mealie 5.1.2 Helm chart
geek-cookbookVerified publisherScored 14 Sept 2026
Mealie is a self hosted recipe manager and meal planner with a RestAPI backend and a reactive frontend application built in Vue for a pleasant user experience for the whole family.
Version 5.1.2 4 years agodeploys tag frontend-v1.0.0beta-2 2Artifact Hub
mealie 5.1.2 deploys 2 container images: hkotel/mealie. Across them, 573 findings — 2 critical, 16 high — 6 on CISA KEV. The highest contribution is GHSA-j7hp-h8jx-5ppr in pillow 8.4.0, fixed in 10.0.1. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| hkotel/ | frontend-v1.0.0beta-2 | 01272299 | 4,842 |
| hkotel/ | api-v1.0.0beta-2 | 2450133 | 2,737 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Medium findings
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | DLA-3859-1 | systemd | 247.3-7+deb11u6 |
| Medium | GHSA-hrpp-h998-j3pp | qs | 6.7.3 |
| Medium | DSA-5169-1 | openssl | 1.1.1n-0+deb11u3 |
| Medium | GO-2024-2687 | stdlib | 1.21.9 |
| Medium | DSA-5673-1 | glibc | 2.31-13+deb11u9 |
| Medium | GHSA-5cgq-3rg8-m6cv | golang.org/ | 0.52.0 |
| Medium | DLA-3898-1 | nghttp2 | 1.43.0-1+deb11u2 |
| Medium | DSA-5523-1 | curl | 7.74.0-1.3+deb11u10 |
| Medium | DSA-5417-1 | openssl | 1.1.1n-0+deb11u5 |
| Medium | GHSA-2p57-rm9w-gvfp | ip | no fix listed |
| Medium | GHSA-xvch-5gv4-984h | minimist | 1.2.6 |
| Medium | DSA-5343-1 | openssl | 1.1.1n-0+deb11u4 |
| Medium | DLA-3942-1 | openssl | 1.1.1n-0+deb11u6 |
| Medium | DLA-3942-2 | openssl | 1.1.1w-0+deb11u2 |
| Medium | GHSA-9c47-m6qq-7p4h | json5 | 1.0.2 |
| Medium | ALPINE-CVE-2022-4304 | openssl | 1.1.1t-r0 |
| Medium | GHSA-8vj2-vxx3-667w | pillow | 9.0.1 |
| Medium | GHSA-76p3-8jx3-jpfq | loader-utils | 2.0.3 |
| Medium | GHSA-cg3q-j54f-5p7p | github.com/ | 1.11.1 |
| Medium | GHSA-v778-237x-gjrc | golang.org/ | 0.31.0 |
| Medium | GHSA-9j59-75qj-795w | pillow | 9.0.1 |
| Medium | DSA-5197-1 | curl | 7.74.0-1.3+deb11u2 |
| Medium | GHSA-vvpx-j8f3-3w6h | golang.org/ | 0.7.0 |
| Medium | ALPINE-CVE-2023-0215 | openssl | 1.1.1t-r0 |
| Medium | GHSA-xr2c-5w89-63pv | poetry | 1.1.9 |
| Medium | GHSA-8c26-wmh5-6g9v | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b |
| Medium | GHSA-w3h3-4rj7-4ph4 | gunicorn | 22.0.0 |
| Medium | GHSA-hj9c-8jmm-8c52 | npm | 8.11.0 |
| Medium | GHSA-7f3x-x4pr-wqhj | parse-url | 6.0.1 |
| Medium | GHSA-4374-p667-p6c8 | golang.org/ | 0.17.0 |
| Medium | ALPINE-CVE-2023-0464 | openssl | 1.1.1t-r2 |
| Medium | PYSEC-2024-187 | virtualenv | 20.26.6 |
| Medium | GHSA-fjxv-7rqg-78g4 | form-data | 4.0.4 |
| Medium | GHSA-69cg-p879-7622 | golang.org/ | 0.0.0-20220906165146-f3363e06e74c |
| Medium | GHSA-wp53-j4wj-2cfg | python-multipart | 0.0.22 |
| Medium | GHSA-4wf5-vphf-c2xc | terser | 5.14.2 |
| Medium | GHSA-cx63-2mw6-8hw5 | setuptools | 70.0.0 |
| Medium | GHSA-38jv-5279-wg99 | urllib3 | 2.6.3 |
| Medium | GHSA-74fj-2j2h-c42q | follow-redirects | 1.14.7 |
| Medium | GHSA-p77j-4mvh-x3m3 | google.golang.org/ | 1.79.3 |
| Medium | GHSA-c2qf-rxjj-qqgw | semver | 6.3.1 |
| Medium | GHSA-43fc-jf86-j433 | axios | 0.30.3 |
| Medium | DSA-5218-1 | zlib | 1:1.2.11.dfsg-2+deb11u2 |
| Medium | GHSA-qwmp-2cf2-g9g6 | wheel | 0.38.1 |
| Medium | GHSA-r683-j2x4-v87g | node-fetch | 2.6.7 |
| Medium | GHSA-r9hx-vwmv-q579 | setuptools | 65.5.1 |
| Medium | GHSA-gx9m-whjm-85jf | dompurify | 2.5.0 |
| Medium | PYSEC-2025-49 | setuptools | 78.1.1 |
| Medium | ALPINE-CVE-2023-3446 | openssl | 1.1.1u-r2 |
| Medium | GHSA-hhq3-ff78-jv3g | loader-utils | 2.0.4 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 5.1.2latest | 4 years ago | frontend-v1.0.0beta-2 | 216122432 | 7,579 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.