hedgedoc Helm chart

Name: hedgedoc Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

ernail-hedgedoc

Scored 14 Sept 2026

A lightweight Helm chart for HedgeDoc that prioritizes transparency and flexibility

Latest 5.0.0app version 1.10.8 0Artifact Hub

hedgedoc 5.0.0 deploys 1 container image: quay.io/hedgedoc/hedgedoc. Across them, 151 findings — 0 critical, 0 high. The highest contribution is GHSA-hrpp-h998-j3pp in qs 2.3.3, fixed in 6.2.4.

Radar Score

1,7550024127

151 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
quay.io/hedgedoc/hedgedoc	1.10.8	0024127	1,755

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

127 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-3w6x-2g7m-8v23	axios@1.15.0	1.15.2
Low	GHSA-r292-9mhp-454m	tar@6.2.1	7.5.21
Low	GHSA-w5hq-g745-h8pq	uuid@3.4.0	11.1.1
Low	GHSA-w4pp-8pjf-rmxw	pacote@21.5.0	21.5.1
Low	GHSA-9ppj-qmqm-q256	tar@6.2.1	7.5.11
Low	GHSA-jqh4-m9w3-8hp9	axios@1.15.0	1.18.0
Low	GHSA-xwg4-73v4-xw9w	nanoid@3.3.11	3.3.12
Low	GHSA-6h8r-xr42-gp59	xmldom@0.1.31	no fix listed
Low	GHSA-6h8r-xr42-gp59	@xmldom/xmldom@0.8.12	0.8.15
Low	GHSA-f4gw-2p7v-4548	axios@1.15.0	1.18.0
Low	GHSA-42h9-826w-cgv3	axios@1.15.0	1.18.0
Low	GHSA-pmv8-rq9r-6j72	axios@1.15.0	1.18.0
Low	GHSA-mwf2-3pr3-8698	axios@1.15.0	1.18.0
Low	GHSA-h6q6-9hqw-rwfv	xmldom@0.1.31	0.5.0
Low	GHSA-83g3-92jg-28cx	tar@6.2.1	7.5.8
Low	GHSA-38c4-r59v-3vqw	markdown-it@13.0.2	14.1.1
Low	GHSA-w8wr-v893-vjvp	tar@6.2.1	7.5.18
Low	GHSA-m7pr-hjqh-92cm	axios@1.15.0	1.15.1
Low	GHSA-hpcv-96wg-7vj8	dompurify@3.4.0	3.4.6
Low	GHSA-6gmq-8vp8-gcm6	xmldom@0.1.31	no fix listed
Low	GHSA-6gmq-8vp8-gcm6	@xmldom/xmldom@0.8.12	0.8.15
Low	GHSA-mmx7-hfxf-jppx	axios@1.15.0	1.18.0
Low	GHSA-8c25-f3mj-v6h8	sequelize@5.22.5	6.28.1
Low	MAL-2022-5772	reveal-js-multiplex@1.0.0	no fix listed
Low	GHSA-g5xc-5w98-jfvm	mariadb@3.4.5	3.4.6
Low	GHSA-r47g-fvhr-h676	dompurify@3.4.0	3.4.6
Low	GHSA-jxxr-4gwj-5jf2	brace-expansion@5.0.5	5.0.6
Low	GHSA-52v5-jr5w-gjxr	sigstore@4.1.0	4.1.1
Low	GHSA-gvwx-54wh-qm9j	tar@6.2.1	7.5.17
Low	GHSA-v2v4-37r5-5v8g	ip-address@10.1.0	10.1.1
Low	GHSA-28wg-ghj8-5hjv	nanoid@3.3.11	3.3.16
Low	GHSA-w9j2-pvgh-6h63	axios@1.15.0	1.15.1
Low	GHSA-2v37-7h3g-55p8	nanoid@3.3.11	3.3.18
Low	GHSA-58qx-3vcg-4xpx	ws@8.18.3	8.20.1
Low	GHSA-7q8q-rj6j-mhjq	axios@1.15.0	1.18.0
Low	GHSA-h67p-54hq-rp68	js-yaml@4.1.1	4.2.0
Low	GHSA-42r5-vhpq-m858	mariadb@3.4.5	3.4.6
Low	GHSA-6v5v-wf23-fmfq	markdown-it@13.0.2	14.2.0
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@5.0.5	5.0.7
Low	GHSA-gh4j-gqv2-49f6	fast-xml-parser@5.6.0	5.7.0
Low	GHSA-76mc-f452-cxcm	dompurify@3.4.0	3.4.7
Low	GHSA-q8mj-m7cp-5q26	qs@6.15.1	6.15.2
Low	GHSA-p88m-4jfj-68fv	undici@6.25.0	6.27.0
Low	GHSA-vmf3-w455-68vh	tar@6.2.1	7.5.16
Low	GHSA-4vj7-5mj6-jm8m	morgan@1.10.1	1.11.0
Low	GHSA-5c9x-8gcm-mpgx	axios@1.15.0	1.15.1
Low	GHSA-vf2m-468p-8v99	axios@1.15.0	1.15.1
Low	GHSA-5wm8-gmm8-39j9	fast-xml-builder@1.1.4	1.1.7
Low	GHSA-rp9w-3fw7-7cwq	dompurify@3.4.0	3.4.7
Low	GHSA-445q-vr5w-6q77	axios@1.15.0	1.15.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
5.0.0latest	—	1.10.8	0024127	1,755

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/ernail-hedgedoc/hedgedoc.svg)](https://charts.stackradar.io/charts/ernail-hedgedoc/hedgedoc)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.