StackRadar

bookstack Helm chart

gabe565Verified publisher

Scored 14 Sept 2026

A simple, self-hosted, easy-to-use platform for organising and storing information.

Latest 0.20.0 1 year agoapp version version-v24.12.1 4Artifact Hub

bookstack 0.20.0 deploys 1 container image: ghcr.io/linuxserver/bookstack. Across them, 212 findings2 critical, 5 high 1 on CISA KEV. The highest contribution is ALPINE-CVE-2026-42945 in nginx 1.26.2-r4, fixed in 1.26.3-r1. Chart.yaml declares kubeVersion >=1.22.0-0; rendered for Kubernetes 1.22.0.

Radar Score

2,8112548157

212 findings over 1 of 1 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
ghcr.io/linuxserver/bookstackversion-v24.12.125481572,811

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

157 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowALPINE-CVE-2025-69420openssl@3.3.3-r03.3.6-r0
LowALPINE-CVE-2025-31498c-ares@1.34.3-r01.34.5-r0
LowALPINE-CVE-2025-46835git@2.47.2-r02.47.3-r0
LowALPINE-CVE-2026-27135nghttp2@1.64.0-r01.68.1
LowALPINE-CVE-2026-33636libpng@1.6.44-r01.6.56-r0
LowALPINE-CVE-2024-42516apache2@2.4.62-r02.4.64-r0
LowALPINE-CVE-2024-47252apache2@2.4.62-r02.4.64-r0
LowALPINE-CVE-2026-44168mariadb@11.4.5-r011.4.11-r0
LowALPINE-CVE-2026-34356apache2@2.4.62-r02.4.68-r0
LowALPINE-CVE-2026-44185apache2@2.4.62-r02.4.68-r0
LowGHSA-hmqg-cxww-wqhqsquizlabs/php_codesniffer@3.11.23.13.6
LowALPINE-CVE-2026-6732libxml2@2.13.4-r32.13.9-r1
LowALPINE-CVE-2026-34191apr-util@1.6.3-r11.6.4-r0
LowALPINE-CVE-2026-56434nginx@1.26.2-r41.26.3-r2
LowALPINE-CVE-2026-29169apache2@2.4.62-r02.4.67-r0
LowALPINE-CVE-2026-29168apache2@2.4.62-r02.4.67-r0
LowGHSA-78fx-h6xr-vch4laravel/framework@v10.48.2510.48.29
LowALPINE-CVE-2025-27614git@2.47.2-r02.47.3-r0
LowALPINE-CVE-2025-49795libxml2@2.13.4-r32.13.9-r0
LowALPINE-CVE-2026-76641expat@2.6.4-r02.8.4-r0
LowALPINE-CVE-2026-31789openssl@3.3.3-r03.3.7-r0
LowALPINE-CVE-2025-69419openssl@3.3.3-r03.3.6-r0
LowALPINE-CVE-2026-44186apache2@2.4.62-r02.4.68-r0
LowALPINE-CVE-2025-49812apache2@2.4.62-r02.4.64-r0
LowALPINE-CVE-2025-65082apache2@2.4.62-r02.4.66-r0
LowALPINE-CVE-2026-34501apr-util@1.6.3-r11.6.4-r0
LowALPINE-CVE-2026-34502apr-util@1.6.3-r11.6.4-r0
LowGHSA-qpmx-3rfj-7rhvsymfony/mime@v6.4.176.4.40
LowGHSA-94g3-g5v7-q4jgphpseclib/phpseclib@3.0.433.0.50
LowALPINE-CVE-2025-46334git@2.47.2-r02.47.3-r0
LowALPINE-CVE-2026-22184zlib@1.3.1-r21.3.2-r0
LowALPINE-CVE-2026-45186expat@2.6.4-r02.8.1-r0
LowALPINE-CVE-2026-33630c-ares@1.34.3-r01.34.8-r0
LowALPINE-CVE-2025-55753apache2@2.4.62-r02.4.66-r0
LowGHSA-f5gf-2cj8-52g2dompdf/dompdf@v3.0.23.1.6
LowALPINE-CVE-2026-48913apache2@2.4.62-r02.4.68-r0
LowALPINE-CVE-2025-54090apache2@2.4.62-r02.4.65-r0
LowALPINE-CVE-2026-42934nginx@1.26.2-r41.26.3-r1
LowGHSA-2xf4-cg6j-vhgqsymfony/polyfill-intl-idn@v1.31.01.38.1
LowALPINE-CVE-2025-24928libxml2@2.13.4-r32.13.4-r4
LowALPINE-CVE-2026-40701nginx@1.26.2-r41.26.3-r1
LowALPINE-CVE-2026-48142nginx@1.26.2-r41.26.3-r2
LowALPINE-CVE-2026-34059apache2@2.4.62-r02.4.67-r0
LowGHSA-vvj3-c3rp-c85pphpunit/phpunit@10.5.4010.5.62
LowALPINE-CVE-2025-49506apr-util@1.6.3-r11.6.4-r0
LowALPINE-CVE-2025-15468openssl@3.3.3-r03.3.6-r0
LowALPINE-CVE-2026-43951apache2@2.4.62-r02.4.68-r0
LowALPINE-CVE-2025-64720libpng@1.6.44-r01.6.53-r0
LowGHSA-2q4p-g7hv-5rgvleague/commonmark@2.6.12.9.0
LowALPINE-CVE-2025-5222icu@74.2-r074.2-r1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.20.0latest1 year agoversion-v24.12.125481572,811

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/gabe565/bookstack.svg)](https://charts.stackradar.io/charts/gabe565/bookstack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.