wallabag 1.3.8 Helm chart
helmforgeVerified publisherScored 7 Oct 2026
Wallabag self-hosted read-it-later application with PostgreSQL and optional Redis
Version 1.3.8 todayapp version 2.6.14 0Artifact Hub
wallabag 1.3.8 deploys 3 container images: library/busybox, wallabag/wallabag and library/postgres. Across them, 266 findings — 0 critical, 3 high. The highest contribution is ALPINE-CVE-2025-6965 in sqlite 3.44.2-r1, fixed in 3.44.2-r2. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| library/ | 1.37 | 0000 | 0 |
| wallabag/ | 2.6.14 | 031695 | 1,382 |
| library/ | 18.6-trixie | 0019133 | 1,572 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2025-68972 | gnupg2 | no fix listed |
| Low | DEBIAN-CVE-2022-3219 | gnupg2 | no fix listed |
| Low | DEBIAN-CVE-2026-102474 | dash | no fix listed |
| Low | DEBIAN-CVE-2025-11731 | libxslt | no fix listed |
| Low | DEBIAN-CVE-2007-5686 | shadow | no fix listed |
| Low | DEBIAN-CVE-2026-18477 | tar | no fix listed |
| Low | ALPINE-CVE-2025-12817 | postgresql16 | 16.11-r0 |
| Low | ALPINE-CVE-2025-46394 | busybox | 1.36.1-r21 |
| Low | DEBIAN-CVE-2026-95818 | glibc | no fix listed |
| Low | DEBIAN-CVE-2026-86141 | libxml2 | no fix listed |
| Low | DEBIAN-CVE-2026-105712 | gnupg2 | no fix listed |
| Low | GO-2026-5024 | golang.org/ | 0.44.0 |
| Low | DEBIAN-CVE-2026-40228 | systemd | no fix listed |
| Low | GHSA-p42q-9prx-q5wq | twig/ | 3.27.0 |
| Low | DEBIAN-CVE-2026-57062 | gnupg2 | no fix listed |
| Low | DEBIAN-CVE-2026-53910 | diffutils | no fix listed |
| Low | GHSA-vcc8-phrv-43wj | twig/ | 3.26.0 |
| Low | ALPINE-CVE-2024-58251 | busybox | 1.36.1-r21 |
| Low | GHSA-2g2g-8p8h-fgwm | twig/ | 3.26.0 |
| Low | GO-2026-4602 | stdlib | 1.25.8 |
| Low | DEBIAN-CVE-2026-6368 | glibc | no fix listed |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 1.3.8latest | today | 2.6.14 | 0335228 | 2,954 |
| 1.3.7 | 5 days ago | 2.6.14 | 0335242 | 3,071 |
| 1.3.6 | 11 days ago | 2.6.14 | 0335242 | 3,071 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.