StackRadar

booksonic-air 6.4.2 Helm chart

geek-cookbookVerified publisher

Scored 15 Sept 2026

Booksonic is a platform for accessing the audibooks you own wherever you are

Version 6.4.2 4 years agodeploys tag version-v2009.1.0 0Artifact Hub

booksonic-air 6.4.2 deploys 1 container image: ghcr.io/linuxserver/booksonic-air. Across them, 1,177 findings — 21 critical, 35 high — 10 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.2.7.RELEASE, fixed in 2.5.12. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

19,2342135417703

1,177 findings over 1 of 1 images measured

KEV ×10 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
ghcr.io/linuxserver/booksonic-airversion-v2009.1.0213541770319,234

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,177 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowUBUNTU-CVE-2020-36148libmysofa@0.6~dfsg0-3+deb10u1build1no fix listed
LowUBUNTU-CVE-2024-37370krb5@1.16-2ubuntu0.21.16-2ubuntu0.4+esm2
LowUBUNTU-CVE-2023-21967openjdk-8@8u292-b10-0ubuntu1~18.048u372-ga~us1-0ubuntu1~18.04
LowUBUNTU-CVE-2023-38546curl@7.58.0-2ubuntu3.167.58.0-2ubuntu3.24+esm2
LowUBUNTU-CVE-2018-20861libopenmpt@0.3.6-1no fix listed
LowUBUNTU-CVE-2023-3316tiff@4.0.9-5ubuntu0.44.0.9-5ubuntu0.10+esm1
LowUBUNTU-CVE-2017-7475cairo@1.15.10-2ubuntu0.1no fix listed
LowGHSA-g36m-9g3m-2vmpneethi@3.1.13.2.2
LowUBUNTU-CVE-2020-22019ffmpeg@7:3.4.8-0ubuntu0.27:3.4.11-0ubuntu0.1
LowUBUNTU-CVE-2026-9076openssl@1.1.1-1ubuntu2.1~18.04.131.1.1-1ubuntu2.1~18.04.23+esm9
LowUBUNTU-CVE-2023-28484libxml2@2.9.4+dfsg1-6.1ubuntu1.42.9.4+dfsg1-6.1ubuntu1.9
LowUBUNTU-CVE-2026-82209curl@7.58.0-2ubuntu3.16no fix listed
LowUBUNTU-CVE-2026-22016openjdk-8@8u292-b10-0ubuntu1~18.048u492-ga~us2-0ubuntu1~18.04.1
LowUBUNTU-CVE-2021-20234zeromq3@4.2.5-1ubuntu0.24.2.5-1ubuntu0.2+esm2
LowUBUNTU-CVE-2023-21954openjdk-8@8u292-b10-0ubuntu1~18.048u372-ga~us1-0ubuntu1~18.04
LowUBUNTU-CVE-2022-3437heimdal@7.5.0+dfsg-17.5.0+dfsg-1ubuntu0.3
LowUBUNTU-CVE-2025-58364cups@2.2.7-1ubuntu2.82.2.7-1ubuntu2.10+esm7
LowUBUNTU-CVE-2021-40528libgcrypt20@1.8.1-4ubuntu1.31.8.1-4ubuntu1.fips.3
LowGHSA-7v6m-28jr-rg84hibernate-validator@6.0.19.Final6.2.0.CR1
LowUBUNTU-CVE-2020-27843openjpeg2@2.3.0-2build0.18.04.12.3.0-2+deb10u2build0.18.04.1
LowUBUNTU-CVE-2020-22051ffmpeg@7:3.4.8-0ubuntu0.27:3.4.11-0ubuntu0.1+esm2
LowUBUNTU-CVE-2020-22039ffmpeg@7:3.4.8-0ubuntu0.27:3.4.11-0ubuntu0.1+esm2
