openproject 13.12.0 Helm chart

Name: openproject Helm chart 13.12.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

openproject-helm-charts

Scored 18 Sept 2026

A Helm chart for running OpenProject via Kubernetes

Version 13.12.0 2 days agoapp version 17.8.0 11Artifact Hub

openproject 13.12.0 deploys 5 container images: bitnamilegacy/memcached, openproject/openproject, openproject/hocuspocus, bitnamilegacy/postgresql and 1 more. Across them, 1,807 findings — 6 critical, 9 high — 2 on CISA KEV. The highest contribution is DEBIAN-CVE-2025-48384 in git 1:2.39.5-0+deb12u2, fixed in 1:2.39.5-0+deb12u3.

Radar Score

20,185693051,482

1,807 findings over 5 of 5 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
bitnamilegacy/memcached	1.6.24-debian-12-r0	3356179	3,161
openproject/openproject×11	17.8.0-slim	0162233	3,299
openproject/hocuspocus	release-338001b2	14141784	10,037
bitnamilegacy/postgresql	15.4.0-debian-11-r45	2127126	2,002
library/postgres	16	0019160	1,686

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,245 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DLA-4105-1	tzdata@2021a-1+deb11u10	2025b-0+deb11u1
Low	DLA-4403-1	tzdata@2021a-1+deb11u10	2025b-0+deb11u2
Low	DLA-4485-1	ca-certificates@20210119	20230311+deb12u1~deb11u1
Low	DSA-5979-2	libxslt@1.1.35-1+deb12u1	1.1.35-1+deb12u3
Low	DEBIAN-CVE-2026-46692	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u3	8:6.9.11.60+dfsg-1.6+deb12u10
Low	DEBIAN-CVE-2026-40228	systemd@252.38-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2025-13462	python3.11@3.11.2-6+deb12u6	3.11.2-6+deb12u8
Low	DEBIAN-CVE-2025-61985	openssh@1:9.2p1-2+deb12u7	1:9.2p1-2+deb12u8
Low	DEBIAN-CVE-2026-46693	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u3	8:6.9.11.60+dfsg-1.6+deb12u10
Low	DEBIAN-CVE-2025-50422	cairo@1.16.0-7	no fix listed
Low	DEBIAN-CVE-2026-61081	mariadb@1:10.11.11-0+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-6170	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u3
Low	DEBIAN-CVE-2026-91782	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-86141	libxml2@2.9.14+dfsg-1.3~deb12u2	no fix listed
Low	DEBIAN-CVE-2026-89162	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	DEBIAN-CVE-2026-15310	python3.11@3.11.2-6+deb12u6	no fix listed
Low	DEBIAN-CVE-2026-57062	gnupg2@2.2.40-1.1	no fix listed
Low	DEBIAN-CVE-2026-66011	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-1485	glib2.0@2.74.6-2+deb12u6	2.74.6-2+deb12u9
Low	DEBIAN-CVE-2026-53910	diffutils@1:3.8-4	no fix listed
Low	DEBIAN-CVE-2026-6879	python3.11@3.11.2-6+deb12u6	no fix listed
Low	DEBIAN-CVE-2013-4472	poppler@25.03.0-5+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-24515	expat@2.5.0-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-66861	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-35388	openssh@1:9.2p1-2+deb12u7	1:9.2p1-2+deb12u10
Low	DEBIAN-CVE-2026-16517	libarchive@3.7.4-4+deb13u1	no fix listed
Low	DEBIAN-CVE-2025-9165	tiff@4.5.0-6+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-86424	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-18503	python3.11@3.11.2-6+deb12u6	no fix listed
Low	DEBIAN-CVE-2026-90804	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2024-13978	tiff@4.5.0-6+deb12u2	no fix listed
Low	DEBIAN-CVE-2025-8534	tiff@4.5.0-6+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-73283	openssh@1:9.2p1-2+deb12u7	no fix listed
Low	DEBIAN-CVE-2026-5958	sed@4.9-1	4.9-1+deb12u1
Low	DEBIAN-CVE-2026-61867	imagemagick@8:7.1.1.43+dfsg1-1+deb13u11	8:7.1.1.43+dfsg1-1+deb13u12
Low	DEBIAN-CVE-2026-6368	glibc@2.36-9+deb12u10	no fix listed
Low	DEBIAN-CVE-2026-61862	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u3	8:6.9.11.60+dfsg-1.6+deb12u13
Low	DEBIAN-CVE-2026-61864	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u3	8:6.9.11.60+dfsg-1.6+deb12u13
Low	DEBIAN-CVE-2026-61865	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u3	8:6.9.11.60+dfsg-1.6+deb12u13
Low	DEBIAN-CVE-2026-61869	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u3	8:6.9.11.60+dfsg-1.6+deb12u13
Low	DEBIAN-CVE-2026-61872	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u3	8:6.9.11.60+dfsg-1.6+deb12u13
None	DEBIAN-CVE-2026-61464	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u3	8:6.9.11.60+dfsg-1.6+deb12u13
None	DEBIAN-CVE-2026-19582	binutils@2.40-2	no fix listed
None	DEBIAN-CVE-2026-3479	python3.11@3.11.2-6+deb12u6	no fix listed
None	DEBIAN-CVE-2026-54920	openexr@3.1.5-5	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
13.12.0latest	2 days ago	17.8.0	693051,482	20,185
13.11.0	16 days ago	17.8.0	693051,482	20,185

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/openproject-helm-charts/openproject.svg)](https://charts.stackradar.io/charts/openproject-helm-charts/openproject)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.