StackRadar

openkm Helm chart

geek-cookbookVerified publisher

Scored 15 Sept 2026

OpenKM integrates all essential documents management, collaboration and an advanced search functionality into one easy to use solution.

Latest 4.2.0 3 years agodeploys tag 6.3.11 0Artifact Hub

openkm 4.2.0 deploys 1 container image: openkm/openkm-ce. Across them, 1,994 findings18 critical, 59 high 8 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-beans 3.2.18.RELEASE, fixed in 5.2.20.RELEASE. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

28,03918594801,435

1,994 findings over 1 of 1 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
openkm/openkm-ce6.3.1118594801,43528,039

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

480 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumUBUNTU-CVE-2024-47599gst-plugins-good1.0@1.16.3-0ubuntu1.11.16.3-0ubuntu1.3
MediumUBUNTU-CVE-2024-47601gst-plugins-good1.0@1.16.3-0ubuntu1.11.16.3-0ubuntu1.3
MediumUBUNTU-CVE-2024-47603gst-plugins-good1.0@1.16.3-0ubuntu1.11.16.3-0ubuntu1.3
MediumGHSA-mf92-479x-3373spring-security-web@3.2.10.RELEASEno fix listed
MediumUBUNTU-CVE-2025-32049libsoup2.4@2.70.0-1no fix listed
MediumUBUNTU-CVE-2023-1667libssh@0.9.3-2ubuntu2.20.9.3-2ubuntu2.3
MediumGHSA-4qqf-hmv6-r6whwss4j@1.6.41.6.5
MediumUBUNTU-CVE-2026-16239postgresql-12@12.12-0ubuntu0.20.04.1no fix listed
MediumUBUNTU-CVE-2026-28387openssl@1.1.1f-1ubuntu2.161.1.1f-1ubuntu2.24+esm3
MediumUBUNTU-CVE-2015-9019libxslt@1.1.34-4ubuntu0.20.04.1no fix listed
MediumUBUNTU-CVE-2026-11940python3.8@3.8.10-0ubuntu1~20.04.5no fix listed
MediumUBUNTU-CVE-2025-32988gnutls28@3.6.13-2ubuntu1.73.6.13-2ubuntu1.12+esm1
MediumUBUNTU-CVE-2022-2058tiff@4.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.5
MediumUBUNTU-CVE-2024-47778gst-plugins-good1.0@1.16.3-0ubuntu1.11.16.3-0ubuntu1.3
MediumUBUNTU-CVE-2022-39408mysql-8.0@8.0.30-0ubuntu0.20.04.28.0.31-0ubuntu0.20.04.1
MediumUBUNTU-CVE-2022-39410mysql-8.0@8.0.30-0ubuntu0.20.04.28.0.31-0ubuntu0.20.04.1
MediumUBUNTU-CVE-2022-0530unzip@6.0-25ubuntu16.0-25ubuntu1.1
MediumUBUNTU-CVE-2025-50106openjdk-8@8u342-b07-0ubuntu1~20.048u462-ga~us1-0ubuntu2~20.04.2
MediumUBUNTU-CVE-2025-53101imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.48:6.9.10.23+dfsg-2.1ubuntu11.11+esm2
MediumUBUNTU-CVE-2025-32913libsoup2.4@2.70.0-12.70.0-1ubuntu0.3
MediumUBUNTU-CVE-2025-57803imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.48:6.9.10.23+dfsg-2.1ubuntu11.11+esm4
MediumGHSA-rmrm-75hp-phr2hibernate-validator@4.2.0.Final6.0.20.Final
MediumUBUNTU-CVE-2026-26740giflib@5.1.9-1no fix listed
MediumUBUNTU-CVE-2022-2056tiff@4.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.5
MediumUBUNTU-CVE-2022-2057tiff@4.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.5
MediumGHSA-9wxq-mwqw-8hhgjasperreports@6.4.37.0.7
MediumUBUNTU-CVE-2026-28389openssl@1.1.1f-1ubuntu2.161.1.1f-1ubuntu2.24+esm3
MediumUBUNTU-CVE-2026-28390openssl@1.1.1f-1ubuntu2.161.1.1f-1ubuntu2.24+esm3
MediumUBUNTU-CVE-2026-33845gnutls28@3.6.13-2ubuntu1.73.6.13-2ubuntu1.12+esm2
MediumUBUNTU-CVE-2026-2781nss@2:3.49.1-1ubuntu1.82:3.98-0ubuntu0.20.04.2+esm1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
4.2.0latest3 years ago6.3.1118594801,43528,039

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/geek-cookbook/openkm.svg)](https://charts.stackradar.io/charts/geek-cookbook/openkm)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 15 Sept 2026 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.