webodm 1.1.2 Helm chart
helmforgeVerified publisherScored 21 Oct 2026
WebODM aerial imagery processing with persistent workers and optional GPU acceleration
Version 1.1.2 todayapp version 3.3.1 0Artifact Hub
webodm 1.1.2 deploys 4 container images: webodm/webodm_webapp, opendronemap/nodeodm, postgis/postgis and library/redis. Across the 3 measured, 1,008 findings — 7 critical, 23 high — 1 on CISA KEV. The highest contribution is GHSA-fjq5-5j5f-mvxh in commons-collections 3.2.1, fixed in 3.2.2. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| webodm/ | 3.3.1 | — | not yet scanned |
| opendronemap/ | 3.6.2 | 623163610 | 10,541 |
| postgis/ | 17-3.5 | 104690 | 1,916 |
| library/ | 8.10.2 | 00564 | 604 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | GHSA-fjq5-5j5f-mvxh | commons-collections | 3.2.2 |
| Critical | GHSA-mjmj-j48q-9wg2 | snakeyaml | 2.0 |
| Critical | GHSA-2m8v-572m-ff2vKEV | systeminformation | 5.3.1 |
| Critical | GHSA-rfx6-vp9g-rh7v | jackson-databind | 2.7.9.2 |
| Critical | GHSA-p66x-2cv9-qq3v | commons-beanutils | 1.9.4 |
| Critical | GO-2024-2687 | stdlib | 1.21.9 |
| Critical | GHSA-qxxx-2pp7-5hmx | jackson-databind | 2.6.7.1 |
| High | GHSA-4w82-r329-3q67 | jackson-databind | 2.6.7.4 |
| High | GHSA-cggj-fvv3-cqwv | jackson-databind | 2.6.7.5 |
| High | GHSA-p43x-xfjf-5jhr | jackson-databind | 2.7.9.7 |
| High | GHSA-q93h-jc49-78gg | jackson-databind | 2.7.9.7 |
| High | GHSA-w77p-8cfg-2x43 | slf4j-ext | 1.7.26 |
| High | GHSA-645p-88qh-w398 | jackson-databind | 2.6.7.3 |
| High | GHSA-rvwf-54qp-4r6v | snakeyaml | 1.26 |
| High | GHSA-6phf-73q6-gh87 | commons-beanutils | 1.9.4 |
| High | GHSA-h822-r4r5-v8jg | jackson-databind | 2.6.7.3 |
| High | GHSA-c8hm-7hpq-7jhg | jackson-databind | 2.6.7.3 |
| High | UBUNTU-CVE-2025-11001 | 7zip | no fix listed |
| High | GHSA-mph4-vhrx-mv67 | jackson-databind | 2.6.7.3 |
| High | GHSA-5ww9-j83m-q7qx | jackson-databind | 2.6.7.3 |
| High | GHSA-4gq5-ch57-c2mg | jackson-databind | 2.7.9.5 |
| High | GHSA-9gph-22xh-8x98 | jackson-databind | 2.6.7.5 |
| High | GHSA-gww7-p5w4-wrfv | jackson-databind | 2.6.7.4 |
| High | GHSA-6hgm-866r-3cjv | commons-collections | 3.2.2 |
| High | GHSA-h592-38cm-4ggp | jackson-databind | 2.6.7.3 |
| High | GHSA-6fpp-rgj9-8rwc | jackson-databind | 2.7.9.6 |
| High | GHSA-vmfg-rjjm-rjrj | logback-classic | 1.2.0 |
| High | GHSA-vmfg-rjjm-rjrj | logback-core | 1.2.0 |
| High | GHSA-wphj-fx3q-84ch | systeminformation | 5.27.14 |
| High | GHSA-5r5r-6hpj-8gg9 | jackson-databind | 2.9.10.8 |
| Medium | GHSA-fqwf-pjwf-7vqv | jackson-databind | 2.6.7.4 |
| Medium | GHSA-qr7j-h6gg-jmgc | jackson-databind | 2.7.9.4 |
| Medium | GHSA-mx7p-6679-8g3q | jackson-databind | 2.6.7.3 |
| Medium | GHSA-gjmw-vf9h-g25v | jackson-databind | 2.6.7.3 |
| Medium | GHSA-f9xh-2qgp-cq57 | jackson-databind | 2.6.7.5 |
| Medium | GHSA-85cw-hj65-qqv9 | jackson-databind | 2.6.7.3 |
| Medium | GHSA-fmmc-742q-jg75 | jackson-databind | 2.6.7.3 |
| Medium | GHSA-94xh-2fmc-xf5j | systeminformation | 4.27.11 |
| Medium | GHSA-gwp4-hfv6-p7hw | jackson-databind | 2.6.7.3 |
| Medium | GHSA-m6x4-97wx-4q27 | jackson-databind | 2.9.10.8 |
| Medium | GHSA-2p57-rm9w-gvfp | ip | no fix listed |
| Medium | GHSA-f3j5-rmmp-3fc5 | jackson-databind | 2.8.11.5 |
| Medium | GHSA-r3gr-cxrf-hg25 | jackson-databind | 2.9.10.8 |
| Medium | GHSA-h3cw-g4mq-c5x2 | jackson-databind | 2.9.10.6 |
| Medium | GHSA-5949-rw7g-wx7w | jackson-databind | 2.6.7.5 |
| Medium | GHSA-qjw2-hr98-qgfh | jackson-databind | 2.6.7.5 |
| Medium | GHSA-w3f4-3q6j-rh82 | jackson-databind | 2.7.9.5 |
| Medium | GHSA-wh8g-3j2c-rqj5 | jackson-databind | 2.9.10.8 |
| Medium | GHSA-fmj5-wv96-r2ch | httpclient | 4.3.6 |
| Medium | GHSA-cjjf-94ff-43w7 | jackson-databind | 2.7.9.4 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 1.1.2latest | today | 3.3.1 | 723214764 | 13,061 |
| 1.0.1 | 2 days ago | 3.3.0 | 10353961,351 | 22,885 |
| 1.0.0 | 7 days ago | 3.3.0 | 10353971,364 | 23,038 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.