kimai2 5.0.14 Helm chart
robjuzScored 15 Sept 2026
A Helm chart for Kubernetes
Version 5.0.14 yesterdayapp version 2.67.0 1Artifact Hub
kimai2 5.0.14 deploys 2 container images: kimai/kimai2 and bitnamilegacy/mariadb. Across them, 471 findings — 0 critical, 2 high — 1 on CISA KEV. The highest contribution is GHSA-xr7r-f8xq-vfvv in github.com/opencontainers/runc v1.1.0, fixed in 1.1.12.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| kimai/ | 2.67.0 | 0028263 | 2,716 |
| bitnamilegacy/ | 10.6.12-debian-11-r16 | 0212165 | 1,792 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2026-57433 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-6653 | libxml2 | no fix listed |
| Low | BIT-mariadb-2026-44173 | mariadb | 10.6.26 |
| Low | GHSA-9493-h29p-rfm2 | github.com/ | 1.2.8 |
| Low | DEBIAN-CVE-2026-13221 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-42496 | perl | no fix listed |
| Low | DEBIAN-CVE-2025-0840 | binutils | no fix listed |
| Low | BIT-mariadb-2026-44168 | mariadb | 10.6.26 |
| Low | DEBIAN-CVE-2026-82209 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-66032 | libssh2 | 1.10.0-3+deb12u1 |
| Low | GO-2023-1571 | stdlib | 1.19.6 |
| Low | DEBIAN-CVE-2026-63072 | openssl | no fix listed |
| Low | DEBIAN-CVE-2026-12087 | perl | no fix listed |
| Low | DEBIAN-CVE-2025-1153 | binutils | no fix listed |
| Low | DEBIAN-CVE-2018-20673 | binutils | no fix listed |
| Low | DEBIAN-CVE-2026-13608 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-85091 | zlib | no fix listed |
| Low | DEBIAN-CVE-2018-21232 | re2c | no fix listed |
| Low | GO-2023-2102 | stdlib | 1.20.10 |
| Low | DEBIAN-CVE-2025-1179 | binutils | no fix listed |
| Low | DEBIAN-CVE-2026-80230 | curl | no fix listed |
| Low | DEBIAN-CVE-2017-13716 | binutils | no fix listed |
| Low | DEBIAN-CVE-2026-54874 | openssl | no fix listed |
| Low | GHSA-qw9x-cqr3-wc7r | github.com/ | 1.2.8 |
| Low | GHSA-cgrx-mc8f-2prm | github.com/ | 1.2.8 |
| Low | DEBIAN-CVE-2026-74860 | libxml2 | no fix listed |
| Low | DEBIAN-CVE-2018-9996 | binutils | no fix listed |
| Low | DEBIAN-CVE-2025-69720 | ncurses | no fix listed |
| Low | DEBIAN-CVE-2025-69650 | binutils | no fix listed |
| Low | BIT-mariadb-2023-22084 | mariadb | 10.4.32 |
| Low | GO-2022-0969 | stdlib | 1.18.6 |
| Low | DEBIAN-CVE-2021-32256 | binutils | no fix listed |
| Low | DEBIAN-CVE-2026-86145 | pcre2 | 10.42-1+deb12u1 |
| Low | DEBIAN-CVE-2023-45853 | zlib | no fix listed |
| Low | DEBIAN-CVE-2025-1178 | binutils | no fix listed |
| Low | DEBIAN-CVE-2026-45186 | expat | no fix listed |
| Low | DEBIAN-CVE-2026-9538 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-58050 | libssh2 | 1.10.0-3+deb12u1 |
| Low | DEBIAN-CVE-2020-15719 | openldap | no fix listed |
| Low | DEBIAN-CVE-2026-66034 | libssh2 | 1.10.0-3+deb12u1 |
| Low | DEBIAN-CVE-2025-7458 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2025-15661 | libssh2 | 1.10.0-3+deb12u1 |
| Low | GO-2023-2185 | stdlib | 1.20.11 |
| Low | DEBIAN-CVE-2026-54411 | pam | no fix listed |
| Low | DEBIAN-CVE-2026-42497 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-41992 | gzip | no fix listed |
| Low | DEBIAN-CVE-2026-12064 | curl | no fix listed |
| Low | DLA-3878-1 | libxml2 | 2.9.10+dfsg-6.7+deb11u5 |
| Low | DEBIAN-CVE-2026-8932 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-75803 | openssl | no fix listed |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 5.0.14latest | yesterday | 2.67.0 | 0240428 | 4,508 |
| 5.0.13 | 19 days ago | 2.65.0 | 0247423 | 4,693 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.