openhab 1.2.1 Helm chart
helmforgeVerified publisherScored 19 Oct 2026
Production-ready openHAB home automation platform for Kubernetes
Version 1.2.1 todayapp version 5.2.3 3Artifact Hub
openhab 1.2.1 deploys 1 container image: openhab/openhab. Across them, 358 findings — 0 critical, 0 high. The highest contribution is DEBIAN-CVE-2019-1010022 in glibc 2.41-12+deb13u4, with no fix listed. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| openhab/ | 5.2.3 | 0043315 | 3,527 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2025-15224 | curl | no fix listed |
| Low | GHSA-m8rv-5g2x-5cg5 | undici | 7.29.0 |
| Low | DEBIAN-CVE-2026-48932 | nodejs | no fix listed |
| Low | DEBIAN-CVE-2026-58044 | nodejs | no fix listed |
| Low | DEBIAN-CVE-2026-6733 | node-undici | no fix listed |
| Low | GHSA-35p6-xmwp-9g52 | undici | 7.28.0 |
| Low | DEBIAN-CVE-2026-107888 | cups | no fix listed |
| Low | DEBIAN-CVE-2026-96674 | alsa-lib | no fix listed |
| Low | GHSA-w573-9ffj-6ff9 | netty-transport-native-epoll | 4.1.135.Final |
| Low | GHSA-w573-9ffj-6ff9 | netty-transport-native-kqueue | 4.1.135.Final |
| Low | DEBIAN-CVE-2026-96675 | alsa-lib | no fix listed |
| Low | DEBIAN-CVE-2026-39113 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2026-18540 | node-undici | no fix listed |
| Low | GHSA-r53p-7pc4-xj5r | undici | 7.29.1 |
| Low | DEBIAN-CVE-2026-11525 | node-undici | no fix listed |
| Low | GHSA-g8m3-5g58-fq7m | undici | 7.28.0 |
| Low | DEBIAN-CVE-2026-18508 | tar | no fix listed |
| Low | DEBIAN-CVE-2025-47279 | node-undici | no fix listed |
| Low | GHSA-cxrh-j4jr-qwg3 | undici | 7.5.0 |
| Low | GHSA-2gqq-gqf2-x968 | undici | 7.29.1 |
| Low | DEBIAN-CVE-2026-102474 | dash | no fix listed |
| Low | DEBIAN-CVE-2026-87876 | cups | no fix listed |
| Low | DEBIAN-CVE-2026-107655 | cups | no fix listed |
| Low | DEBIAN-CVE-2007-5686 | shadow | no fix listed |
| Low | DEBIAN-CVE-2026-18477 | tar | no fix listed |
| Low | DEBIAN-CVE-2026-55453 | cups | no fix listed |
| Low | DEBIAN-CVE-2026-112060 | rtmpdump | no fix listed |
| Low | DEBIAN-CVE-2026-112061 | rtmpdump | no fix listed |
| Low | DEBIAN-CVE-2026-95818 | glibc | no fix listed |
| Low | GHSA-8436-99hf-9mmv | undici | 7.29.1 |
| Low | DEBIAN-CVE-2026-86141 | libxml2 | no fix listed |
| Low | DEBIAN-CVE-2026-40228 | systemd | no fix listed |
| Low | DEBIAN-CVE-2026-107885 | cups | no fix listed |
| Low | DEBIAN-CVE-2026-107890 | cups | no fix listed |
| Low | DEBIAN-CVE-2026-105326 | cups | no fix listed |
| Low | DEBIAN-CVE-2026-53910 | diffutils | no fix listed |
| Low | DEBIAN-CVE-2026-55467 | cups | no fix listed |
| Low | DEBIAN-CVE-2026-107886 | cups | no fix listed |
| Low | DEBIAN-CVE-2026-6368 | glibc | no fix listed |
| Low | DEBIAN-CVE-2026-88648 | gnutls28 | no fix listed |
| Low | DEBIAN-CVE-2025-11961 | libpcap | no fix listed |
| Low | DEBIAN-CVE-2026-107928 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-107929 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-86409 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-86410 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-86414 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-87862 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-87863 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-87864 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-87865 | curl | no fix listed |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 1.2.1latest | today | 5.2.3 | 0043315 | 3,527 |
| 1.2.0 | 3 days ago | 5.2.1 | 0054407 | 4,617 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.