paperless-ngx 1.1.1 Helm chart

Name: paperless-ngx Helm chart 1.1.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 20 Oct 2026

Paperless-ngx document management system with OCR, PostgreSQL, Valkey, persistent media storage, and optional Tika/Gotenberg

Version 1.1.1 todayapp version 3.3.2 0Artifact Hub

paperless-ngx 1.1.1 deploys 4 container images: library/busybox, ghcr.io/paperless-ngx/paperless-ngx, library/postgres and valkey/valkey. Across them, 822 findings — 0 critical, 1 high. The highest contribution is DEBIAN-CVE-2023-34152 in imagemagick 8:7.1.1.43+dfsg1-1+deb13u12, with no fix listed. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

8,10201104717

822 findings over 4 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox×2	1.37	0000	0
ghcr.io/paperless-ngx/paperless-ngx	3.3.2	0178485	5,530
library/postgres	18.6-trixie	0020155	1,815
valkey/valkey	9.1.2	00677	757

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

583 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-107708	krb5@1.21.3-5+deb13u1	no fix listed
Low	GO-2026-6608	stdlib@go1.24.4	1.26.9
Low	DEBIAN-CVE-2026-84784	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3
Low	DEBIAN-CVE-2026-12064	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-8932	curl@8.14.1-2+deb13u5	no fix listed
Low	GO-2026-6607	stdlib@go1.24.4	1.26.9
Low	DEBIAN-CVE-2026-95619	gcc-14@14.2.0-19	no fix listed
Low	DEBIAN-CVE-2026-8286	curl@8.14.1-2+deb13u5	8.14.1-2+deb13u7
Low	DEBIAN-CVE-2026-107695	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2023-39329	openjpeg2@2.5.3-2.1~deb13u2	no fix listed
Low	DEBIAN-CVE-2023-37769	pixman@0.44.0-3	no fix listed
Low	GO-2025-4013	stdlib@go1.24.4	1.24.8
Low	DEBIAN-CVE-2026-6791	glibc@2.41-12+deb13u4	no fix listed
Low	GO-2026-6609	stdlib@go1.24.4	1.26.9
Low	DEBIAN-CVE-2026-88647	gnutls28@3.8.9-3+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-80230	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-5435	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-6385	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-107778	krb5@1.21.3-5+deb13u1	no fix listed
Low	GO-2025-3956	stdlib@go1.24.4	1.23.12
Low	GO-2026-4946	stdlib@go1.24.4	1.25.9
Low	DEBIAN-CVE-2022-24106	poppler@25.03.0-5+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-66039	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-86047	mariadb@1:11.8.6-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2025-8177	tiff@4.7.0-3+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-88373	libde265@1.0.15-1+deb13u2	no fix listed
Low	DEBIAN-CVE-2026-67217	cjson@1.7.18-3.1+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-64833	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-34980	cups@2.4.10-3+deb13u2	no fix listed
Low	DEBIAN-CVE-2025-70873	sqlite3@3.46.1-7+deb13u2	no fix listed
Low	DEBIAN-CVE-2026-109267	imagemagick@8:7.1.1.43+dfsg1-1+deb13u12	no fix listed
Low	DEBIAN-CVE-2025-61915	cups@2.4.10-3+deb13u2	no fix listed
Low	DEBIAN-CVE-2026-16554	cjson@1.7.18-3.1+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-19499	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-86420	imagemagick@8:7.1.1.43+dfsg1-1+deb13u12	no fix listed
Low	GO-2026-6613	stdlib@go1.24.4	1.26.9
Low	DEBIAN-CVE-2026-76642	util-linux@2.41.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-9547	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2025-8941	pam@1.7.0-5	no fix listed
Low	GO-2025-3849	stdlib@go1.24.4	1.23.12
Low	GO-2026-6605	stdlib@go1.24.4	1.26.9
Low	DEBIAN-CVE-2021-45346	sqlite3@3.46.1-7+deb13u2	no fix listed
Low	GO-2026-6610	stdlib@go1.24.4	1.26.9
Low	DEBIAN-CVE-2025-8176	tiff@4.7.0-3+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-109262	imagemagick@8:7.1.1.43+dfsg1-1+deb13u12	no fix listed
Low	DEBIAN-CVE-2026-107696	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-44173	mariadb@1:11.8.6-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-107822	mariadb@1:11.8.6-0+deb13u1	no fix listed
Low	RUSTSEC-2023-0071	rsa@0.9.10	no fix listed
Low	DEBIAN-CVE-2026-70632	ffmpeg@7:7.1.5-0+deb13u1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.1latest	today	3.3.2	01104717	8,102
1.0.0	yesterday	3.3.2	01104717	8,102

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/paperless-ngx.svg)](https://charts.stackradar.io/charts/helmforge/paperless-ngx)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.