wikijs 6.4.2 Helm chart
geek-cookbookVerified publisherScored 14 Sept 2026
Make documentation a joy to write using Wiki.js's beautiful and intuitive interface!
Version 6.4.2 4 years agoapp version version-2.5.201 3Artifact Hub
wikijs 6.4.2 deploys 1 container image: ghcr.io/linuxserver/wikijs. Across them, 354 findings — 0 critical, 15 high. The highest contribution is ALPINE-CVE-2022-25236 in expat 2.2.10-r1, fixed in 2.2.10-r4. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | version-2.5.201 | 015141198 | 5,946 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Medium findings
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-hgjh-723h-mx2j | url-parse | 1.5.8 |
| Medium | ALPINE-CVE-2022-27775 | curl | 7.79.1-r1 |
| Medium | GHSA-jqv5-7xpx-qj74 | sqlite3 | 5.1.5 |
| Medium | GHSA-74fj-2j2h-c42q | follow-redirects | 1.14.7 |
| Medium | ALPINE-CVE-2022-27782 | curl | 7.79.1-r2 |
| Medium | GHSA-crh6-fp67-6883 | xmldom | no fix listed |
| Medium | ALPINE-CVE-2022-40674 | expat | 2.2.10-r7 |
| Medium | GHSA-c2qf-rxjj-qqgw | semver | 5.7.2 |
| Medium | ALPINE-CVE-2022-27781 | curl | 7.79.1-r2 |
| Medium | GHSA-43fc-jf86-j433 | axios | 0.30.3 |
| Medium | ALPINE-CVE-2021-42380 | busybox | 1.32.1-r7 |
| Medium | ALPINE-CVE-2022-22576 | curl | 7.79.1-r1 |
| Medium | GHSA-r683-j2x4-v87g | node-fetch | 2.6.7 |
| Medium | GHSA-gx9m-whjm-85jf | dompurify | 2.5.0 |
| Medium | ALPINE-CVE-2022-27776 | curl | 7.79.1-r1 |
| Medium | ALPINE-CVE-2021-42379 | busybox | 1.32.1-r7 |
| Medium | ALPINE-CVE-2021-42381 | busybox | 1.32.1-r7 |
| Medium | ALPINE-CVE-2021-42385 | busybox | 1.32.1-r7 |
| Medium | ALPINE-CVE-2022-43680 | expat | 2.2.10-r8 |
| Medium | ALPINE-CVE-2021-42378 | busybox | 1.32.1-r7 |
| Medium | ALPINE-CVE-2021-42382 | busybox | 1.32.1-r7 |
| Medium | ALPINE-CVE-2021-42384 | busybox | 1.32.1-r7 |
| Medium | ALPINE-CVE-2021-42386 | busybox | 1.32.1-r7 |
| Medium | GHSA-qq89-hq3f-393p | tar | 4.4.18 |
| Medium | GHSA-4rch-2fh8-94vw | mysql2 | 3.9.7 |
| Medium | GHSA-q8pj-2vqx-8ggc | css-what | 5.0.1 |
| Medium | GHSA-265q-28rp-chq5 | node-uuid | 1.4.4 |
| Medium | GHSA-pq67-2wwv-3xjx | tar-fs | 2.1.2 |
| Medium | GHSA-qpfw-4m9x-rxx8 | @azure/ | 3.0.8 |
| Medium | GHSA-wf6x-7x77-mvgw | immutable | 3.8.3 |
| Medium | GHSA-rp65-9cf3-cjxr | nth-check | 2.0.1 |
| Medium | ALPINE-CVE-2022-25313 | expat | 2.2.10-r4 |
| Medium | GHSA-8v63-cqqc-6r2c | object-path | 0.11.8 |
| Medium | ALPINE-CVE-2021-41617 | openssh | 8.4_p1-r4 |
| Medium | GHSA-9qrh-qjmc-5w2p | sqlite3 | 5.0.3 |
| Medium | GHSA-p3vf-v8qc-cwcr | dompurify | 2.4.2 |
| Medium | ALPINE-CVE-2021-22959 | nodejs | 14.18.1-r0 |
| Medium | ALPINE-CVE-2021-42383 | busybox | 1.32.1-r7 |
| Medium | GHSA-rrc9-gqf8-8rwg | aws-sdk | 2.814.0 |
| Medium | GHSA-hffm-xvc3-vprc | simple-git | 3.36.0 |
| Medium | GHSA-f8q6-p94x-37v3 | minimatch | 3.0.5 |
| Medium | GHSA-3xq5-wjfh-ppjc | luxon | 1.28.1 |
| Medium | ALPINE-CVE-2022-35256 | nodejs | 14.20.1-r0 |
| Medium | GHSA-72xf-g2v4-qvf3 | tough-cookie | 4.1.3 |
| Medium | ALPINE-CVE-2022-2097 | openssl | 1.1.1q-r0 |
| Medium | GHSA-5955-9wpr-37jh | tar | 4.4.18 |
| Medium | GHSA-rc47-6667-2j5j | http-cache-semantics | 4.1.1 |
| Medium | ALPINE-CVE-2021-22960 | nodejs | 14.18.1-r0 |
| Medium | GHSA-grv7-fg5c-xmjg | braces | 3.0.3 |
| Medium | ALPINE-CVE-2021-22947 | curl | 7.79.0-r0 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 6.4.2latest | 4 years ago | version-2.5.201 | 015141198 | 5,946 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.