StackRadar

openproject 13.13.0 Helm chart

openproject-helm-chartsOfficialVerified publisher

Not scored yet

A Helm chart for running OpenProject via Kubernetes

Version 13.13.0 todayapp version 17.9.0 11Artifact Hub

openproject 13.13.0 deploys 5 container images: bitnamilegacy/memcached, openproject/openproject, openproject/hocuspocus, bitnamilegacy/postgresql and 1 more. The highest contribution is DEBIAN-CVE-2025-48384 in git 1:2.39.5-0+deb12u2, fixed in 1:2.39.5-0+deb12u3.

Radar Score

Not yet scored

The daily scoring run has not folded the 5 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images
ImageTagVulnerabilitiesRadar Score
bitnamilegacy/memcached1.6.24-debian-12-r033661783,311
openproject/openproject×1117.9.0-slim—not yet scanned
openproject/hocuspocusrelease-338001b22317479210,745
bitnamilegacy/postgresql15.4.0-debian-11-r4521301252,052
library/postgres1600141471,390

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,222 distinct across the version’s images
SeverityAdvisoryPackageFixed in
CriticalDEBIAN-CVE-2025-48384KEVgit@1:2.39.5-0+deb12u21:2.39.5-0+deb12u3
CriticalBIT-postgresql-2025-1094PostgreSQL@15.4.013.19.0
CriticalBIT-postgresql-2025-1094postgresql@15.4.0-613.19.0
CriticalDEBIAN-CVE-2023-50387systemd@252.22-1~deb12u1252.23-1~deb12u1
CriticalDEBIAN-CVE-2025-15467openssl@3.0.17-1~deb12u23.0.18-1~deb12u2
CriticalDEBIAN-CVE-2024-2961glibc@2.36-9+deb12u42.36-9+deb12u6
HighDEBIAN-CVE-2025-6965sqlite3@3.40.1-2+deb12u13.40.1-2+deb12u2
HighDEBIAN-CVE-2023-50868systemd@252.22-1~deb12u1252.23-1~deb12u1
HighDEBIAN-CVE-2024-6119openssl@3.0.11-1~deb12u23.0.14-1~deb12u2
HighDEBIAN-CVE-2024-2511openssl@3.0.11-1~deb12u23.0.14-1~deb12u1
HighDEBIAN-CVE-2023-34152imagemagick@8:6.9.11.60+dfsg-1.6+deb12u3no fix listed
HighDEBIAN-CVE-2019-6110openssh@1:9.2p1-2+deb12u7no fix listed
HighDSA-5514-1KEVglibc@2.31-13+deb11u62.31-13+deb11u7
MediumDLA-3859-1systemd@247.3-7+deb11u4247.3-7+deb11u6
MediumDEBIAN-CVE-2020-15778openssh@1:9.2p1-2+deb12u7no fix listed
MediumDEBIAN-CVE-2024-5535openssl@3.0.11-1~deb12u23.0.15-1~deb12u1
MediumDEBIAN-CVE-2018-6951patch@2.7.6-7no fix listed
MediumDEBIAN-CVE-2018-6952patch@2.7.6-7no fix listed
MediumDSA-6113-1openssl@3.0.17-1~deb12u23.0.18-1~deb12u2
MediumDLA-3942-1openssl@1.1.1n-0+deb11u51.1.1n-0+deb11u6
MediumDLA-3942-2openssl@1.1.1n-0+deb11u51.1.1w-0+deb11u2
MediumDEBIAN-CVE-2025-55298imagemagick@8:6.9.11.60+dfsg-1.6+deb12u38:6.9.11.60+dfsg-1.6+deb12u4
MediumDEBIAN-CVE-2019-1010022glibc@2.41-12+deb13u4no fix listed
MediumBIT-postgresql-2024-10979postgresql@15.4.0-613.17.0
MediumBIT-postgresql-2024-10979PostgreSQL@15.4.013.17.0
MediumDEBIAN-CVE-2023-45853zlib@1:1.2.13.dfsg-1no fix listed
MediumDEBIAN-CVE-2017-17740openldap@2.6.10+dfsg-1no fix listed
MediumBIT-postgresql-2023-5869PostgreSQL@15.4.011.22.0
MediumBIT-postgresql-2023-5869postgresql@15.4.0-611.22.0
MediumDEBIAN-CVE-2026-45447openssl@3.0.17-1~deb12u23.0.20-1~deb12u2
MediumDEBIAN-CVE-2018-20796glibc@2.41-12+deb13u4no fix listed
MediumDEBIAN-CVE-2017-16232tiff@4.5.0-6+deb12u2no fix listed
MediumDEBIAN-CVE-2015-3276openldap@2.6.10+dfsg-1no fix listed
MediumDEBIAN-CVE-2019-1010023glibc@2.41-12+deb13u4no fix listed
MediumDEBIAN-CVE-2018-16376openjpeg2@2.5.0-2+deb12u1no fix listed
MediumDEBIAN-CVE-2009-3546libwmf@0.2.12-5.1no fix listed
MediumDEBIAN-CVE-2026-49261mariadb@1:10.11.11-0+deb12u11:10.11.18-0+deb12u1
MediumDEBIAN-CVE-2018-15607imagemagick@8:6.9.11.60+dfsg-1.6+deb12u3no fix listed
MediumDEBIAN-CVE-2024-37371krb5@1.20.1-2+deb12u11.20.1-2+deb12u2
MediumDEBIAN-CVE-2016-9580openjpeg2@2.5.0-2+deb12u1no fix listed
MediumDEBIAN-CVE-2016-9581openjpeg2@2.5.0-2+deb12u1no fix listed
MediumGHSA-5j98-mcp5-4vw2glob@10.4.510.5.0
MediumDEBIAN-CVE-2016-9114openjpeg2@2.5.0-2+deb12u1no fix listed
MediumDEBIAN-CVE-2016-9113openjpeg2@2.5.0-2+deb12u1no fix listed
MediumDEBIAN-CVE-2026-56379imagemagick@8:6.9.11.60+dfsg-1.6+deb12u38:6.9.11.60+dfsg-1.6+deb12u8
MediumDEBIAN-CVE-2024-4741openssl@3.0.11-1~deb12u23.0.14-1~deb12u1
MediumDEBIAN-CVE-2025-49796libxml2@2.9.14+dfsg-1.3~deb12u22.9.14+dfsg-1.3~deb12u3
MediumBIT-postgresql-2023-39417postgresql@15.4.0-611.21.0
MediumDEBIAN-CVE-2022-24975git@1:2.39.5-0+deb12u2no fix listed
MediumDEBIAN-CVE-2023-6879aom@3.6.0-1+deb12u1no fix listed

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
13.13.0latesttoday17.9.0——
13.12.014 days ago17.8.0783641,53921,702
13.11.028 days ago17.8.0783641,53921,702

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/openproject-helm-charts/openproject.svg)](https://charts.stackradar.io/charts/openproject-helm-charts/openproject)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 1 Oct 2026 · scanned 30 Sept 2026 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.