StackRadar

openkm Helm chart

geek-cookbookVerified publisher

Scored 15 Sept 2026

OpenKM integrates all essential documents management, collaboration and an advanced search functionality into one easy to use solution.

Latest 4.2.0 3 years agodeploys tag 6.3.11 0Artifact Hub

openkm 4.2.0 deploys 1 container image: openkm/openkm-ce. Across them, 1,994 findings — 18 critical, 59 high — 8 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-beans 3.2.18.RELEASE, fixed in 5.2.20.RELEASE. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

28,03918594801,435

1,994 findings over 1 of 1 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
openkm/openkm-ce6.3.1118594801,43528,039

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

1,435 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowUBUNTU-CVE-2024-20968mysql-8.0@8.0.30-0ubuntu0.20.04.28.0.35-0ubuntu0.20.04.1
LowUBUNTU-CVE-2026-50260xorg-server@2:1.20.13-1ubuntu1~20.04.3no fix listed
LowUBUNTU-CVE-2026-50261xorg-server@2:1.20.13-1ubuntu1~20.04.3no fix listed
LowUBUNTU-CVE-2026-47064mysql-8.0@8.0.30-0ubuntu0.20.04.2no fix listed
LowUBUNTU-CVE-2026-8368libwww-perl@6.43-1no fix listed
LowUBUNTU-CVE-2025-49175xorg-server@2:1.20.13-1ubuntu1~20.04.32:1.20.13-1ubuntu1~20.04.20+esm1
LowUBUNTU-CVE-2023-38559ghostscript@9.50~dfsg-5ubuntu4.59.50~dfsg-5ubuntu4.9
LowUBUNTU-CVE-2025-50952openjpeg2@2.3.1-1ubuntu4.20.04.12.3.1-1ubuntu4.20.04.4+esm1
LowUBUNTU-CVE-2026-24401avahi@0.7-4ubuntu7.10.7-4ubuntu7.3+esm2
LowUBUNTU-CVE-2026-46523imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.4no fix listed
LowUBUNTU-CVE-2021-3598openexr@2.3.0-6ubuntu0.52.3.0-6ubuntu0.5+esm1
LowUBUNTU-CVE-2023-0800tiff@4.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.8
LowUBUNTU-CVE-2023-0801tiff@4.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.8
LowUBUNTU-CVE-2023-0802tiff@4.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.8
LowUBUNTU-CVE-2023-0803tiff@4.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.8
LowUBUNTU-CVE-2023-0804tiff@4.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.8
LowUBUNTU-CVE-2026-1965curl@7.68.0-1ubuntu2.137.68.0-1ubuntu2.25+esm3
LowUBUNTU-CVE-2025-3576krb5@1.17-6ubuntu4.11.17-6ubuntu4.11
LowUBUNTU-CVE-2026-32636imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.48:6.9.10.23+dfsg-2.1ubuntu11.11+esm9
LowUBUNTU-CVE-2022-4645tiff@4.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.6
LowUBUNTU-CVE-2023-0799tiff@4.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.8
LowUBUNTU-CVE-2025-50085mysql-8.0@8.0.30-0ubuntu0.20.04.28.0.43-0ubuntu0.20.04.1+esm1
LowGHSA-xvr9-35cr-46v9mariadb-java-client@2.2.52.7.14
LowUBUNTU-CVE-2025-68973gnupg2@2.2.19-3ubuntu2.22.2.19-3ubuntu2.5+esm1
LowUBUNTU-CVE-2026-11979libxml2@2.9.10+dfsg-5ubuntu0.20.04.4no fix listed
LowUBUNTU-CVE-2026-50264xorg-server@2:1.20.13-1ubuntu1~20.04.3no fix listed
LowUBUNTU-CVE-2023-2908tiff@4.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.9
LowUBUNTU-CVE-2026-7168curl@7.68.0-1ubuntu2.137.68.0-1ubuntu2.25+esm5
LowUBUNTU-CVE-2023-0795tiff@4.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.8
LowUBUNTU-CVE-2023-0796tiff@4.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.8
LowUBUNTU-CVE-2023-0797tiff@4.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.8
LowUBUNTU-CVE-2023-0798tiff@4.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.8
LowUBUNTU-CVE-2023-25433tiff@4.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.9
LowUBUNTU-CVE-2022-3821systemd@245.4-4ubuntu3.17245.4-4ubuntu3.20
LowUBUNTU-CVE-2025-12818postgresql-12@12.12-0ubuntu0.20.04.1no fix listed
LowUBUNTU-CVE-2026-86140libxml2@2.9.10+dfsg-5ubuntu0.20.04.4no fix listed
LowGHSA-mq64-j8f9-9gcjspring-webmvc@3.2.18.RELEASEno fix listed
LowUBUNTU-CVE-2024-21011openjdk-8@8u342-b07-0ubuntu1~20.048u412-ga-1~20.04.1
LowUBUNTU-CVE-2023-26966tiff@4.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.9
LowUBUNTU-CVE-2023-21843openjdk-8@8u342-b07-0ubuntu1~20.048u362-ga-0ubuntu1~20.04.1
LowUBUNTU-CVE-2026-3099libsoup2.4@2.70.0-1no fix listed
LowUBUNTU-CVE-2026-25986imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.48:6.9.10.23+dfsg-2.1ubuntu11.11+esm8
LowUBUNTU-CVE-2025-15367python3.8@3.8.10-0ubuntu1~20.04.53.8.10-0ubuntu1~20.04.18+esm6
LowUBUNTU-CVE-2026-59847libssh@0.9.3-2ubuntu2.2no fix listed
LowUBUNTU-CVE-2026-68516openexr@2.3.0-6ubuntu0.5no fix listed
LowUBUNTU-CVE-2024-33869ghostscript@9.50~dfsg-5ubuntu4.59.50~dfsg-5ubuntu4.12
LowUBUNTU-CVE-2026-3783curl@7.68.0-1ubuntu2.137.68.0-1ubuntu2.25+esm3
LowUBUNTU-CVE-2026-4873curl@7.68.0-1ubuntu2.13no fix listed
LowUBUNTU-CVE-2025-30704mysql-8.0@8.0.30-0ubuntu0.20.04.28.0.42-0ubuntu0.20.04.1
LowUBUNTU-CVE-2023-39804tar@1.30+dfsg-7ubuntu0.20.04.21.30+dfsg-7ubuntu0.20.04.4

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
4.2.0latest3 years ago6.3.1118594801,43528,039

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/geek-cookbook/openkm.svg)](https://charts.stackradar.io/charts/geek-cookbook/openkm)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 15 Sept 2026 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.