webodm 1.1.2 Helm chart
helmforgeVerified publisherScored 21 Oct 2026
WebODM aerial imagery processing with persistent workers and optional GPU acceleration
Version 1.1.2 todayapp version 3.3.1 0Artifact Hub
webodm 1.1.2 deploys 4 container images: webodm/webodm_webapp, opendronemap/nodeodm, postgis/postgis and library/redis. Across the 3 measured, 1,008 findings — 7 critical, 23 high — 1 on CISA KEV. The highest contribution is GHSA-fjq5-5j5f-mvxh in commons-collections 3.2.1, fixed in 3.2.2. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| webodm/ | 3.3.1 | — | not yet scanned |
| opendronemap/ | 3.6.2 | 623163610 | 10,541 |
| postgis/ | 17-3.5 | 104690 | 1,916 |
| library/ | 8.10.2 | 00564 | 604 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
High findings
High: findings whose contribution to the Radar Score is 40–69. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| High | GHSA-4w82-r329-3q67 | jackson-databind | 2.6.7.4 |
| High | GHSA-cggj-fvv3-cqwv | jackson-databind | 2.6.7.5 |
| High | GHSA-p43x-xfjf-5jhr | jackson-databind | 2.7.9.7 |
| High | GHSA-q93h-jc49-78gg | jackson-databind | 2.7.9.7 |
| High | GHSA-w77p-8cfg-2x43 | slf4j-ext | 1.7.26 |
| High | GHSA-645p-88qh-w398 | jackson-databind | 2.6.7.3 |
| High | GHSA-rvwf-54qp-4r6v | snakeyaml | 1.26 |
| High | GHSA-6phf-73q6-gh87 | commons-beanutils | 1.9.4 |
| High | GHSA-h822-r4r5-v8jg | jackson-databind | 2.6.7.3 |
| High | GHSA-c8hm-7hpq-7jhg | jackson-databind | 2.6.7.3 |
| High | UBUNTU-CVE-2025-11001 | 7zip | no fix listed |
| High | GHSA-mph4-vhrx-mv67 | jackson-databind | 2.6.7.3 |
| High | GHSA-5ww9-j83m-q7qx | jackson-databind | 2.6.7.3 |
| High | GHSA-4gq5-ch57-c2mg | jackson-databind | 2.7.9.5 |
| High | GHSA-9gph-22xh-8x98 | jackson-databind | 2.6.7.5 |
| High | GHSA-gww7-p5w4-wrfv | jackson-databind | 2.6.7.4 |
| High | GHSA-6hgm-866r-3cjv | commons-collections | 3.2.2 |
| High | GHSA-h592-38cm-4ggp | jackson-databind | 2.6.7.3 |
| High | GHSA-6fpp-rgj9-8rwc | jackson-databind | 2.7.9.6 |
| High | GHSA-vmfg-rjjm-rjrj | logback-core | 1.2.0 |
| High | GHSA-vmfg-rjjm-rjrj | logback-classic | 1.2.0 |
| High | GHSA-wphj-fx3q-84ch | systeminformation | 5.27.14 |
| High | GHSA-5r5r-6hpj-8gg9 | jackson-databind | 2.9.10.8 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 1.1.2latest | today | 3.3.1 | 723214764 | 13,061 |
| 1.0.1 | 2 days ago | 3.3.0 | 10353961,351 | 22,885 |
| 1.0.0 | 7 days ago | 3.3.0 | 10353971,364 | 23,038 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.