StackRadar

openkm Helm chart

geek-cookbookVerified publisher

Scored 14 Sept 2026

OpenKM integrates all essential documents management, collaboration and an advanced search functionality into one easy to use solution.

Latest 4.2.0 3 years agodeploys tag 6.3.11 0Artifact Hub

openkm 4.2.0 deploys 1 container image: openkm/openkm-ce. Across them, 1,983 findings — 19 critical, 58 high — 8 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-beans 3.2.18.RELEASE, fixed in 5.2.20.RELEASE. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

27,94919584791,425

1,983 findings over 1 of 1 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
openkm/openkm-ce6.3.1119584791,42527,949

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

479 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumUBUNTU-CVE-2023-3138libx11@2:1.6.9-2ubuntu1.22:1.6.9-2ubuntu1.5
MediumUBUNTU-CVE-2022-2097openssl@1.1.1f-1ubuntu2.161.1.1f-1ubuntu2.fips.16
MediumUBUNTU-CVE-2024-33599glibc@2.31-0ubuntu9.92.31-0ubuntu9.16
MediumGHSA-9w3m-gqgf-c4p9snakeyaml@1.171.32
MediumUBUNTU-CVE-2023-6185libreoffice@1:6.4.7-0ubuntu0.20.04.41:6.4.7-0ubuntu0.20.04.9
MediumUBUNTU-CVE-2025-32911libsoup2.4@2.70.0-12.70.0-1ubuntu0.3
MediumUBUNTU-CVE-2024-47834gst-plugins-good1.0@1.16.3-0ubuntu1.11.16.3-0ubuntu1.3
MediumGHSA-x27m-9w8j-5vcwjettison@1.3.51.5.2
MediumUBUNTU-CVE-2025-13836python3.8@3.8.10-0ubuntu1~20.04.53.8.10-0ubuntu1~20.04.18+esm4
MediumUBUNTU-CVE-2026-6473postgresql-12@12.12-0ubuntu0.20.04.1no fix listed
MediumUBUNTU-CVE-2026-4176perl@5.30.0-9ubuntu0.2no fix listed
MediumUBUNTU-CVE-2024-0553gnutls28@3.6.13-2ubuntu1.73.6.13-2ubuntu1.10
MediumUBUNTU-CVE-2026-18924curl@7.68.0-1ubuntu2.13no fix listed
MediumUBUNTU-CVE-2024-21885xorg-server@2:1.20.13-1ubuntu1~20.04.32:1.20.13-1ubuntu1~20.04.14
MediumUBUNTU-CVE-2024-21886xorg-server@2:1.20.13-1ubuntu1~20.04.32:1.20.13-1ubuntu1~20.04.14
MediumUBUNTU-CVE-2026-40342firebird3.0@3.0.5.33220.ds4-1build2no fix listed
MediumUBUNTU-CVE-2022-32546imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.48:6.9.10.23+dfsg-2.1ubuntu11.9
MediumUBUNTU-CVE-2022-32545imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.48:6.9.10.23+dfsg-2.1ubuntu11.9
MediumUBUNTU-CVE-2022-32547imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.48:6.9.10.23+dfsg-2.1ubuntu11.9
MediumUBUNTU-CVE-2023-5678openssl@1.1.1f-1ubuntu2.161.1.1f-1ubuntu2.21
MediumUBUNTU-CVE-2024-7348postgresql-12@12.12-0ubuntu0.20.04.112.20-0ubuntu0.20.04.1
MediumUBUNTU-CVE-2025-55154imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.48:6.9.10.23+dfsg-2.1ubuntu11.11+esm3
MediumUBUNTU-CVE-2025-9230openssl@1.1.1f-1ubuntu2.161.1.1f-1ubuntu2.24+esm1
MediumUBUNTU-CVE-2021-20298openexr@2.3.0-6ubuntu0.5no fix listed
MediumUBUNTU-CVE-2026-11856curl@7.68.0-1ubuntu2.137.68.0-1ubuntu2.25+esm6
MediumGHSA-f263-c949-w85ggoogle-oauth-client@1.20.01.31.0
MediumUBUNTU-CVE-2017-20230perl@5.30.0-9ubuntu0.2no fix listed
MediumUBUNTU-CVE-2024-7006tiff@4.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.14
MediumGHSA-2wrp-6fg6-hmc5spring-web@3.2.18.RELEASE5.3.34
MediumUBUNTU-CVE-2021-4156libsndfile@1.0.28-7ubuntu0.11.0.28-7ubuntu0.3
MediumUBUNTU-CVE-2026-1761libsoup2.4@2.70.0-1no fix listed
MediumUBUNTU-CVE-2024-47774gst-plugins-good1.0@1.16.3-0ubuntu1.11.16.3-0ubuntu1.3
MediumGHSA-j288-q9x7-2f5vcommons-lang@2.6no fix listed
MediumGHSA-j288-q9x7-2f5vcommons-lang3@3.2.13.18.0
MediumGHSA-mx2h-hf7j-2x3psolr-core@3.1.05.1.0
MediumUBUNTU-CVE-2021-3671heimdal@7.7.0+dfsg-1ubuntu17.7.0+dfsg-1ubuntu1.1
MediumUBUNTU-CVE-2021-37750krb5@1.17-6ubuntu4.11.17-6ubuntu4.3
MediumUBUNTU-CVE-2020-25713raptor2@2.0.15-0ubuntu1.20.04.12.0.15-0ubuntu1.20.04.2
MediumGHSA-7rf3-mqpx-h7xgjettison@1.3.51.5.2
MediumGHSA-grr4-wv38-f68wjettison@1.3.51.5.2
MediumUBUNTU-CVE-2025-49794libxml2@2.9.10+dfsg-5ubuntu0.20.04.42.9.10+dfsg-5ubuntu0.20.04.10+esm1
MediumGHSA-8grg-q944-cch5hibernate-core@3.6.10.Final5.3.18
MediumUBUNTU-CVE-2019-6462cairo@1.16.0-4ubuntu11.16.0-4ubuntu1+esm1
MediumUBUNTU-CVE-2024-0229xorg-server@2:1.20.13-1ubuntu1~20.04.32:1.20.13-1ubuntu1~20.04.14
MediumUBUNTU-CVE-2025-30749openjdk-8@8u342-b07-0ubuntu1~20.048u462-ga~us1-0ubuntu2~20.04.2
MediumUBUNTU-CVE-2024-25062libxml2@2.9.10+dfsg-5ubuntu0.20.04.42.9.10+dfsg-5ubuntu0.20.04.7
MediumGHSA-v682-8vv8-vpwrtomcat-websocket@8.5.698.5.99
MediumUBUNTU-CVE-2019-6461cairo@1.16.0-4ubuntu11.16.0-4ubuntu1+esm1
MediumUBUNTU-CVE-2025-6021libxml2@2.9.10+dfsg-5ubuntu0.20.04.42.9.10+dfsg-5ubuntu0.20.04.10+esm1
MediumUBUNTU-CVE-2023-25434tiff@4.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.8

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
4.2.0latest3 years ago6.3.1119584791,42527,949

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/geek-cookbook/openkm.svg)](https://charts.stackradar.io/charts/geek-cookbook/openkm)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.