StackRadar

codimd Helm chart

phntom

Scored 14 Sept 2026

A CodiMD Helm chart for Kubernetes (scram-sha-256 compatible)

Latest 0.1.12 3 years agoapp version 2.4.3 0Artifact Hub

codimd 0.1.12 deploys 3 container images: phntom/codimd, bitnami/bitnami-shell and bitnami/postgresql. Across the 1 measured, 495 findings0 critical, 10 high 1 on CISA KEV. The highest contribution is GHSA-phwq-j96m-2c2q in ejs 2.6.2, fixed in 3.1.7. Chart.yaml declares kubeVersion >=1.14.0-0; rendered for Kubernetes 1.14.0.

Radar Score

6,524010115370

495 findings over 1 of 3 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
phntom/codimd2.4.30101153706,524
bitnami/bitnami-shell11-debian-11-r46unmeasured
bitnami/postgresql15.0.0-debian-11-r1unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

High findings

10 distinct across the version’s images

High: findings whose contribution to the Radar Score is 40–69. Show every band

SeverityAdvisoryPackageFixed in
HighGHSA-phwq-j96m-2c2qejs@2.6.23.1.7
HighGHSA-r5fr-rjxr-66jclodash@4.17.214.18.0
HighGHSA-r5fr-rjxr-66jclodash-es@4.17.214.18.0
HighGHSA-r5fr-rjxr-66jclodash.template@4.5.04.18.0
HighGHSA-w573-4hg7-7wgqdecode-uri-component@0.2.00.2.1
HighGHSA-3jfq-g458-7qm9tar@4.4.134.4.14
HighGHSA-35jh-r3h4-6jhmlodash.template@4.5.0no fix listed
HighGHSA-x3m8-899r-f7c3xml-crypto@1.4.02.1.6
HighGHSA-9p8x-f768-wp2gxml-crypto@1.4.02.1.6
HighDLA-3621-1KEVnghttp2@1.36.0-2+deb10u11.36.0-2+deb10u2

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.12latest3 years ago2.4.30101153706,524

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/phntom/codimd.svg)](https://charts.stackradar.io/charts/phntom/codimd)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.