paperless Helm chart
hpVerified publisherScored 16 Sept 2026
A Helm chart for Paperless-ngx document management system
Latest 0.1.2 yesterdayapp version 3.1.3 0Artifact Hub
paperless 0.1.2 deploys 5 container images: library/busybox, valkey/valkey, apache/tika, gotenberg/gotenberg and 1 more. Across them, 2,748 findings — 2 critical, 2 high — 2 on CISA KEV. The highest contribution is DEBIAN-CVE-2026-85046 in chromium 149.0.7827.102-1~deb13u1, fixed in 152.0.7977.82-1~deb13u1.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| library/ | latest | 0000 | 0 |
| valkey/ | 9-alpine | 0000 | 0 |
| apache/ | 3.3.1.0 | 0016188 | 1,718 |
| gotenberg/ | 8.34 | 211961,879 | 20,615 |
| ghcr.io/ | 3.1.3 | 0171392 | 4,651 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2026-17976 | chromium | 151.0.7922.71-1~deb13u1 |
| Low | DEBIAN-CVE-2026-25832 | mbedtls | no fix listed |
| Low | DEBIAN-CVE-2026-19167 | chromium | 151.0.7922.108-1~deb13u1 |
| Low | UBUNTU-CVE-2026-35359 | rust-coreutils | no fix listed |
| Low | DEBIAN-CVE-2026-78984 | chromium | 152.0.7977.75-1~deb13u1 |
| Low | DEBIAN-CVE-2026-79084 | chromium | 152.0.7977.75-1~deb13u1 |
| Low | DEBIAN-CVE-2022-3219 | gnupg2 | no fix listed |
| Low | DEBIAN-CVE-2026-87876 | cups | no fix listed |
| Low | DEBIAN-CVE-2026-18016 | chromium | 151.0.7922.71-1~deb13u1 |
| Low | DEBIAN-CVE-2026-91720 | chromium | no fix listed |
| Low | DEBIAN-CVE-2026-91726 | chromium | no fix listed |
| Low | DEBIAN-CVE-2026-78986 | chromium | 152.0.7977.75-1~deb13u1 |
| Low | DEBIAN-CVE-2026-79007 | chromium | 152.0.7977.75-1~deb13u1 |
| Low | DEBIAN-CVE-2026-87624 | chromium | no fix listed |
| Low | DEBIAN-CVE-2026-12456 | chromium | 149.0.7827.155-1~deb13u1 |
| Low | DEBIAN-CVE-2026-12457 | chromium | 149.0.7827.155-1~deb13u1 |
| Low | DEBIAN-CVE-2026-87641 | chromium | no fix listed |
| Low | DEBIAN-CVE-2026-79004 | chromium | 152.0.7977.75-1~deb13u1 |
| Low | DEBIAN-CVE-2026-17927 | chromium | 151.0.7922.71-1~deb13u1 |
| Low | DEBIAN-CVE-2026-84358 | chromium | 152.0.7977.75-1~deb13u1 |
| Low | DEBIAN-CVE-2026-79031 | chromium | 152.0.7977.75-1~deb13u1 |
| Low | UBUNTU-CVE-2026-35351 | rust-coreutils | no fix listed |
| Low | DEBIAN-CVE-2026-41080 | expat | 2.8.2-1~deb13u1 |
| Low | DEBIAN-CVE-2026-76042 | chromium | 151.0.7922.169-1~deb13u1 |
| Low | DEBIAN-CVE-2026-79002 | chromium | 152.0.7977.75-1~deb13u1 |
| Low | DEBIAN-CVE-2026-19161 | chromium | 151.0.7922.108-1~deb13u1 |
| Low | DEBIAN-CVE-2026-79255 | chromium | 152.0.7977.75-1~deb13u1 |
| Low | DEBIAN-CVE-2026-62343 | imagemagick | no fix listed |
| Low | UBUNTU-CVE-2026-35354 | rust-coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-35357 | rust-coreutils | no fix listed |
| Low | DEBIAN-CVE-2026-17998 | chromium | 151.0.7922.71-1~deb13u1 |
| Low | DEBIAN-CVE-2026-62946 | imagemagick | no fix listed |
| Low | DEBIAN-CVE-2026-17870 | chromium | 151.0.7922.71-1~deb13u1 |
| Low | DEBIAN-CVE-2026-87456 | chromium | no fix listed |
| Low | UBUNTU-CVE-2026-35370 | rust-coreutils | no fix listed |
| Low | DEBIAN-CVE-2026-17702 | chromium | 151.0.7922.71-1~deb13u1 |
| Low | DEBIAN-CVE-2026-17715 | chromium | 151.0.7922.71-1~deb13u1 |
| Low | DEBIAN-CVE-2026-78953 | chromium | 152.0.7977.75-1~deb13u1 |
| Low | DEBIAN-CVE-2026-79228 | chromium | 152.0.7977.75-1~deb13u1 |
| Low | DEBIAN-CVE-2026-78958 | chromium | 152.0.7977.75-1~deb13u1 |
| Low | DEBIAN-CVE-2025-11731 | libxslt | no fix listed |
| Low | UBUNTU-CVE-2026-15060 | systemd | 259.5-0ubuntu3.4 |
| Low | DEBIAN-CVE-2026-78941 | chromium | 152.0.7977.75-1~deb13u1 |
| Low | DEBIAN-CVE-2026-17902 | chromium | 151.0.7922.71-1~deb13u1 |
| Low | GHSA-wjpw-4j6x-6rwh | jetty-http | no fix listed |
| Low | DEBIAN-CVE-2026-87434 | chromium | no fix listed |
| Low | DEBIAN-CVE-2026-87442 | chromium | no fix listed |
| Low | DEBIAN-CVE-2026-78903 | chromium | 152.0.7977.75-1~deb13u1 |
| Low | DEBIAN-CVE-2026-91740 | chromium | no fix listed |
| Low | DEBIAN-CVE-2026-91746 | chromium | no fix listed |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 0.1.2latest | yesterday | 3.1.3 | 222832,459 | 26,984 |
| 0.1.1 | 8 days ago | 3.1.3 | 222832,459 | 26,984 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.