StackRadar

mealie Helm chart

geek-cookbookVerified publisher

Scored 14 Sept 2026

Mealie is a self hosted recipe manager and meal planner with a RestAPI backend and a reactive frontend application built in Vue for a pleasant user experience for the whole family.

Latest 5.1.2 4 years agodeploys tag frontend-v1.0.0beta-2 2Artifact Hub

mealie 5.1.2 deploys 2 container images: hkotel/mealie. Across them, 573 findings — 2 critical, 16 high — 6 on CISA KEV. The highest contribution is GHSA-j7hp-h8jx-5ppr in pillow 8.4.0, fixed in 10.0.1. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

7,579216122432

573 findings over 2 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
hkotel/mealiefrontend-v1.0.0beta-2012722994,842
hkotel/mealieapi-v1.0.0beta-224501332,737

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

573 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumGHSA-fjxv-7rqg-78g4form-data@4.0.04.0.4
MediumGHSA-69cg-p879-7622golang.org/x/net@v0.0.0-20210913180222-943fd674d43e0.0.0-20220906165146-f3363e06e74c
MediumGHSA-wp53-j4wj-2cfgpython-multipart@0.0.50.0.22
MediumGHSA-4wf5-vphf-c2xcterser@5.10.05.14.2
MediumGHSA-cx63-2mw6-8hw5setuptools@58.1.070.0.0
MediumGHSA-38jv-5279-wg99urllib3@1.26.92.6.3
MediumGHSA-74fj-2j2h-c42qfollow-redirects@1.14.31.14.7
MediumGHSA-p77j-4mvh-x3m3google.golang.org/grpc@v1.39.01.79.3
MediumGHSA-c2qf-rxjj-qqgwsemver@6.3.06.3.1
MediumGHSA-43fc-jf86-j433axios@0.21.30.30.3
MediumDSA-5218-1zlib@1:1.2.11.dfsg-2+deb11u11:1.2.11.dfsg-2+deb11u2
MediumGHSA-qwmp-2cf2-g9g6wheel@0.37.10.38.1
MediumGHSA-r683-j2x4-v87gnode-fetch@2.6.62.6.7
MediumGHSA-r9hx-vwmv-q579setuptools@58.1.065.5.1
MediumGHSA-gx9m-whjm-85jfdompurify@2.3.82.5.0
MediumPYSEC-2025-49setuptools@58.1.078.1.1
MediumALPINE-CVE-2023-3446openssl@1.1.1n-r01.1.1u-r2
MediumGHSA-hhq3-ff78-jv3gloader-utils@2.0.22.0.4
MediumGHSA-j9fq-vwqv-2fm2parse-url@6.0.08.1.0
MediumGHSA-3rfm-jhwj-7488loader-utils@2.0.22.0.4
MediumGHSA-rp65-9cf3-cjxrnth-check@1.0.22.0.1
MediumGHSA-v973-fxgf-6xhpmako@1.2.01.2.2
MediumGHSA-3f63-hfp8-52jqpillow@8.4.010.2.0
MediumGHSA-p3vf-v8qc-cwcrdompurify@2.3.82.4.2
MediumGHSA-xrjj-mj9h-534mgolang.org/x/net@v0.0.0-20210913180222-943fd674d43e0.4.0
MediumGHSA-f8q6-p94x-37v3minimatch@3.0.43.0.5
MediumGHSA-fhg7-m89q-25r3ua-parser-js@0.7.310.7.33
MediumGHSA-pw3c-h7wp-cvhxpillow@8.4.09.0.0
MediumGHSA-72xf-g2v4-qvf3tough-cookie@4.0.04.1.3
MediumALPINE-CVE-2022-2097openssl@1.1.1n-r01.1.1q-r0
MediumGHSA-rc47-6667-2j5jhttp-cache-semantics@4.1.04.1.1
MediumGHSA-j8r2-6x86-q33qrequests@2.27.12.31.0
MediumALPINE-CVE-2023-5678openssl@1.1.1n-r01.1.1w-r1
MediumGHSA-69ch-w2m2-3vjpgolang.org/x/text@v0.3.70.3.8
MediumPYSEC-2023-192urllib3@1.26.92.0.6
MediumGHSA-2jv5-9r88-3w3ppython-multipart@0.0.50.0.7
MediumPYSEC-2024-38fastapi@0.78.00.109.1
MediumGHSA-grv7-fg5c-xmjgbraces@3.0.23.0.3
MediumPYSEC-2024-60idna@3.33.7
MediumGHSA-3h5v-q93c-6h6qws@8.6.08.17.1
MediumGHSA-pjwm-pj3p-43mvaxios@0.21.30.32.0
MediumGHSA-74m5-2c7w-9w3xstarlette@0.19.10.25.0
MediumGHSA-8r3f-844c-mc37google.golang.org/protobuf@v1.27.11.33.0
MediumGHSA-9v9h-cgj8-h64pcryptography@37.0.242.0.2
MediumGHSA-m2vv-5vj5-2hm7pillow@8.4.09.2.0
MediumGHSA-xrcv-f9gm-v42cpillow@8.4.09.0.0
MediumGHSA-9xgj-fcgf-x6mwpoetry@1.1.61.1.9
MediumGHSA-jr5f-v2jv-69x6axios@0.21.30.30.0
MediumGHSA-95m3-7q98-8xr5sha.js@2.4.112.4.12
MediumGHSA-x527-x647-q7gggolang.org/x/crypto@v0.0.0-20210915214749-c084706c22720.52.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
5.1.2latest4 years agofrontend-v1.0.0beta-22161224327,579

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/geek-cookbook/mealie.svg)](https://charts.stackradar.io/charts/geek-cookbook/mealie)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.