openproject Helm chart

Name: openproject Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

homeenterpriseinc

Scored 14 Sept 2026

Project Management Tool

Latest 0.5.0 4 years agoapp version 12.0.2 1Artifact Hub

openproject 0.5.0 deploys 1 container image: openproject/community. Across them, 499 findings — 1 critical, 11 high — 2 on CISA KEV. The highest contribution is GHSA-754f-8gm6-c4r2 in ruby-saml 1.13.0, fixed in 1.18.0.

Radar Score

6,810111108379

499 findings over 1 of 1 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
openproject/community×5	12.0.2	111108379	6,810

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

499 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-hww2-5g85-429m	uri@0.10.0	0.10.0.3
Low	GHSA-rrfc-7g8p-99q8	rails-html-sanitizer@1.4.2	1.4.4
Low	DLA-3634-1	nss@2:3.42.1-1+deb10u3	2:3.42.1-1+deb10u7
Low	GHSA-vmwr-mc7x-5vc3	rexml@3.2.3.1	3.3.6
Low	GHSA-8cgq-6mh2-7j6v	rack@2.2.3	2.2.12
Low	GO-2023-2102	stdlib@go1.17	1.20.10
Low	GHSA-qffp-2rhf-9h96	tar@4.4.13	7.5.10
Low	GHSA-625h-95r8-8xpm	rack@2.2.3	2.2.18
Low	DSA-5142-1	libxml2@2.9.4+dfsg1-7+deb10u2	2.9.4+dfsg1-7+deb10u4
Low	GHSA-j4pr-3wm6-xx2r	uri@0.10.0	0.12.5
Low	GHSA-2x63-gw47-w4mm	websocket-driver@0.7.5	0.8.2
Low	GHSA-w9pc-fmgc-vxvw	rack@2.2.3	2.2.19
Low	DSA-5032-1	djvulibre@3.5.27.1-10	3.5.27.1-10+deb10u1
Low	GHSA-23hp-3jrh-7fpw	tar@4.4.13	7.5.19
Low	GHSA-hmw2-7cc7-3qxx	form-data@2.3.2	2.5.6
Low	GHSA-9h9g-93gc-623h	rails-html-sanitizer@1.4.2	1.4.4
Low	GHSA-3v45-f3vh-wg7m	oj@3.13.9	3.17.3
Low	GHSA-7r86-cg39-jmmj	minimatch@3.0.4	3.1.3
Low	GHSA-8qq5-rm4j-mr97	tar@4.4.13	7.5.3
Low	DLA-3363-1	pcre2@10.32-5	10.32-5+deb10u1
Low	GO-2021-0264	stdlib@go1.17	1.16.10
Low	GO-2022-0969	stdlib@go1.17	1.18.6
Low	DLA-3239-1	git@1:2.20.1-2+deb10u3	1:2.20.1-2+deb10u5
Low	DSA-5147-1	dpkg@1.19.7	1.19.8
Low	DLA-3682-1	ncurses@6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u5
Low	GHSA-98m9-hrrm-r99r	faraday@1.8.0	1.10.6
Low	GO-2021-0347	stdlib@go1.17	1.16.15
Low	GHSA-23c5-xmqv-rm74	minimatch@3.0.4	3.1.4
Low	GO-2021-0319	stdlib@go1.17	1.16.14
Low	GHSA-mcvf-2q2m-x72m	rails-html-sanitizer@1.4.2	1.4.4
Low	GHSA-c2f4-cvqm-65w2	puma@5.5.2	5.6.8
Low	GHSA-mh99-v99m-4gvg	brace-expansion@1.1.11	1.1.17
Low	GHSA-gxhx-g4fq-49hj	carrierwave@1.3.2	2.2.5
Low	GHSA-cgx6-hpwq-fhv5	nokogiri@1.12.5	1.13.5
Low	GO-2022-0493	stdlib@go1.17	1.17.10
Low	GHSA-x4h9-gwv3-r4m4	ruby-saml@1.13.0	1.18.0
Low	GHSA-fq42-c5rg-92c2	nokogiri@1.12.5	1.13.2
Low	GHSA-8x88-c5mf-7j5w	tar@4.4.13	7.5.18
Low	GHSA-v569-hp3g-36wr	rack@2.2.3	2.2.23
Low	GO-2021-0317	stdlib@go1.17	1.16.14
Low	DLA-3626-1	krb5@1.17-3+deb10u3	1.17-3+deb10u6
Low	GHSA-228g-948r-83gx	loofah@2.12.0	2.19.1
Low	DSA-5174-1	gnupg2@2.2.12-1+deb10u1	2.2.12-1+deb10u2
Low	GO-2023-2185	stdlib@go1.17	1.20.11
Low	DLA-3120-1	poppler@0.71.0-5	0.71.0-5+deb10u1
Low	DLA-3725-1	postfix@3.4.14-0+deb10u1	3.4.23-0+deb10u2
Low	GHSA-8h22-8cf7-hq6g	activestorage@6.1.4.1	6.1.7.7
Low	DLA-3188-1	sysstat@12.0.3-2	12.0.3-2+deb10u1
Low	GHSA-2g4f-4pwh-qvx6	ajv@6.12.6	6.14.0
Low	GHSA-cg4j-q9v8-6v38	activesupport@6.1.4.1	7.2.3.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.5.0latest	4 years ago	12.0.2	111108379	6,810

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/homeenterpriseinc/openproject.svg)](https://charts.stackradar.io/charts/homeenterpriseinc/openproject)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.