bookstack 0.20.0 Helm chart
gabe565Verified publisherScored 14 Sept 2026
A simple, self-hosted, easy-to-use platform for organising and storing information.
Version 0.20.0 1 year agoapp version version-v24.12.1 4Artifact Hub
bookstack 0.20.0 deploys 1 container image: ghcr.io/linuxserver/bookstack. Across them, 212 findings — 2 critical, 5 high — 1 on CISA KEV. The highest contribution is ALPINE-CVE-2026-42945 in nginx 1.26.2-r4, fixed in 1.26.3-r1. Chart.yaml declares kubeVersion >=1.22.0-0; rendered for Kubernetes 1.22.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | version-v24.12.1 | 2548157 | 2,811 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-r39x-jcww-82v6 | symfony/ | 6.4.33 |
| Low | GHSA-h95v-h523-3mw8 | guzzlehttp/ | 7.15.1 |
| Low | ALPINE-CVE-2026-76957 | expat | 2.8.4-r0 |
| Low | GHSA-wm3w-8rrp-j577 | guzzlehttp/ | 7.15.1 |
| Low | ALPINE-CVE-2026-56403 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56404 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56405 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56408 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56406 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56407 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56410 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56411 | expat | 2.8.2-r0 |
| Low | GHSA-27qh-8cxx-2cr5 | aws/ | 3.371.4 |
| Low | ALPINE-CVE-2025-64505 | libpng | 1.6.53-r0 |
| Low | GHSA-g2gp-3wwq-f4ph | league/ | 2.9.0 |
| Low | GHSA-jfm3-95jq-q3rf | league/ | 2.9.0 |
| Low | GHSA-mh25-x5hq-wrqp | league/ | 2.9.0 |
| Low | GHSA-m557-wrgg-6rp4 | phpseclib/ | 3.0.54 |
| Low | GHSA-cwxw-98qj-8qjx | guzzlehttp/ | 7.12.1 |
| Low | ALPINE-CVE-2026-3494 | mariadb | 11.4.10-r0 |
| Low | ALPINE-CVE-2026-56412 | expat | 2.8.2-r0 |
| Low | GHSA-2x45-7fc3-mxwq | firebase/ | 7.0.0 |
| Low | GHSA-f7vp-7xgx-4w4r | guzzlehttp/ | 7.15.2 |
| Low | ALPINE-CVE-2026-50219 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56409 | expat | 2.8.2-r0 |
| Low | GHSA-f283-ghqc-fg79 | guzzlehttp/ | 7.15.1 |
| Low | ALPINE-CVE-2026-27171 | zlib | 1.3.2-r0 |
| Low | ALPINE-CVE-2026-32777 | expat | 2.7.5-r0 |
| Low | GHSA-94pj-82f3-465w | guzzlehttp/ | 7.14.2 |
| Low | ALPINE-CVE-2026-56132 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2025-5025 | curl | 8.14.0-r0 |
| Low | ALPINE-CVE-2025-64506 | libpng | 1.6.53-r0 |
| Low | GHSA-x8cp-jf6f-r4xh | aws/ | 3.368.0 |
| Low | GHSA-wpwq-4j6v-78m3 | guzzlehttp/ | 7.12.1 |
| Low | GHSA-34xg-wgjx-8xph | guzzlehttp/ | 2.10.2 |
| Low | ALPINE-CVE-2026-44119 | apache2 | 2.4.68-r0 |
| Low | GHSA-4v6x-c7xx-hw9f | league/ | 2.8.1 |
| Low | ALPINE-CVE-2026-32778 | expat | 2.7.5-r0 |
| Low | GHSA-hq7v-mx3g-29hw | guzzlehttp/ | 2.10.2 |
| Low | ALPINE-CVE-2026-32776 | expat | 2.7.5-r0 |
| Low | ALPINE-CVE-2026-6042 | musl | 1.2.5-r10 |
| Low | GHSA-vm85-hxw5-5432 | guzzlehttp/ | 2.12.1 |
| Low | ALPINE-CVE-2025-27613 | git | 2.47.3-r0 |
| Low | ALPINE-CVE-2026-22795 | openssl | 3.3.6-r0 |
| Low | GHSA-c2w2-prh8-qm98 | guzzlehttp/ | 2.12.3 |
| Low | ALPINE-CVE-2026-4367 | libxpm | 3.5.19-r0 |
| Low | ALPINE-CVE-2026-56131 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-44169 | mariadb | 11.4.11-r0 |
| Low | GHSA-r854-jrxh-36qx | phpseclib/ | 3.0.51 |
| Low | GHSA-g446-98w2-8p5w | guzzlehttp/ | 7.12.3 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 0.20.0latest | 1 year ago | version-v24.12.1 | 2548157 | 2,811 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.