webodm 1.0.0 Helm chart
helmforgeVerified publisherScored 15 Oct 2026
WebODM aerial imagery processing with persistent workers and optional GPU acceleration
Version 1.0.0 2 days agoapp version 3.3.0 0Artifact Hub
webodm 1.0.0 deploys 4 container images: webodm/webodm_webapp, opendronemap/nodeodm, postgis/postgis and library/redis. Across them, 1,766 findings — 10 critical, 35 high — 1 on CISA KEV. The highest contribution is GHSA-fjq5-5j5f-mvxh in commons-collections 3.2.1, fixed in 3.2.2. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| webodm/ | 3.3.0 | 312182576 | 9,765 |
| opendronemap/ | 3.6.2 | 623162583 | 10,353 |
| postgis/ | 17-3.5 | 104689 | 1,904 |
| library/ | 8.10.2 | 00677 | 757 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-6g55-p6wh-862q | postcss | 8.5.12 |
| Low | UBUNTU-CVE-2024-32624 | hdf5 | no fix listed |
| Low | GHSA-f5x3-32g6-xq36 | tar | 6.2.1 |
| Low | UBUNTU-CVE-2023-29659 | libheif | 1.12.0-2ubuntu0.1~esm1 |
| Low | UBUNTU-CVE-2026-14266 | 7zip | no fix listed |
| Low | GHSA-vjc4-5qp5-m44j | pillow | 12.3.0 |
| Low | UBUNTU-CVE-2026-32882 | libheif | 1.12.0-2ubuntu0.1~esm3 |
| Low | UBUNTU-CVE-2026-107378 | cairo | no fix listed |
| Low | UBUNTU-CVE-2020-10812 | hdf5 | no fix listed |
| Low | GHSA-4vvj-4cpr-p986 | webpack | 5.94.0 |
| Low | GHSA-7r86-cg39-jmmj | minimatch | 9.0.7 |
| Low | GHSA-fpfv-jqm9-f5jm | numpy | 1.22 |
| Low | UBUNTU-CVE-2025-2177 | zvbi | 0.2.42-2ubuntu0.24.04.1~esm1 |
| Low | UBUNTU-CVE-2025-69419 | openssl | no fix listed |
| Low | UBUNTU-CVE-2025-69419 | nodejs | no fix listed |
| Low | GO-2026-5037 | stdlib | 1.25.11 |
| Low | GHSA-5wmx-573v-2qwq | markdown | 3.8.1 |
| Low | GHSA-52cp-r559-cp3m | js-yaml | 3.15.0 |
| Low | UBUNTU-CVE-2025-32990 | gnutls28 | no fix listed |
| Low | UBUNTU-CVE-2020-10811 | hdf5 | no fix listed |
| Low | GHSA-23hp-3jrh-7fpw | tar | 7.5.19 |
| Low | GHSA-xj96-63gp-2gmr | pillow | 12.3.0 |
| Low | UBUNTU-CVE-2026-3833 | gnutls28 | no fix listed |
| Low | UBUNTU-CVE-2023-0466 | nodejs | no fix listed |
| Low | UBUNTU-CVE-2020-10810 | hdf5 | no fix listed |
| Low | GO-2026-6603 | stdlib | 1.26.9 |
| Low | GHSA-ch52-4w7c-c8xp | http-cache-semantics | no fix listed |
| Low | GHSA-xqr8-7jwr-rhp7 | certifi | 2023.7.22 |
| Low | GO-2026-5972 | stdlib | 1.25.13 |
| Low | GO-2026-6088 | stdlib | 1.25.13 |
| Low | GO-2026-6089 | stdlib | 1.25.13 |
| Low | GO-2026-6090 | stdlib | 1.25.13 |
| Low | GO-2026-6611 | stdlib | 1.26.9 |
| Low | GHSA-wf93-45jw-7689 | pip | 26.1.2 |
| Low | UBUNTU-CVE-2026-8643 | python-pip | no fix listed |
| Low | GO-2023-1987 | stdlib | 1.19.12 |
| Low | GO-2026-5038 | stdlib | 1.25.11 |
| Low | GHSA-vxq7-64xx-v4gw | urllib3 | 2.8.0 |
| Low | UBUNTU-CVE-2026-97689 | python-pip | no fix listed |
| Low | UBUNTU-CVE-2026-97689 | python-urllib3 | no fix listed |
| Low | UBUNTU-CVE-2023-0465 | nodejs | no fix listed |
| Low | UBUNTU-CVE-2026-21637 | nodejs | no fix listed |
| Low | GO-2026-6218 | stdlib | 1.25.13 |
| Low | UBUNTU-CVE-2026-56209 | aom | 3.3.0-1ubuntu0.1+esm1 |
| Low | UBUNTU-CVE-2026-58016 | glib2.0 | 2.80.0-6ubuntu3.9 |
| Low | USN-8711-1 | libgcrypt20 | 1.9.4-3ubuntu3.3 |
| Low | UBUNTU-CVE-2026-31789 | openssl | no fix listed |
| Low | UBUNTU-CVE-2026-64832 | ffmpeg | 7:6.1.1-3ubuntu5+esm13 |
| Low | GHSA-2883-xcg3-v3hh | js-yaml | 3.15.2 |
| Low | GHSA-r292-9mhp-454m | tar | 7.5.21 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 1.0.1latest | today | 3.3.0 | — | — |
| 1.0.0 | 2 days ago | 3.3.0 | 10353961,325 | 22,779 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.