openproject 0.5.0 Helm chart

Name: openproject Helm chart 0.5.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

homeenterpriseinc

Scored 14 Sept 2026

Project Management Tool

Version 0.5.0 4 years agoapp version 12.0.2 1Artifact Hub

openproject 0.5.0 deploys 1 container image: openproject/community. Across them, 499 findings — 1 critical, 11 high — 2 on CISA KEV. The highest contribution is GHSA-754f-8gm6-c4r2 in ruby-saml 1.13.0, fixed in 1.18.0.

Radar Score

6,810111108379

499 findings over 1 of 1 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
openproject/community×5	12.0.2	111108379	6,810

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

379 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-vcc3-ghjq-m6fr	decode-uri-component@0.2.0	0.5.0
Low	GHSA-hj48-42vr-x3v9	path-parse@1.0.6	1.0.7
Low	GHSA-7g2v-jj9q-g3rg	rack@2.2.3	2.2.11
Low	DLA-3614-1	python3.7@3.7.3-2+deb10u3	3.7.3-2+deb10u6
Low	DSA-5122-1	gzip@1.9-3	1.9-3+deb10u1
Low	DSA-5123-1	xz-utils@5.2.4-1	5.2.4-1+deb10u1
Low	GHSA-9v8j-x534-2fx3	ruby-saml@1.13.0	1.18.0
Low	DSA-5073-1	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u2
Low	GHSA-vg3r-rm7w-2xgh	rexml@3.2.3.1	3.2.7
Low	GHSA-34x7-hfp2-rc4v	tar@4.4.13	7.5.7
Low	GO-2021-0263	stdlib@go1.17	1.16.10
Low	GHSA-mq66-vcfc-8246	mercurial@4.8.2	4.9
Low	GO-2023-1571	stdlib@go1.17	1.19.6
Low	GHSA-h8w8-99g7-qmvj	concurrent-ruby@1.1.9	1.3.7
Low	GHSA-2cw7-v8ff-p88r	oj@3.13.9	3.17.3
Low	GHSA-475m-ph3x-64gp	oj@3.13.9	3.17.3
Low	GHSA-9cv6-qcjw-4grx	oj@3.13.9	3.17.3
Low	GHSA-m578-w5vf-rfcm	oj@3.13.9	3.17.3
Low	GHSA-vwm4-62gf-x745	oj@3.13.9	3.17.3
Low	GHSA-mxw3-3hh2-x2mh	rack@2.2.3	2.2.22
Low	DLA-3288-1	curl@7.64.0-4+deb10u2	7.64.0-4+deb10u4
Low	GHSA-6xw4-3v39-52mm	rack@2.2.3	2.2.20
Low	DLA-3445-1	cpio@2.12+dfsg-9	2.12+dfsg-9+deb10u1
Low	GHSA-qpgp-93vx-g8v8	puma@5.5.2	7.2.1
Low	DSA-5087-1	cyrus-sasl2@2.1.27+dfsg-1+deb10u1	2.1.27+dfsg-1+deb10u2
Low	GHSA-rgw5-rvv9-x895	brace-expansion@1.1.11	1.1.18
Low	GO-2022-0435	stdlib@go1.17	1.17.9
Low	GHSA-f5x3-32g6-xq36	tar@4.4.13	6.2.1
Low	GHSA-f5ww-cq3m-q3g7	sanitize@6.0.0	6.0.2
Low	GO-2022-0288	stdlib@go1.17	1.16.12
Low	GHSA-hww2-5g85-429m	uri@0.10.0	0.10.0.3
Low	GHSA-rrfc-7g8p-99q8	rails-html-sanitizer@1.4.2	1.4.4
Low	DLA-3634-1	nss@2:3.42.1-1+deb10u3	2:3.42.1-1+deb10u7
Low	GHSA-vmwr-mc7x-5vc3	rexml@3.2.3.1	3.3.6
Low	GHSA-8cgq-6mh2-7j6v	rack@2.2.3	2.2.12
Low	GO-2023-2102	stdlib@go1.17	1.20.10
Low	GHSA-qffp-2rhf-9h96	tar@4.4.13	7.5.10
Low	GHSA-625h-95r8-8xpm	rack@2.2.3	2.2.18
Low	DSA-5142-1	libxml2@2.9.4+dfsg1-7+deb10u2	2.9.4+dfsg1-7+deb10u4
Low	GHSA-j4pr-3wm6-xx2r	uri@0.10.0	0.12.5
Low	GHSA-2x63-gw47-w4mm	websocket-driver@0.7.5	0.8.2
Low	GHSA-w9pc-fmgc-vxvw	rack@2.2.3	2.2.19
Low	DSA-5032-1	djvulibre@3.5.27.1-10	3.5.27.1-10+deb10u1
Low	GHSA-23hp-3jrh-7fpw	tar@4.4.13	7.5.19
Low	GHSA-hmw2-7cc7-3qxx	form-data@2.3.2	2.5.6
Low	GHSA-9h9g-93gc-623h	rails-html-sanitizer@1.4.2	1.4.4
Low	GHSA-3v45-f3vh-wg7m	oj@3.13.9	3.17.3
Low	GHSA-7r86-cg39-jmmj	minimatch@3.0.4	3.1.3
Low	GHSA-8qq5-rm4j-mr97	tar@4.4.13	7.5.3
Low	DLA-3363-1	pcre2@10.32-5	10.32-5+deb10u1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.5.0latest	4 years ago	12.0.2	111108379	6,810

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/homeenterpriseinc/openproject.svg)](https://charts.stackradar.io/charts/homeenterpriseinc/openproject)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.