mealie 5.1.2 Helm chart
geek-cookbookVerified publisherScored 14 Sept 2026
Mealie is a self hosted recipe manager and meal planner with a RestAPI backend and a reactive frontend application built in Vue for a pleasant user experience for the whole family.
Version 5.1.2 4 years agodeploys tag frontend-v1.0.0beta-2 2Artifact Hub
mealie 5.1.2 deploys 2 container images: hkotel/mealie. Across them, 573 findings — 2 critical, 16 high — 6 on CISA KEV. The highest contribution is GHSA-j7hp-h8jx-5ppr in pillow 8.4.0, fixed in 10.0.1. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| hkotel/ | frontend-v1.0.0beta-2 | 01272299 | 4,842 |
| hkotel/ | api-v1.0.0beta-2 | 2450133 | 2,737 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-qrpm-p2h7-hrv2 | nanoid | 3.1.31 |
| Low | GHSA-vjh7-7g9h-fjfh | elliptic | 6.6.1 |
| Low | GHSA-mf9w-mj56-hr94 | python-dotenv | 1.2.2 |
| Low | GO-2024-3106 | stdlib | 1.22.7 |
| Low | GHSA-v6wh-96g9-6wx3 | launch-editor | 2.14.1 |
| Low | GO-2023-1570 | stdlib | 1.19.6 |
| Low | DLA-4061-1 | libtasn1-6 | 4.16.0-2+deb11u2 |
| Low | GHSA-9f5j-8jwj-x28g | ecdsa | 0.19.2 |
| Low | GHSA-378v-28hj-76wf | bn.js | 4.12.3 |
| Low | GO-2022-0531 | stdlib | 1.17.11 |
| Low | GO-2024-2600 | stdlib | 1.21.8 |
| Low | GHSA-fv7c-fp4j-7gwp | @babel/ | 7.29.4 |
| Low | GHSA-977x-g7h5-7qgw | elliptic | 6.5.7 |
| Low | GHSA-hrxh-6v49-42gf | google.golang.org/ | 1.82.1 |
| Low | GHSA-h8r8-wccr-v5f2 | dompurify | 3.3.2 |
| Low | GHSA-28wg-ghj8-5hjv | nanoid | 3.3.16 |
| Low | GHSA-m6fv-jmcg-4jfg | send | 0.19.0 |
| Low | GHSA-h7mw-gpvr-xq4m | dompurify | 3.4.0 |
| Low | GHSA-w9j2-pvgh-6h63 | axios | 0.31.1 |
| Low | GO-2024-2609 | stdlib | 1.21.8 |
| Low | GO-2024-3107 | stdlib | 1.22.7 |
| Low | GO-2023-1751 | stdlib | 1.19.9 |
| Low | GO-2023-1753 | stdlib | 1.19.9 |
| Low | DLA-4145-1 | expat | 2.2.10-2+deb11u7 |
| Low | GHSA-pq67-6m6q-mj2v | urllib3 | 2.5.0 |
| Low | GHSA-2v37-7h3g-55p8 | nanoid | 3.3.18 |
| Low | GHSA-58qx-3vcg-4xpx | ws | 8.20.1 |
| Low | GHSA-4vpr-x523-8j87 | svgo | 2.8.4 |
| Low | GHSA-9m57-25v3-79x9 | golang.org/ | 0.52.0 |
| Low | GHSA-fc9h-whq2-v747 | elliptic | 6.6.0 |
| Low | GHSA-3v7f-55p6-f55p | picomatch | 2.3.2 |
| Low | GHSA-65pc-fj4g-8rjx | idna | 3.15 |
| Low | GHSA-mh29-5h37-fv8m | js-yaml | 3.14.2 |
| Low | GO-2023-2041 | stdlib | 1.20.8 |
| Low | GHSA-9wx4-h78v-vm56 | requests | 2.32.0 |
| Low | GHSA-7q8q-rj6j-mhjq | axios | 0.33.0 |
| Low | GO-2023-2043 | stdlib | 1.20.8 |
| Low | GO-2022-0515 | stdlib | 1.17.12 |
| Low | GO-2023-2186 | stdlib | 1.20.11 |
| Low | GHSA-h67p-54hq-rp68 | js-yaml | 3.15.0 |
| Low | GHSA-6v5v-wf23-fmfq | markdown-it | 14.2.0 |
| Low | DLA-4490-1 | openssl | 1.1.1w-0+deb11u5 |
| Low | GO-2024-3333 | golang.org/ | 0.33.0 |
| Low | GHSA-vhxf-7vqr-mrjg | dompurify | 3.2.4 |
| Low | GHSA-3jxr-9vmj-r5cp | brace-expansion | 1.1.16 |
| Low | GHSA-mwcw-c2x4-8c55 | nanoid | 3.3.8 |
| Low | GHSA-76mc-f452-cxcm | dompurify | 3.4.7 |
| Low | GO-2024-3105 | stdlib | 1.22.7 |
| Low | GO-2022-1095 | stdlib | 1.18.8 |
| Low | GHSA-5c6j-r48x-rmvq | serialize-javascript | 7.0.3 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 5.1.2latest | 4 years ago | frontend-v1.0.0beta-2 | 216122432 | 7,579 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.