StackRadar

paperless Helm chart

hpVerified publisher

Scored 15 Sept 2026

A Helm chart for Paperless-ngx document management system

Latest 0.1.1 8 days agoapp version 3.1.3 0Artifact Hub

paperless 0.1.1 deploys 5 container images: library/busybox, valkey/valkey, apache/tika, gotenberg/gotenberg and 1 more. Across them, 2,705 findings — 2 critical, 2 high — 2 on CISA KEV. The highest contribution is DEBIAN-CVE-2026-85046 in chromium 149.0.7827.102-1~deb13u1, fixed in 152.0.7977.82-1~deb13u1.

Radar Score

26,579222802,419

2,705 findings over 5 of 5 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images
ImageTagVulnerabilitiesRadar Score
library/busyboxlatest00000
valkey/valkey9-alpine00000
apache/tika3.3.1.000161881,713
gotenberg/gotenberg8.34211931,84020,222
ghcr.io/paperless-ngx/paperless-ngx3.1.301713914,644

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

2,109 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowDEBIAN-CVE-2026-17978chromium@149.0.7827.102-1~deb13u1151.0.7922.71-1~deb13u1
LowDEBIAN-CVE-2026-17915chromium@149.0.7827.102-1~deb13u1151.0.7922.71-1~deb13u1
LowDEBIAN-CVE-2026-79283chromium@149.0.7827.102-1~deb13u1152.0.7977.75-1~deb13u1
LowDEBIAN-CVE-2026-87462chromium@149.0.7827.102-1~deb13u1no fix listed
LowDEBIAN-CVE-2026-78965chromium@149.0.7827.102-1~deb13u1152.0.7977.75-1~deb13u1
LowUBUNTU-CVE-2025-45582tar@1.35+dfsg-41.35+dfsg-4ubuntu0.2
LowDEBIAN-CVE-2026-79264chromium@149.0.7827.102-1~deb13u1152.0.7977.75-1~deb13u1
LowUBUNTU-CVE-2026-15534perl@5.40.1-7build15.40.1-7ubuntu0.2
LowDEBIAN-CVE-2026-17891chromium@149.0.7827.102-1~deb13u1151.0.7922.71-1~deb13u1
LowDEBIAN-CVE-2026-17906chromium@149.0.7827.102-1~deb13u1151.0.7922.71-1~deb13u1
LowDEBIAN-CVE-2026-17908chromium@149.0.7827.102-1~deb13u1151.0.7922.71-1~deb13u1
LowDEBIAN-CVE-2026-78892chromium@149.0.7827.102-1~deb13u1152.0.7977.75-1~deb13u1
LowGO-2026-5970golang.org/x/text@v0.37.00.39.0
LowDEBIAN-CVE-2026-79010chromium@149.0.7827.102-1~deb13u1152.0.7977.75-1~deb13u1
LowDEBIAN-CVE-2026-60184mariadb@1:11.8.6-0+deb13u1no fix listed
LowDEBIAN-CVE-2024-7883llvm-toolchain-19@1:19.1.7-3+b1no fix listed
LowDEBIAN-CVE-2026-78940chromium@149.0.7827.102-1~deb13u1152.0.7977.75-1~deb13u1
LowDEBIAN-CVE-2025-59529avahi@0.8-16no fix listed
LowUBUNTU-CVE-2026-56391coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu259.7-3ubuntu2.1
LowUBUNTU-CVE-2026-56391coreutils@9.7-3ubuntu29.7-3ubuntu2.1
LowDEBIAN-CVE-2026-17740chromium@149.0.7827.102-1~deb13u1151.0.7922.71-1~deb13u1
LowDEBIAN-CVE-2026-17757chromium@149.0.7827.102-1~deb13u1151.0.7922.71-1~deb13u1
LowDEBIAN-CVE-2026-17771chromium@149.0.7827.102-1~deb13u1151.0.7922.71-1~deb13u1
LowDEBIAN-CVE-2026-17785chromium@149.0.7827.102-1~deb13u1151.0.7922.71-1~deb13u1
LowDEBIAN-CVE-2026-17790chromium@149.0.7827.102-1~deb13u1151.0.7922.71-1~deb13u1
LowDEBIAN-CVE-2026-17808chromium@149.0.7827.102-1~deb13u1151.0.7922.71-1~deb13u1
LowDEBIAN-CVE-2026-17810chromium@149.0.7827.102-1~deb13u1151.0.7922.71-1~deb13u1
LowDEBIAN-CVE-2025-59800ghostscript@10.05.1~dfsg-1+deb13u1no fix listed
LowDEBIAN-CVE-2026-64685imagemagick@8:7.1.1.43+dfsg1-1+deb13u11no fix listed
LowDEBIAN-CVE-2026-78976chromium@149.0.7827.102-1~deb13u1152.0.7977.75-1~deb13u1
LowDEBIAN-CVE-2026-78987chromium@149.0.7827.102-1~deb13u1152.0.7977.75-1~deb13u1
LowUBUNTU-CVE-2026-42768openssl@3.5.5-1ubuntu33.5.5-1ubuntu3.2
LowGO-2025-4155stdlib@go1.24.41.24.11
LowDEBIAN-CVE-2026-79089chromium@149.0.7827.102-1~deb13u1152.0.7977.75-1~deb13u1
LowUBUNTU-CVE-2026-35363rust-coreutils@0.8.0-0ubuntu3no fix listed
LowDEBIAN-CVE-2026-87653chromium@149.0.7827.102-1~deb13u1no fix listed
LowDEBIAN-CVE-2025-14017curl@8.20.0-5~bpo13+1no fix listed
LowDEBIAN-CVE-2026-33165libde265@1.0.15-1+deb13u11.0.15-1+deb13u2
LowDEBIAN-CVE-2026-87501chromium@149.0.7827.102-1~deb13u1no fix listed
LowDEBIAN-CVE-2026-87599chromium@149.0.7827.102-1~deb13u1no fix listed
LowDEBIAN-CVE-2025-10911libxslt@1.1.35-1.2+deb13u3no fix listed
LowDEBIAN-CVE-2026-87655chromium@149.0.7827.102-1~deb13u1no fix listed
LowDEBIAN-CVE-2023-30571libarchive@3.7.4-4+deb13u1no fix listed
LowDEBIAN-CVE-2026-79016chromium@149.0.7827.102-1~deb13u1152.0.7977.75-1~deb13u1
LowDEBIAN-CVE-2026-79049chromium@149.0.7827.102-1~deb13u1152.0.7977.75-1~deb13u1
LowDEBIAN-CVE-2026-32778expat@2.7.1-22.8.2-1~deb13u1
LowDEBIAN-CVE-2026-86144libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2no fix listed
LowDEBIAN-CVE-2026-12033chromium@149.0.7827.102-1~deb13u1149.0.7827.114-1~deb13u1
LowDEBIAN-CVE-2026-56288patch@2.8-2no fix listed
LowDEBIAN-CVE-2026-56289patch@2.8-2no fix listed

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.1latest8 days ago3.1.3222802,41926,579

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/hp/paperless.svg)](https://charts.stackradar.io/charts/hp/paperless)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 15 Sept 2026 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.