LowUBUNTU-CVE-2020-22043ffmpeg@7:3.4.8-0ubuntu0.27:3.4.11-0ubuntu0.1+esm2
LowUBUNTU-CVE-2026-63072openssl@1.1.1-1ubuntu2.1~18.04.131.1.1-1ubuntu2.1~18.04.23+esm10
LowUBUNTU-CVE-2022-21626openjdk-8@8u292-b10-0ubuntu1~18.048u352-ga-1~18.04
LowGHSA-cm59-pr5q-cw85spring-boot@2.2.7.RELEASE2.2.11.RELEASE
LowUBUNTU-CVE-2020-22040ffmpeg@7:3.4.8-0ubuntu0.27:3.4.11-0ubuntu0.1+esm2
LowUBUNTU-CVE-2026-12087perl@5.26.1-6ubuntu0.55.26.1-6ubuntu0.7+esm3
LowGHSA-6fmv-xxpf-w3cwplexus-utils@3.2.13.6.1
LowUBUNTU-CVE-2022-3599tiff@4.0.9-5ubuntu0.44.0.9-5ubuntu0.8
LowUBUNTU-CVE-2020-22038ffmpeg@7:3.4.8-0ubuntu0.27:3.4.11-0ubuntu0.1+esm3
LowUBUNTU-CVE-2022-3598tiff@4.0.9-5ubuntu0.44.0.9-5ubuntu0.8
LowUBUNTU-CVE-2023-29469libxml2@2.9.4+dfsg1-6.1ubuntu1.42.9.4+dfsg1-6.1ubuntu1.9
LowUBUNTU-CVE-2021-2369openjdk-8@8u292-b10-0ubuntu1~18.048u312-b07-0ubuntu1~18.04
LowUBUNTU-CVE-2026-66036ffmpeg@7:3.4.8-0ubuntu0.27:3.4.11-0ubuntu0.1+esm13
LowUBUNTU-CVE-2025-53066openjdk-8@8u292-b10-0ubuntu1~18.048u472-ga-1~18.04
LowUBUNTU-CVE-2025-5318libssh@0.8.0~20170825.94fa1e38-1ubuntu0.70.8.0~20170825.94fa1e38-1ubuntu0.7+esm4
LowUBUNTU-CVE-2020-11080nghttp2@1.30.0-1ubuntu11.30.0-1ubuntu1+esm1
LowUBUNTU-CVE-2026-34282openjdk-8@8u292-b10-0ubuntu1~18.048u492-ga~us2-0ubuntu1~18.04.1
LowUBUNTU-CVE-2020-27824openjpeg2@2.3.0-2build0.18.04.12.3.0-2+deb10u2build0.18.04.1
LowGHSA-564r-hj7v-mcr5spring-expression@5.2.6.RELEASE5.2.23.RELEASE
LowUBUNTU-CVE-2025-52194libsndfile@1.0.28-4ubuntu0.18.04.2no fix listed
LowUBUNTU-CVE-2026-0915glibc@2.27-3ubuntu1.42.27-3ubuntu1.6+esm6
LowUBUNTU-CVE-2025-4802glibc@2.27-3ubuntu1.42.27-3ubuntu1.6+esm5
LowUBUNTU-CVE-2023-50495ncurses@6.1-1ubuntu1.18.046.1-1ubuntu1.18.04.1+esm2
LowUBUNTU-CVE-2026-4775tiff@4.0.9-5ubuntu0.4no fix listed
LowUBUNTU-CVE-2020-35522tiff@4.0.9-5ubuntu0.44.0.9-5ubuntu0.5
LowUBUNTU-CVE-2020-14410libsdl2@2.0.8+dfsg1-1ubuntu1.18.04.42.0.8+dfsg1-1ubuntu1.18.04.4+esm1
LowUBUNTU-CVE-2026-5773curl@7.58.0-2ubuntu3.167.58.0-2ubuntu3.24+esm10
LowUBUNTU-CVE-2023-5981gnutls28@3.5.18-1ubuntu1.53.5.18-1ubuntu1.6+esm1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
6.4.2latest4 years agoversion-v2009.1.0213541770319,234

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/geek-cookbook/booksonic-air.svg)](https://charts.stackradar.io/charts/geek-cookbook/booksonic-air)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 15 Sept 2026 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.