karakeep 1.2.10 Helm chart
helmforgeVerified publisherScored 20 Oct 2026
AI-powered bookmark manager with full-text search and web archiving
Version 1.2.10 yesterdayapp version 0.33.2 3Artifact Hub
karakeep 1.2.10 deploys 3 container images: ghcr.io/karakeep-app/karakeep, getmeili/meilisearch and ghcr.io/browserless/chromium. Across them, 1,272 findings — 1 critical, 0 high. The highest contribution is GO-2024-2687 in stdlib go1.20.7, fixed in 1.21.9. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | 0.33.2 | 10128704 | 8,727 |
| getmeili/ | v1.53.0 | 00918 | 358 |
| ghcr.io/ | v2.55.4 | 0023388 | 3,556 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-rgw5-rvv9-x895 | brace-expansion | 5.0.9 |
| Low | GO-2025-4006 | stdlib | 1.24.8 |
| Low | DEBIAN-CVE-2026-67216 | cjson | no fix listed |
| Low | GHSA-mh99-v99m-4gvg | brace-expansion | 5.0.8 |
| Low | DEBIAN-CVE-2026-58010 | glib2.0 | no fix listed |
| Low | DEBIAN-CVE-2026-58012 | glib2.0 | no fix listed |
| Low | DEBIAN-CVE-2026-7598 | libssh2 | 1.10.0-3+deb12u1 |
| Low | UBUNTU-CVE-2026-15308 | python3.12 | 3.12.3-1ubuntu0.17 |
| Low | UBUNTU-CVE-2026-82560 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-93990 | expat | 2.5.0-1+deb12u4 |
| Low | ALPINE-CVE-2026-54874 | openssl | 3.5.8-r0 |
| Low | UBUNTU-CVE-2026-54874 | openssl | 3.0.13-0ubuntu3.15 |
| Low | GO-2026-4870 | stdlib | 1.25.9 |
| Low | DEBIAN-CVE-2026-41992 | gzip | no fix listed |
| Low | GO-2026-4971 | stdlib | 1.25.10 |
| Low | GO-2026-4947 | stdlib | 1.25.9 |
| Low | UBUNTU-CVE-2026-48959 | perl | 5.38.2-3.2ubuntu0.4 |
| Low | GHSA-7r86-cg39-jmmj | minimatch | 9.0.7 |
| Low | DEBIAN-CVE-2026-32882 | libheif | no fix listed |
| Low | UBUNTU-CVE-2021-31879 | wget | no fix listed |
| Low | GO-2026-5037 | stdlib | 1.25.11 |
| Low | GHSA-w4gp-fjgq-3q4g | happy-dom | 20.8.9 |
| Low | GHSA-23hp-3jrh-7fpw | tar | 7.5.19 |
| Low | UBUNTU-CVE-2026-3833 | gnutls28 | 3.8.3-1.1ubuntu3.6+Fips1.2 |
| Low | GO-2026-6603 | stdlib | 1.26.9 |
| Low | GHSA-ch52-4w7c-c8xp | http-cache-semantics | no fix listed |
| Low | GO-2026-5972 | stdlib | 1.25.13 |
| Low | GO-2026-6088 | stdlib | 1.25.13 |
| Low | GO-2026-6089 | stdlib | 1.25.13 |
| Low | GO-2026-6090 | stdlib | 1.25.13 |
| Low | GO-2026-6611 | stdlib | 1.26.9 |
| Low | GHSA-wf93-45jw-7689 | pip | 26.1.2 |
| Low | UBUNTU-CVE-2026-8643 | python-pip | no fix listed |
| Low | GO-2026-5038 | stdlib | 1.25.11 |
| Low | DEBIAN-CVE-2026-41071 | libheif | no fix listed |
| Low | USN-8711-1 | libgcrypt20 | 1.10.3-2ubuntu0.2 |
| Low | GO-2026-6218 | stdlib | 1.25.13 |
| Low | DEBIAN-CVE-2026-56209 | aom | 3.6.0-1+deb12u3 |
| Low | GHSA-wh4c-j3r5-mjhp | @xmldom/ | 0.9.9 |
| Low | DEBIAN-CVE-2025-48965 | mbedtls | no fix listed |
| Low | DEBIAN-CVE-2026-33164 | libde265 | 1.0.11-1+deb12u3 |
| Low | GHSA-r292-9mhp-454m | tar | 7.5.21 |
| Low | DEBIAN-CVE-2026-25833 | mbedtls | no fix listed |
| Low | DEBIAN-CVE-2025-69720 | ncurses | no fix listed |
| Low | DEBIAN-CVE-2026-64832 | ffmpeg | no fix listed |
| Low | GO-2024-2610 | stdlib | 1.21.8 |
| Low | DEBIAN-CVE-2026-84384 | libheif | no fix listed |
| Low | DEBIAN-CVE-2026-84447 | libheif | no fix listed |
| Low | GHSA-23c5-xmqv-rm74 | minimatch | 9.0.7 |
| Low | UBUNTU-CVE-2026-86145 | pcre2 | no fix listed |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 1.2.11latest | today | 0.34.0 | — | — |
| 1.2.10 | yesterday | 0.33.2 | 101601,110 | 12,641 |
| 1.2.9 | 2 days ago | 0.33.2 | 101601,110 | 12,641 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.