booksonic-air Helm chart
geek-cookbookVerified publisherScored 14 Sept 2026
Booksonic is a platform for accessing the audibooks you own wherever you are
Latest 6.4.2 4 years agodeploys tag version-v2009.1.0 0Artifact Hub
booksonic-air 6.4.2 deploys 1 container image: ghcr.io/linuxserver/booksonic-air. Across them, 1,174 findings — 22 critical, 34 high — 10 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-beans 5.2.6.RELEASE, fixed in 5.2.20.RELEASE. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | version-v2009.1.0 | 2234416701 | 19,215 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Critical findings
Critical: findings whose contribution to the Radar Score is 70–100. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | GHSA-36p3-wjmg-h94xKEV | spring-webmvc | 5.2.20.RELEASE |
| Critical | GHSA-36p3-wjmg-h94xKEV | spring-boot-starter-web | 2.5.12 |
| Critical | GHSA-36p3-wjmg-h94xKEV | spring-beans | 5.2.20.RELEASE |
| Critical | GHSA-83qj-6fr2-vhqgKEV | tomcat-embed-core | 9.0.99 |
| Critical | UBUNTU-CVE-2015-4852KEV | openjdk-8 | no fix listed |
| Critical | GHSA-599f-7c49-w659 | commons-text | 1.10.0 |
| Critical | UBUNTU-CVE-2022-2068 | openssl | 1.1.1-1ubuntu2.1~18.04.19 |
| Critical | UBUNTU-CVE-2021-3711 | openssl | 1.1.1-1ubuntu2.fips.2.1~18.04.13.2 |
| Critical | UBUNTU-CVE-2022-1292 | openssl | 1.1.1-1ubuntu2.1~18.04.17 |
| Critical | UBUNTU-CVE-2023-4863KEV | libwebp | 0.6.1-2ubuntu0.18.04.2+esm1 |
| Critical | UBUNTU-CVE-2023-5217KEV | libvpx | 1.7.0-3ubuntu0.18.04.1+esm1 |
| Critical | UBUNTU-CVE-2022-29155 | openldap | 2.4.45+dfsg-1ubuntu1.11 |
| Critical | GHSA-mjmj-j48q-9wg2 | snakeyaml | 2.0 |
| Critical | UBUNTU-CVE-2025-27363KEV | freetype | 2.8.1-2ubuntu2.2+esm1 |
| Critical | GHSA-xj57-8qj4-c4m6 | commons-configuration2 | 2.8.0 |
| Critical | UBUNTU-CVE-2023-44487KEV | nghttp2 | 1.30.0-1ubuntu1+esm2 |
| Critical | GHSA-5j33-cvvr-w245 | tomcat-embed-core | 9.0.98 |
| Critical | GHSA-vv7r-c36w-3prj | commons-fileupload | 1.6.0 |
| Critical | UBUNTU-CVE-2024-47175 | cups | 2.2.7-1ubuntu2.10+esm6 |
| Critical | UBUNTU-CVE-2025-6965 | sqlite3 | 3.22.0-1ubuntu0.7+esm2 |
| Critical | UBUNTU-CVE-2019-9513 | nghttp2 | 1.30.0-1ubuntu1+esm2 |
| Critical | UBUNTU-CVE-2024-2961 | glibc | 2.27-3ubuntu1.6+esm2 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 6.4.2latest | 4 years ago | version-v2009.1.0 | 2234416701 | 19,215 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.