StackRadar

booksonic-air 6.4.2 Helm chart

geek-cookbookVerified publisher

Scored 14 Sept 2026

Booksonic is a platform for accessing the audibooks you own wherever you are

Version 6.4.2 4 years agodeploys tag version-v2009.1.0 0Artifact Hub

booksonic-air 6.4.2 deploys 1 container image: ghcr.io/linuxserver/booksonic-air. Across them, 1,174 findings — 22 critical, 34 high — 10 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-beans 5.2.6.RELEASE, fixed in 5.2.20.RELEASE. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

19,2152234416701

1,174 findings over 1 of 1 images measured

KEV ×10 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
ghcr.io/linuxserver/booksonic-airversion-v2009.1.0223441670119,215

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

416 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumUBUNTU-CVE-2017-5048ffmpeg@7:3.4.8-0ubuntu0.2no fix listed
MediumUBUNTU-CVE-2017-5049ffmpeg@7:3.4.8-0ubuntu0.2no fix listed
MediumUBUNTU-CVE-2017-5050ffmpeg@7:3.4.8-0ubuntu0.2no fix listed
MediumUBUNTU-CVE-2019-20446librsvg@2.40.20-2ubuntu0.2no fix listed
MediumUBUNTU-CVE-2019-6462cairo@1.15.10-2ubuntu0.11.15.10-2ubuntu0.1+esm1
MediumUBUNTU-CVE-2025-30749openjdk-8@8u292-b10-0ubuntu1~18.048u462-ga~us1-0ubuntu2~18.04.2
MediumUBUNTU-CVE-2024-25062libxml2@2.9.4+dfsg1-6.1ubuntu1.42.9.4+dfsg1-6.1ubuntu1.9+esm1
MediumUBUNTU-CVE-2017-5051ffmpeg@7:3.4.8-0ubuntu0.2no fix listed
MediumGHSA-v682-8vv8-vpwrtomcat-embed-websocket@9.0.379.0.86
MediumUBUNTU-CVE-2019-6461cairo@1.15.10-2ubuntu0.11.15.10-2ubuntu0.1+esm1
MediumUBUNTU-CVE-2025-6021libxml2@2.9.4+dfsg1-6.1ubuntu1.42.9.4+dfsg1-6.1ubuntu1.9+esm4
MediumUBUNTU-CVE-2023-25434tiff@4.0.9-5ubuntu0.44.0.9-5ubuntu0.10
MediumUBUNTU-CVE-2023-0361gnutls28@3.5.18-1ubuntu1.5no fix listed
MediumUBUNTU-CVE-2020-20451ffmpeg@7:3.4.8-0ubuntu0.27:3.4.11-0ubuntu0.1
MediumUBUNTU-CVE-2017-20229mawk@1.3.3-17ubuntu3no fix listed
MediumGHSA-c4r9-r8fh-9vj2snakeyaml@1.251.31
MediumUBUNTU-CVE-2022-21541openjdk-8@8u292-b10-0ubuntu1~18.048u342-b07-0ubuntu1~18.04
MediumGHSA-xjp4-hw94-mvp5commons-configuration2@2.72.10.1
MediumUBUNTU-CVE-2026-42009gnutls28@3.5.18-1ubuntu1.53.5.18-1ubuntu1.6+esm3
MediumUBUNTU-CVE-2022-21283openjdk-8@8u292-b10-0ubuntu1~18.048u342-b07-0ubuntu1~18.04
MediumUBUNTU-CVE-2022-21341openjdk-8@8u292-b10-0ubuntu1~18.048u342-b07-0ubuntu1~18.04
