hedgedoc Helm chart

Name: hedgedoc Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

robertobochet

Scored 14 Sept 2026

HedgeDoc (formerly known as CodiMD) is an open-source, web-based, self-hosted, collaborative markdown editor

Latest 1.4.0 22 days agoapp version 1.12.0 2Artifact Hub

hedgedoc 1.4.0 deploys 1 container image: quay.io/hedgedoc/hedgedoc. Across them, 78 findings — 0 critical, 0 high. The highest contribution is GHSA-hrpp-h998-j3pp in qs 2.3.3, fixed in 6.2.4.

Radar Score

977001563

78 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
quay.io/hedgedoc/hedgedoc	1.12.0	001563	977

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

63 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-vcc3-ghjq-m6fr	decode-uri-component@0.2.2	0.5.0
Low	GHSA-vxpw-j846-p89q	undici@6.26.0	6.27.0
Low	GHSA-x6wf-f3px-wcqx	xmldom@0.1.31	no fix listed
Low	GHSA-34x7-hfp2-rc4v	tar@6.2.1	7.5.7
Low	GHSA-rgw5-rvv9-x895	brace-expansion@5.0.6	5.0.9
Low	GHSA-qffp-2rhf-9h96	tar@6.2.1	7.5.10
Low	GHSA-j759-j44w-7fr8	xmldom@0.1.31	no fix listed
Low	GHSA-23hp-3jrh-7fpw	tar@6.2.1	7.5.19
Low	GHSA-93r5-fhx6-vmg9	@xmldom/xmldom@0.8.14	0.8.15
Low	GHSA-965w-775f-mr7g	@xmldom/xmldom@0.8.14	0.8.15
Low	GHSA-965w-775f-mr7g	xmldom@0.1.31	no fix listed
Low	GHSA-h452-7996-h45h	cookiejar@2.0.6	2.1.4
Low	GHSA-27p8-2357-5qqv	@xmldom/xmldom@0.8.14	0.8.15
Low	GHSA-27p8-2357-5qqv	xmldom@0.1.31	no fix listed
Low	GHSA-4w3w-2rp5-g8jm	xmldom@0.1.31	no fix listed
Low	GHSA-c7q8-3ch8-vqpv	xmldom@0.1.31	no fix listed
Low	GHSA-c7q8-3ch8-vqpv	@xmldom/xmldom@0.8.14	0.8.15
Low	GHSA-w2rr-34g9-rvrj	xmldom@0.1.31	no fix listed
Low	GHSA-8344-3jmq-59r6	@xmldom/xmldom@0.8.14	0.8.15
Low	GHSA-8344-3jmq-59r6	xmldom@0.1.31	no fix listed
Low	GHSA-hmw2-7cc7-3qxx	form-data@2.3.3	2.5.6
Low	GHSA-8qq5-rm4j-mr97	tar@6.2.1	7.5.3
Low	GHSA-776f-qx25-q3cc	xml2js@0.2.8	0.5.0
Low	GHSA-wh4c-j3r5-mjhp	xmldom@0.1.31	no fix listed
Low	GHSA-x4fp-j954-r2f4	@xmldom/xmldom@0.8.14	0.8.15
Low	GHSA-mh99-v99m-4gvg	brace-expansion@5.0.6	5.0.8
Low	GHSA-8x88-c5mf-7j5w	tar@6.2.1	7.5.18
Low	GHSA-mwp4-54f8-5fhr	ip-address@10.2.0	10.3.1
Low	GHSA-p8p7-x288-28g6	request@2.88.2	no fix listed
Low	GHSA-r6q2-hw4h-h46w	tar@6.2.1	7.5.4
Low	GHSA-2883-xcg3-v3hh	js-yaml@4.3.1	4.3.2
Low	GHSA-r292-9mhp-454m	tar@6.2.1	7.5.21
Low	GHSA-w5hq-g745-h8pq	uuid@3.4.0	11.1.1
Low	GHSA-w4pp-8pjf-rmxw	pacote@21.5.0	21.5.1
Low	GHSA-9ppj-qmqm-q256	tar@6.2.1	7.5.11
Low	GHSA-4xrf-jv44-h6hh	ip-address@10.2.0	10.2.2
Low	GHSA-6h8r-xr42-gp59	xmldom@0.1.31	no fix listed
Low	GHSA-6h8r-xr42-gp59	@xmldom/xmldom@0.8.14	0.8.15
Low	GHSA-22jq-vg5j-6vgg	ip-address@10.2.0	10.2.1
Low	GHSA-h6q6-9hqw-rwfv	xmldom@0.1.31	0.5.0
Low	GHSA-83g3-92jg-28cx	tar@6.2.1	7.5.8
Low	GHSA-w8wr-v893-vjvp	tar@6.2.1	7.5.18
Low	GHSA-6gmq-8vp8-gcm6	@xmldom/xmldom@0.8.14	0.8.15
Low	GHSA-6gmq-8vp8-gcm6	xmldom@0.1.31	no fix listed
Low	GHSA-8c25-f3mj-v6h8	sequelize@5.22.5	6.28.1
Low	MAL-2022-5772	reveal-js-multiplex@1.0.0	no fix listed
Low	GHSA-gvwx-54wh-qm9j	tar@6.2.1	7.5.17
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@5.0.6	5.0.7
Low	GHSA-p88m-4jfj-68fv	undici@6.26.0	6.27.0
Low	GHSA-vmf3-w455-68vh	tar@6.2.1	7.5.16

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.4.0latest	22 days ago	1.12.0	001563	977

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/robertobochet/hedgedoc.svg)](https://charts.stackradar.io/charts/robertobochet/hedgedoc)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.