bookstack 0.20.0 Helm chart
gabe565Verified publisherScored 14 Sept 2026
A simple, self-hosted, easy-to-use platform for organising and storing information.
Version 0.20.0 1 year agoapp version version-v24.12.1 4Artifact Hub
bookstack 0.20.0 deploys 1 container image: ghcr.io/linuxserver/bookstack. Across them, 212 findings — 2 critical, 5 high — 1 on CISA KEV. The highest contribution is ALPINE-CVE-2026-42945 in nginx 1.26.2-r4, fixed in 1.26.3-r1. Chart.yaml declares kubeVersion >=1.22.0-0; rendered for Kubernetes 1.22.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | version-v24.12.1 | 2548157 | 2,811 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-38cx-cq6f-5755 | symfony/ | 6.4.41 |
| Low | GHSA-vqc8-7275-q272 | symfony/ | 6.4.40 |
| Low | GHSA-8hg6-c449-896m | dompdf/ | 3.1.6 |
| Low | ALPINE-CVE-2025-66293 | libpng | 1.6.53-r0 |
| Low | GHSA-jjv6-8j6v-6j52 | league/ | 2.9.1 |
| Low | ALPINE-CVE-2026-40460 | nginx | 1.26.3-r1 |
| Low | ALPINE-CVE-2026-76956 | expat | 2.8.4-r0 |
| Low | GHSA-j8pm-gj4c-rq4x | league/ | 2.9.1 |
| Low | ALPINE-CVE-2026-33523 | apache2 | 2.4.67-r0 |
| Low | ALPINE-CVE-2026-29170 | apache2 | 2.4.68-r0 |
| Low | GHSA-8rr7-cvq3-gmfh | league/ | 2.10.0 |
| Low | GHSA-h5x3-xfc9-m39h | symfony/ | 6.4.41 |
| Low | ALPINE-CVE-2025-66200 | apache2 | 2.4.66-r0 |
| Low | ALPINE-CVE-2025-48386 | git | 2.47.3-r0 |
| Low | GHSA-3527-qv2q-pfvx | league/ | 2.7.0 |
| Low | ALPINE-CVE-2026-25210 | expat | 2.7.4-r0 |
| Low | ALPINE-CVE-2025-65018 | libpng | 1.6.53-r0 |
| Low | ALPINE-CVE-2026-44173 | mariadb | 11.4.11-r0 |
| Low | ALPINE-CVE-2026-40200 | musl | 1.2.5-r11 |
| Low | ALPINE-CVE-2025-62408 | c-ares | 1.34.6-r0 |
| Low | GHSA-4486-gxhx-5mg7 | psy/ | 0.12.19 |
| Low | ALPINE-CVE-2025-66199 | openssl | 3.3.6-r0 |
| Low | GHSA-x6g4-fwcc-jj8w | symfony/ | 6.4.40 |
| Low | GHSA-3qpq-r242-jqj7 | phpseclib/ | 3.0.52 |
| Low | GHSA-4v26-v6cg-g6f9 | robrichards/ | 3.1.5 |
| Low | ALPINE-CVE-2026-44171 | mariadb | 11.4.11-r0 |
| Low | GHSA-cx96-42px-69fm | dompdf/ | 3.1.6 |
| Low | GHSA-c5fp-p67m-gq56 | knplabs/ | 1.7.0 |
| Low | GHSA-5j8p-438x-rgg5 | onelogin/ | 4.3.1 |
| Low | GHSA-v5mv-p594-2x33 | guzzlehttp/ | 7.15.2 |
| Low | ALPINE-CVE-2025-4947 | curl | 8.14.0-r0 |
| Low | ALPINE-CVE-2026-33007 | apache2 | 2.4.67-r0 |
| Low | ALPINE-CVE-2026-22796 | openssl | 3.3.6-r0 |
| Low | GHSA-j8qw-6jw8-r297 | dompdf/ | 3.1.6 |
| Low | ALPINE-CVE-2025-10148 | curl | 8.14.1-r2 |
| Low | ALPINE-CVE-2026-34032 | apache2 | 2.4.67-r0 |
| Low | ALPINE-CVE-2026-34743 | xz | 5.8.3-r0 |
| Low | GHSA-vpr4-p6fq-85jc | knplabs/ | 1.7.1 |
| Low | ALPINE-CVE-2026-22801 | libpng | 1.6.54-r0 |
| Low | ALPINE-CVE-2026-33006 | apache2 | 2.4.67-r0 |
| Low | GHSA-hh8v-hgvp-g3f5 | league/ | 2.8.2 |
| Low | ALPINE-CVE-2026-33857 | apache2 | 2.4.67-r0 |
| Low | GHSA-72xp-p242-47p9 | symfony/ | 6.4.40 |
| Low | GHSA-29pj-957v-52mc | league/ | 2.9.0 |
| Low | GHSA-c4cc-x928-vjw9 | robrichards/ | 3.1.4 |
| Low | GHSA-r39x-jcww-82v6 | symfony/ | 6.4.33 |
| Low | GHSA-h95v-h523-3mw8 | guzzlehttp/ | 7.15.1 |
| Low | ALPINE-CVE-2026-76957 | expat | 2.8.4-r0 |
| Low | GHSA-wm3w-8rrp-j577 | guzzlehttp/ | 7.15.1 |
| Low | ALPINE-CVE-2026-56403 | expat | 2.8.2-r0 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 0.20.0latest | 1 year ago | version-v24.12.1 | 2548157 | 2,811 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.