StackRadar

openproject Helm chart

homeenterpriseinc

Scored 14 Sept 2026

Project Management Tool

Latest 0.5.0 4 years agoapp version 12.0.2 1Artifact Hub

openproject 0.5.0 deploys 1 container image: openproject/community. Across them, 499 findings1 critical, 11 high 2 on CISA KEV. The highest contribution is GHSA-754f-8gm6-c4r2 in ruby-saml 1.13.0, fixed in 1.18.0.

Radar Score

6,810111108379

499 findings over 1 of 1 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
openproject/community×512.0.21111083796,810

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

499 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumGHSA-3x8r-x6xp-q4vmloofah@2.12.02.19.1
MediumGHSA-9xrj-h377-fr87activestorage@6.1.4.17.2.3.1
MediumGO-2022-0273stdlib@go1.171.16.8
MediumGHSA-p782-xgp4-8hr8golang.org/x/sys@v0.0.0-20200501145240-bc7a7d42d5c30.0.0-20220412211240-33da011f77ad
MediumGHSA-73f9-jhhh-hr5mactivestorage@6.1.4.17.2.3.1
MediumDLA-3530-1openssl@1.1.1d-0+deb10u71.1.1n-0+deb10u6
MediumDLA-3213-1krb5@1.17-3+deb10u31.17-3+deb10u5
MediumGHSA-2j26-frm8-cmj9activesupport@6.1.4.17.2.3.1
MediumGHSA-r46p-8f7g-vvvgactivestorage@6.1.4.17.2.3.1
MediumGHSA-mm33-5vfq-3mm3actionpack@6.1.4.16.1.5.1
MediumDLA-3613-1curl@7.64.0-4+deb10u27.64.0-4+deb10u7
MediumGHSA-p543-xpfm-54cprack@2.2.32.2.19
MediumGHSA-wpv5-97wm-hp9crack@2.2.32.2.19
MediumGHSA-ch3h-j2vf-95pvactionview@6.1.4.16.1.5.1
MediumDLA-3175-1python3.7@3.7.3-2+deb10u33.7.3-2+deb10u4
MediumGHSA-3xgq-45jj-v275cross-spawn@5.1.06.0.6
MediumGO-2022-1144stdlib@go1.171.18.9
MediumGHSA-pfrx-2q88-qq97got@6.7.111.8.5
MediumDLA-3152-1glibc@2.28-102.28-10+deb10u2
MediumGHSA-3ppc-4f35-3m26minimatch@3.0.43.1.3
LowGHSA-vcc3-ghjq-m6frdecode-uri-component@0.2.00.5.0
LowGHSA-hj48-42vr-x3v9path-parse@1.0.61.0.7
LowGHSA-7g2v-jj9q-g3rgrack@2.2.32.2.11
LowDLA-3614-1python3.7@3.7.3-2+deb10u33.7.3-2+deb10u6
LowDSA-5122-1gzip@1.9-31.9-3+deb10u1
LowDSA-5123-1xz-utils@5.2.4-15.2.4-1+deb10u1
LowGHSA-9v8j-x534-2fx3ruby-saml@1.13.01.18.0
LowDSA-5073-1expat@2.2.6-2+deb10u12.2.6-2+deb10u2
LowGHSA-vg3r-rm7w-2xghrexml@3.2.3.13.2.7
LowGHSA-34x7-hfp2-rc4vtar@4.4.137.5.7
LowGO-2021-0263stdlib@go1.171.16.10
LowGHSA-mq66-vcfc-8246mercurial@4.8.24.9
LowGO-2023-1571stdlib@go1.171.19.6
LowGHSA-h8w8-99g7-qmvjconcurrent-ruby@1.1.91.3.7
LowGHSA-2cw7-v8ff-p88roj@3.13.93.17.3
LowGHSA-475m-ph3x-64gpoj@3.13.93.17.3
LowGHSA-9cv6-qcjw-4grxoj@3.13.93.17.3
LowGHSA-m578-w5vf-rfcmoj@3.13.93.17.3
LowGHSA-vwm4-62gf-x745oj@3.13.93.17.3
LowGHSA-mxw3-3hh2-x2mhrack@2.2.32.2.22
LowDLA-3288-1curl@7.64.0-4+deb10u27.64.0-4+deb10u4
LowGHSA-6xw4-3v39-52mmrack@2.2.32.2.20
LowDLA-3445-1cpio@2.12+dfsg-92.12+dfsg-9+deb10u1
LowGHSA-qpgp-93vx-g8v8puma@5.5.27.2.1
LowDSA-5087-1cyrus-sasl2@2.1.27+dfsg-1+deb10u12.1.27+dfsg-1+deb10u2
LowGHSA-rgw5-rvv9-x895brace-expansion@1.1.111.1.18
LowGO-2022-0435stdlib@go1.171.17.9
LowGHSA-f5x3-32g6-xq36tar@4.4.136.2.1
LowGHSA-f5ww-cq3m-q3g7sanitize@6.0.06.0.2
LowGO-2022-0288stdlib@go1.171.16.12

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.5.0latest4 years ago12.0.21111083796,810

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/homeenterpriseinc/openproject.svg)](https://charts.stackradar.io/charts/homeenterpriseinc/openproject)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.