wallabag 1.3.7 Helm chart

Name: wallabag Helm chart 1.3.7: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 27 Sept 2026

Wallabag self-hosted read-it-later application with PostgreSQL and optional Redis

Version 1.3.7 todayapp version 2.6.14 0Artifact Hub

wallabag 1.3.7 deploys 3 container images: library/busybox, wallabag/wallabag and library/postgres. Across them, 260 findings — 0 critical, 3 high. The highest contribution is ALPINE-CVE-2025-6965 in sqlite 3.44.2-r1, fixed in 3.44.2-r2. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

2,4640325232

260 findings over 3 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.37	0000	0
wallabag/wallabag	2.6.14	031199	1,148
library/postgres	18.6-trixie	0014133	1,316

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

215 distinct across the version’s images

Severity	Advisory	Package	Fixed in
High	ALPINE-CVE-2025-6965	sqlite@3.44.2-r1	3.44.2-r2
High	ALPINE-CVE-2018-18312	perl@5.38.5-r0	5.26.3-r0
High	ALPINE-CVE-2018-18311	perl@5.38.5-r0	5.26.3-r0
Medium	DEBIAN-CVE-2019-1010022	glibc@2.41-12+deb13u4	no fix listed
Medium	DEBIAN-CVE-2017-17740	openldap@2.6.10+dfsg-1	no fix listed
Medium	DEBIAN-CVE-2018-20796	glibc@2.41-12+deb13u4	no fix listed
Medium	DEBIAN-CVE-2015-3276	openldap@2.6.10+dfsg-1	no fix listed
Medium	DEBIAN-CVE-2019-1010023	glibc@2.41-12+deb13u4	no fix listed
Medium	DEBIAN-CVE-2019-9192	glibc@2.41-12+deb13u4	no fix listed
Medium	GHSA-25mq-v84q-4j7r	guzzlehttp/guzzle@5.3.4	6.5.8
Medium	DEBIAN-CVE-2018-5709	krb5@1.21.3-5+deb13u1	no fix listed
Medium	GHSA-f2wf-25xc-69c9	guzzlehttp/guzzle@5.3.4	6.5.7
Medium	GHSA-w248-ffj2-4v5q	guzzlehttp/guzzle@5.3.4	6.5.7
Medium	DEBIAN-CVE-2018-6829	libgcrypt20@1.11.0-7+deb13u1	no fix listed
Medium	GHSA-q559-8m2m-g699	guzzlehttp/guzzle@5.3.4	6.5.8
Medium	GHSA-cwmx-hcrq-mhc3	guzzlehttp/guzzle@5.3.4	6.5.6
Medium	ALPINE-CVE-2025-9230	openssl@3.1.8-r0	3.1.8-r1
Medium	DEBIAN-CVE-2011-3389	gnutls28@3.8.9-3+deb13u4	no fix listed
Medium	GHSA-7p85-w9px-jpjp	twig/twig@v3.11.3	3.26.0
Medium	GHSA-m7v2-7gxm-vc2v	symfony/monolog-bridge@v5.2.12	5.4.52
Medium	GHSA-2q52-x2ff-qgfr	twig/twig@v3.11.3	3.26.0
Medium	GHSA-3rg7-wf37-54rm	symfony/http-foundation@v4.4.49	5.4.50
Medium	DEBIAN-CVE-2024-26461	krb5@1.21.3-5+deb13u1	no fix listed
Medium	DEBIAN-CVE-2019-1010024	glibc@2.41-12+deb13u4	no fix listed
Medium	ALPINE-CVE-2025-9232	openssl@3.1.8-r0	3.1.8-r1
Medium	DEBIAN-CVE-2015-9019	libxslt@1.1.35-1.2+deb13u3	no fix listed
Medium	DEBIAN-CVE-2026-85091	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed
Medium	DEBIAN-CVE-2019-1010025	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-6653	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	GHSA-xx3c-qf5g-hc39	symfony/mailer@v4.4.49	5.4.52
Low	DEBIAN-CVE-2026-54411	pam@1.7.0-5	no fix listed
Low	DEBIAN-CVE-2026-82560	perl@5.40.1-6+deb13u1	no fix listed
Low	GHSA-6h46-9jf5-q59x	symfony/security-http@v4.4.50	5.4.53
Low	GHSA-ph86-p8f6-f9r2	symfony/security-http@v4.4.50	5.4.52
Low	DEBIAN-CVE-2026-6791	glibc@2.41-12+deb13u4	no fix listed
Low	GHSA-529h-vh3j-85hq	twig/twig@v3.11.3	3.27.0
Low	DEBIAN-CVE-2026-9538	perl@5.40.1-6+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-74860	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	GHSA-94g3-g5v7-q4jg	phpseclib/phpseclib@3.0.46	3.0.50
Low	DEBIAN-CVE-2024-2236	libgcrypt20@1.11.0-7+deb13u1	no fix listed
Low	GHSA-4qpc-3hr4-r2p4	symfony/yaml@v5.3.14	5.4.52
Low	GHSA-9frc-8383-795m	symfony/yaml@v5.3.14	5.4.52
Low	GHSA-qpmx-3rfj-7rhv	symfony/mime@v4.4.47	5.4.52
Low	DEBIAN-CVE-2025-69720	ncurses@6.5+20250216-2	no fix listed
Low	DEBIAN-CVE-2026-24882	gnupg2@2.4.7-21+deb13u1+b5	no fix listed
Low	GHSA-c2p3-7m5p-cv8x	symfony/yaml@v5.3.14	5.4.52
Low	DEBIAN-CVE-2020-15719	openldap@2.6.10+dfsg-1	no fix listed
Low	GHSA-2xf4-cg6j-vhgq	symfony/polyfill-intl-idn@v1.33.0	1.38.1
Low	GHSA-pr2w-4gpj-cpq4	twig/twig@v3.11.3	3.26.0
Low	GHSA-6qh9-h6wf-jgqc	symfony/cache@v5.4.46	5.4.52

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.3.7latest	today	2.6.14	0325232	2,464
1.3.6	2 days ago	2.6.14	0325232	2,464

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/wallabag.svg)](https://charts.stackradar.io/charts/helmforge/wallabag)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.