StackRadar

openkm Helm chart

geek-cookbookVerified publisher

Scored 14 Sept 2026

OpenKM integrates all essential documents management, collaboration and an advanced search functionality into one easy to use solution.

Latest 4.2.0 3 years agodeploys tag 6.3.11 0Artifact Hub

openkm 4.2.0 deploys 1 container image: openkm/openkm-ce. Across them, 1,983 findings — 19 critical, 58 high — 8 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-beans 3.2.18.RELEASE, fixed in 5.2.20.RELEASE. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

27,94919584791,425

1,983 findings over 1 of 1 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
openkm/openkm-ce6.3.1119584791,42527,949

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

479 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumUBUNTU-CVE-2023-0361gnutls28@3.6.13-2ubuntu1.73.6.13-2ubuntu1.8
MediumGHSA-fg3j-q579-v8x4pdfbox@2.0.132.0.24
MediumGHSA-c4r9-r8fh-9vj2snakeyaml@1.171.31
MediumUBUNTU-CVE-2026-3085gst-plugins-good1.0@1.16.3-0ubuntu1.1no fix listed
MediumUBUNTU-CVE-2024-47541gst-plugins-base1.0@1.16.3-0ubuntu1.11.16.3-0ubuntu1.4
MediumUBUNTU-CVE-2026-42009gnutls28@3.6.13-2ubuntu1.73.6.13-2ubuntu1.12+esm2
MediumUBUNTU-CVE-2024-56171libxml2@2.9.10+dfsg-5ubuntu0.20.04.42.9.10+dfsg-5ubuntu0.20.04.9
MediumUBUNTU-CVE-2023-0767nss@2:3.49.1-1ubuntu1.82:3.49.1-1ubuntu1.9
MediumGHSA-6vqp-h455-42mrpdfbox@2.0.132.0.23
MediumGHSA-78wr-2p64-hpwjcommons-io@2.42.14.0
MediumUBUNTU-CVE-2025-59375expat@2.2.9-1ubuntu0.42.2.9-1ubuntu0.8+esm1
MediumUBUNTU-CVE-2024-8176expat@2.2.9-1ubuntu0.4no fix listed
MediumUBUNTU-CVE-2026-3083gst-plugins-good1.0@1.16.3-0ubuntu1.1no fix listed
MediumUBUNTU-CVE-2025-27836ghostscript@9.50~dfsg-5ubuntu4.59.50~dfsg-5ubuntu4.15
MediumUBUNTU-CVE-2024-45492expat@2.2.9-1ubuntu0.42.2.9-1ubuntu0.7
MediumUBUNTU-CVE-2025-9900tiff@4.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.14+esm2
MediumGHSA-9gp4-qrff-c648bcprov-jdk15on@1.521.56
MediumGHSA-v33x-prhc-gph5spring-security-cas@3.2.10.RELEASE4.2.13.RELEASE
MediumGHSA-v33x-prhc-gph5spring-security-core@3.2.10.RELEASE4.2.13
MediumUBUNTU-CVE-2022-40897setuptools@45.2.0-145.2.0-1ubuntu0.1
MediumUBUNTU-CVE-2022-46285libxpm@1:3.5.12-11:3.5.12-1ubuntu0.20.04.1
MediumGHSA-r9ch-m4fh-fc7qbcprov-jdk15on@1.521.56
MediumUBUNTU-CVE-2026-33846gnutls28@3.6.13-2ubuntu1.73.6.13-2ubuntu1.12+esm2
MediumUBUNTU-CVE-2024-0727openssl@1.1.1f-1ubuntu2.161.1.1f-1ubuntu2.21
MediumGHSA-f3jh-qvm4-mg39spring-security-core@3.2.10.RELEASE5.7.12
MediumUBUNTU-CVE-2022-48541imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.48:6.9.10.23+dfsg-2.1ubuntu11.9+esm1
MediumUBUNTU-CVE-2023-6186libreoffice@1:6.4.7-0ubuntu0.20.04.41:6.4.7-0ubuntu0.20.04.9
MediumUBUNTU-CVE-2022-44617libxpm@1:3.5.12-11:3.5.12-1ubuntu0.20.04.1
MediumUBUNTU-CVE-2023-21930openjdk-8@8u342-b07-0ubuntu1~20.048u372-ga~us1-0ubuntu1~20.04
MediumUBUNTU-CVE-2020-35492cairo@1.16.0-4ubuntu11.16.0-4ubuntu1+esm1
MediumUBUNTU-CVE-2025-7424libxslt@1.1.34-4ubuntu0.20.04.11.1.34-4ubuntu0.20.04.3+esm2
MediumUBUNTU-CVE-2026-4424libarchive@3.4.0-2ubuntu1.23.4.0-2ubuntu1.5+esm2
MediumGHSA-98wm-3w3q-mw94snakeyaml@1.171.31
MediumUBUNTU-CVE-2021-44758heimdal@7.7.0+dfsg-1ubuntu17.7.0+dfsg-1ubuntu1.3
MediumUBUNTU-CVE-2006-10003libxml-parser-perl@2.46-1no fix listed
MediumUBUNTU-CVE-2022-43552curl@7.68.0-1ubuntu2.137.68.0-1ubuntu2.15
MediumUBUNTU-CVE-2022-3551xorg-server@2:1.20.13-1ubuntu1~20.04.32:1.20.13-1ubuntu1~20.04.4
MediumUBUNTU-CVE-2025-53367djvulibre@3.5.27.1-14ubuntu0.13.5.27.1-14ubuntu0.1+esm1
MediumUBUNTU-CVE-2022-1210jbigkit@2.1-3.1build12.1-3.1ubuntu0.20.04.1
MediumGHSA-7grw-6pjh-jpc9pdfbox@2.0.132.0.24
MediumUBUNTU-CVE-2024-38428wget@1.20.3-1ubuntu21.20.3-1ubuntu2.1
MediumUBUNTU-CVE-2018-10126libjpeg-turbo@2.0.3-0ubuntu1.20.04.1no fix listed
MediumUBUNTU-CVE-2025-8714postgresql-12@12.12-0ubuntu0.20.04.1no fix listed
MediumGHSA-3w37-5p3p-jv92cxf-core@3.2.63.4.10
MediumGHSA-673j-qm5f-xpv8postgresql@42.2.842.3.3
MediumUBUNTU-CVE-2023-26604systemd@245.4-4ubuntu3.17no fix listed
MediumUBUNTU-CVE-2023-6277tiff@4.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.12
MediumGHSA-2h3j-m7gr-25xjpdfbox@2.0.132.0.23
MediumUBUNTU-CVE-2025-58060cups@2.3.1-9ubuntu1.22.3.1-9ubuntu1.9+esm1
MediumUBUNTU-CVE-2023-34241cups@2.3.1-9ubuntu1.22.3.1-9ubuntu1.4

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
4.2.0latest3 years ago6.3.1119584791,42527,949

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/geek-cookbook/openkm.svg)](https://charts.stackradar.io/charts/geek-cookbook/openkm)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.