openproject 13.15.1 Helm chart

Name: openproject Helm chart 13.15.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

openproject-helm-charts

Scored 21 Oct 2026

A Helm chart for running OpenProject via Kubernetes

Version 13.15.1 2 days agoapp version 17.9.2 11Artifact Hub

openproject 13.15.1 deploys 5 container images: bitnamilegacy/memcached, openproject/openproject, openproject/hocuspocus, bitnamilegacy/postgresql and 1 more. Across them, 2,041 findings — 9 critical, 5 high — 2 on CISA KEV. The highest contribution is DEBIAN-CVE-2025-48384 in git 1:2.39.5-0+deb12u2, fixed in 1:2.39.5-0+deb12u3.

Radar Score

21,775953021,721

2,041 findings over 5 of 5 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
bitnamilegacy/memcached	1.6.24-debian-12-r0	3357202	3,350
openproject/openproject×12	17.9.2-slim	0043302	3,168
openproject/hocuspocus	release-338001b2	22154935	11,331
bitnamilegacy/postgresql	15.4.0-debian-11-r45	4031123	2,178
library/postgres	16	0017159	1,748

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,429 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-61865	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u3	8:6.9.11.60+dfsg-1.6+deb12u13
Low	DEBIAN-CVE-2026-61869	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u3	8:6.9.11.60+dfsg-1.6+deb12u13
Low	DEBIAN-CVE-2026-109282	imagemagick@8:7.1.1.43+dfsg1-1+deb13u12	no fix listed
Low	DEBIAN-CVE-2026-109258	imagemagick@8:7.1.1.43+dfsg1-1+deb13u12	no fix listed
Low	DEBIAN-CVE-2026-109280	imagemagick@8:7.1.1.43+dfsg1-1+deb13u12	no fix listed
Low	DEBIAN-CVE-2026-105081	imagemagick@8:7.1.1.43+dfsg1-1+deb13u12	no fix listed
Low	DEBIAN-CVE-2026-107928	curl@8.14.1-2+deb13u7	no fix listed
Low	DEBIAN-CVE-2026-107929	curl@8.14.1-2+deb13u7	no fix listed
Low	DEBIAN-CVE-2026-86409	curl@8.14.1-2+deb13u7	no fix listed
Low	DEBIAN-CVE-2026-86410	curl@8.14.1-2+deb13u7	no fix listed
Low	DEBIAN-CVE-2026-86414	curl@8.14.1-2+deb13u7	no fix listed
Low	DEBIAN-CVE-2026-87862	curl@8.14.1-2+deb13u7	no fix listed
Low	DEBIAN-CVE-2026-87863	curl@8.14.1-2+deb13u7	no fix listed
Low	DEBIAN-CVE-2026-87864	curl@8.14.1-2+deb13u7	no fix listed
Low	DEBIAN-CVE-2026-87865	curl@8.14.1-2+deb13u7	no fix listed
Low	DEBIAN-CVE-2026-87866	curl@8.14.1-2+deb13u7	no fix listed
Low	DEBIAN-CVE-2026-92386	curl@8.14.1-2+deb13u7	no fix listed
Low	DEBIAN-CVE-2026-92387	curl@8.14.1-2+deb13u7	no fix listed
Low	DEBIAN-CVE-2026-92388	curl@8.14.1-2+deb13u7	no fix listed
Low	DEBIAN-CVE-2026-92389	curl@8.14.1-2+deb13u7	no fix listed
Low	DEBIAN-CVE-2026-92390	curl@8.14.1-2+deb13u7	no fix listed
Low	DEBIAN-CVE-2026-92391	curl@8.14.1-2+deb13u7	no fix listed
Low	DEBIAN-CVE-2026-94266	curl@8.14.1-2+deb13u7	no fix listed
Low	DEBIAN-CVE-2026-61872	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u3	8:6.9.11.60+dfsg-1.6+deb12u13
Low	DEBIAN-CVE-2026-109279	imagemagick@8:7.1.1.43+dfsg1-1+deb13u12	no fix listed
None	DEBIAN-CVE-2026-61464	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u3	8:6.9.11.60+dfsg-1.6+deb12u13
None	DEBIAN-CVE-2026-19582	binutils@2.40-2	no fix listed
None	DEBIAN-CVE-2026-3479	python3.11@3.11.2-6+deb12u6	no fix listed
None	DEBIAN-CVE-2026-54920	openexr@3.1.5-5	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
13.15.1latest	2 days ago	17.9.2	953021,721	21,775
13.14.0	5 days ago	17.9.2	953021,721	21,775
13.13.1	19 days ago	17.9.1	963141,722	22,226
13.13.0	21 days ago	17.9.0	963151,627	21,592
13.12.0	1 month ago	17.8.0	963361,704	22,453
13.11.0	1 month ago	17.8.0	963361,704	22,453

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/openproject-helm-charts/openproject.svg)](https://charts.stackradar.io/charts/openproject-helm-charts/openproject)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.