booksonic-air Helm chart

Name: booksonic-air Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

geek-cookbook

Scored 16 Sept 2026

Booksonic is a platform for accessing the audibooks you own wherever you are

Latest 6.4.2 4 years agodeploys tag version-v2009.1.0 0Artifact Hub

booksonic-air 6.4.2 deploys 1 container image: ghcr.io/linuxserver/booksonic-air. Across them, 1,179 findings — 21 critical, 35 high — 10 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.2.7.RELEASE, fixed in 2.5.12. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

19,2462135418704

1,179 findings over 1 of 1 images measured

KEV ×10 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/linuxserver/booksonic-air	version-v2009.1.0	2135418704	19,246

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,179 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2023-43788	libxpm@1:3.5.12-1	1:3.5.12-1ubuntu0.18.04.2+esm1
Low	UBUNTU-CVE-2026-46968	openjdk-8@8u292-b10-0ubuntu1~18.04	8u502-ga~us1-0ubuntu1~18.04
Low	UBUNTU-CVE-2026-65705	ffmpeg@7:3.4.8-0ubuntu0.2	7:3.4.11-0ubuntu0.1+esm15
Low	UBUNTU-CVE-2026-65706	ffmpeg@7:3.4.8-0ubuntu0.2	7:3.4.11-0ubuntu0.1+esm15
Low	UBUNTU-CVE-2024-36618	ffmpeg@7:3.4.8-0ubuntu0.2	7:3.4.11-0ubuntu0.1+esm10
Low	UBUNTU-CVE-2025-4373	glib2.0@2.56.4-0ubuntu0.18.04.8	no fix listed
Low	UBUNTU-CVE-2023-43789	libxpm@1:3.5.12-1	1:3.5.12-1ubuntu0.18.04.2+esm1
Low	UBUNTU-CVE-2024-21217	openjdk-8@8u292-b10-0ubuntu1~18.04	8u432-ga~us1-0ubuntu2~18.04
Low	UBUNTU-CVE-2023-3576	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.10+esm4
Low	UBUNTU-CVE-2023-32360	cups@2.2.7-1ubuntu2.8	2.2.7-1ubuntu2.10+esm3
Low	UBUNTU-CVE-2024-36617	ffmpeg@7:3.4.8-0ubuntu0.2	7:3.4.11-0ubuntu0.1+esm7
Low	GHSA-3chg-m5w7-qfv5	spring-webmvc@5.2.6.RELEASE	no fix listed
Low	UBUNTU-CVE-2023-39742	giflib@5.1.4-2ubuntu0.1	5.1.4-2ubuntu0.1+esm1
Low	UBUNTU-CVE-2025-0518	ffmpeg@7:3.4.8-0ubuntu0.2	7:3.4.11-0ubuntu0.1+esm8
Low	UBUNTU-CVE-2023-25435	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.10
Low	UBUNTU-CVE-2023-6135	nss@2:3.35-2ubuntu2.13	no fix listed
Low	UBUNTU-CVE-2026-34979	cups@2.2.7-1ubuntu2.8	no fix listed
Low	UBUNTU-CVE-2026-78408	util-linux@2.31.1-0.4ubuntu3.7	no fix listed
Low	UBUNTU-CVE-2024-56826	openjpeg2@2.3.0-2build0.18.04.1	2.3.0-2+deb10u2ubuntu0.1~esm4
Low	UBUNTU-CVE-2023-38471	avahi@0.7-3.1ubuntu1.3	0.7-3.1ubuntu1.3+esm2
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.11.0	2.18.8
Low	UBUNTU-CVE-2026-54369	acl@2.2.52-3build1	no fix listed
Low	UBUNTU-CVE-2026-41989	libgcrypt20@1.8.1-4ubuntu1.3	no fix listed
Low	UBUNTU-CVE-2026-75466	libjpeg-turbo@1.5.2-0ubuntu5.18.04.4	no fix listed
Low	UBUNTU-CVE-2025-56226	libsndfile@1.0.28-4ubuntu0.18.04.2	no fix listed
Low	UBUNTU-CVE-2024-11053	curl@7.58.0-2ubuntu3.16	7.58.0-2ubuntu3.24+esm10
Low	UBUNTU-CVE-2025-5372	libssh@0.8.0~20170825.94fa1e38-1ubuntu0.7	no fix listed
Low	GHSA-wxpp-56q6-5pcg	spring-expression@5.2.6.RELEASE	no fix listed
Low	UBUNTU-CVE-2023-38469	avahi@0.7-3.1ubuntu1.3	0.7-3.1ubuntu1.3+esm2
Low	UBUNTU-CVE-2023-38470	avahi@0.7-3.1ubuntu1.3	0.7-3.1ubuntu1.3+esm2
Low	UBUNTU-CVE-2023-38472	avahi@0.7-3.1ubuntu1.3	0.7-3.1ubuntu1.3+esm2
Low	UBUNTU-CVE-2023-38473	avahi@0.7-3.1ubuntu1.3	0.7-3.1ubuntu1.3+esm2
Low	UBUNTU-CVE-2024-21144	openjdk-8@8u292-b10-0ubuntu1~18.04	8u422-b05-1~18.04
Low	UBUNTU-CVE-2026-1489	glib2.0@2.56.4-0ubuntu0.18.04.8	no fix listed
Low	UBUNTU-CVE-2023-3164	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.10+esm6
Low	UBUNTU-CVE-2023-21968	openjdk-8@8u292-b10-0ubuntu1~18.04	8u372-ga~us1-0ubuntu1~18.04
Low	UBUNTU-CVE-2026-13595	util-linux@2.31.1-0.4ubuntu3.7	no fix listed
Low	UBUNTU-CVE-2022-2867	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.8
Low	UBUNTU-CVE-2022-2868	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.8
Low	UBUNTU-CVE-2022-2869	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.8
Low	UBUNTU-CVE-2024-21131	openjdk-8@8u292-b10-0ubuntu1~18.04	8u422-b05-1~18.04
Low	UBUNTU-CVE-2026-54371	attr@1:2.4.47-2build1	1:2.4.47-2ubuntu0.18.04.1~esm1
Low	UBUNTU-CVE-2025-7700	ffmpeg@7:3.4.8-0ubuntu0.2	7:3.4.11-0ubuntu0.1+esm11
Low	UBUNTU-CVE-2024-50612	libsndfile@1.0.28-4ubuntu0.18.04.2	1.0.28-4ubuntu0.18.04.2+esm2
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.11.0	2.18.9
Low	GHSA-562r-vg33-8x8h	postgresql@42.2.12	42.2.27
Low	UBUNTU-CVE-2024-21208	openjdk-8@8u292-b10-0ubuntu1~18.04	8u432-ga~us1-0ubuntu2~18.04
Low	UBUNTU-CVE-2026-0964	libssh@0.8.0~20170825.94fa1e38-1ubuntu0.7	0.8.0~20170825.94fa1e38-1ubuntu0.7+esm6
Low	UBUNTU-CVE-2023-30086	tiff@4.0.9-5ubuntu0.4	4.0.9-5ubuntu0.8
Low	GHSA-6p4f-wcwh-5vvm	spring-webmvc@5.2.6.RELEASE	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
6.4.2latest	4 years ago	version-v2009.1.0	2135418704	19,246

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/geek-cookbook/booksonic-air.svg)](https://charts.stackradar.io/charts/geek-cookbook/booksonic-air)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.