmldom@0.8.12	0.8.15
Low	GHSA-mmx7-hfxf-jppx	axios@1.15.0	1.18.0
Low	GHSA-8c25-f3mj-v6h8	sequelize@5.22.5	6.28.1
Low	MAL-2022-5772	reveal-js-multiplex@1.0.0	no fix listed
Low	GHSA-g5xc-5w98-jfvm	mariadb@3.4.5	3.4.6
Low	GHSA-r47g-fvhr-h676	dompurify@3.4.0	3.4.6

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
5.0.0latest	—	1.10.8	0024127	1,755

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/ernail-hedgedoc/hedgedoc.svg)](https://charts.stackradar.io/charts/ernail-hedgedoc/hedgedoc)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.