MediumUBUNTU-CVE-2024-56171libxml2@2.9.4+dfsg1-6.1ubuntu1.42.9.4+dfsg1-6.1ubuntu1.9+esm2
MediumUBUNTU-CVE-2023-0767nss@2:3.35-2ubuntu2.132:3.35-2ubuntu2.16
MediumGHSA-78wr-2p64-hpwjcommons-io@2.62.14.0
MediumUBUNTU-CVE-2025-59375expat@2.2.5-3ubuntu0.22.2.5-3ubuntu0.9+esm3
MediumUBUNTU-CVE-2022-0891tiff@4.0.9-5ubuntu0.44.0.9-5ubuntu0.5
MediumUBUNTU-CVE-2024-8176expat@2.2.5-3ubuntu0.2no fix listed
MediumUBUNTU-CVE-2024-45492expat@2.2.5-3ubuntu0.22.2.5-3ubuntu0.9+esm1
MediumUBUNTU-CVE-2025-9900tiff@4.0.9-5ubuntu0.44.0.9-5ubuntu0.10+esm9
MediumUBUNTU-CVE-2022-46285libxpm@1:3.5.12-11:3.5.12-1ubuntu0.18.04.2
MediumUBUNTU-CVE-2023-45929slang2@2.3.1a-3ubuntu1no fix listed
MediumUBUNTU-CVE-2022-4743libsdl2@2.0.8+dfsg1-1ubuntu1.18.04.4no fix listed
MediumUBUNTU-CVE-2026-33846gnutls28@3.5.18-1ubuntu1.53.5.18-1ubuntu1.6+esm3
MediumUBUNTU-CVE-2024-0727openssl@1.1.1-1ubuntu2.1~18.04.131.1.1-1ubuntu2.1~18.04.23+esm4
MediumGHSA-f3jh-qvm4-mg39spring-security-core@5.2.4.RELEASE5.7.12
MediumUBUNTU-CVE-2022-44617libxpm@1:3.5.12-11:3.5.12-1ubuntu0.18.04.2
MediumUBUNTU-CVE-2020-27823openjpeg2@2.3.0-2build0.18.04.12.3.0-2+deb10u2build0.18.04.1
MediumUBUNTU-CVE-2023-21930openjdk-8@8u292-b10-0ubuntu1~18.048u372-ga~us1-0ubuntu1~18.04
MediumUBUNTU-CVE-2020-35492cairo@1.15.10-2ubuntu0.11.15.10-2ubuntu0.1+esm1
MediumUBUNTU-CVE-2018-5727openjpeg2@2.3.0-2build0.18.04.12.3.0-2ubuntu0.1~esm1
MediumGHSA-98wm-3w3q-mw94snakeyaml@1.251.31
MediumUBUNTU-CVE-2024-35367ffmpeg@7:3.4.8-0ubuntu0.27:3.4.11-0ubuntu0.1+esm10
MediumUBUNTU-CVE-2022-21360openjdk-8@8u292-b10-0ubuntu1~18.048u342-b07-0ubuntu1~18.04
MediumUBUNTU-CVE-2022-21365openjdk-8@8u292-b10-0ubuntu1~18.048u342-b07-0ubuntu1~18.04
MediumUBUNTU-CVE-2021-44758heimdal@7.5.0+dfsg-17.5.0+dfsg-1ubuntu0.3
MediumUBUNTU-CVE-2022-43552curl@7.58.0-2ubuntu3.167.58.0-2ubuntu3.22
MediumUBUNTU-CVE-2022-21299openjdk-8@8u292-b10-0ubuntu1~18.048u342-b07-0ubuntu1~18.04
MediumUBUNTU-CVE-2015-8985glibc@2.27-3ubuntu1.4no fix listed
MediumUBUNTU-CVE-2022-1210jbigkit@2.1-3.1build12.1-3.1ubuntu0.18.04.1
MediumUBUNTU-CVE-2018-10126libjpeg-turbo@1.5.2-0ubuntu5.18.04.4no fix listed

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
6.4.2latest4 years agoversion-v2009.1.0223441670119,215

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/geek-cookbook/booksonic-air.svg)](https://charts.stackradar.io/charts/geek-cookbook/booksonic-air)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.