kimai2 5.0.14 Helm chart
robjuzScored 15 Sept 2026
A Helm chart for Kubernetes
Version 5.0.14 yesterdayapp version 2.67.0 1Artifact Hub
kimai2 5.0.14 deploys 2 container images: kimai/kimai2 and bitnamilegacy/mariadb. Across them, 471 findings — 0 critical, 2 high — 1 on CISA KEV. The highest contribution is GHSA-xr7r-f8xq-vfvv in github.com/opencontainers/runc v1.1.0, fixed in 1.1.12.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| kimai/ | 2.67.0 | 0028263 | 2,716 |
| bitnamilegacy/ | 10.6.12-debian-11-r16 | 0212165 | 1,792 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2026-56408 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-56406 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-56407 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-56410 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-56411 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-19499 | glibc | no fix listed |
| Low | DEBIAN-CVE-2026-78410 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-89161 | pcre2 | 10.42-1+deb12u1 |
| Low | GO-2026-5026 | stdlib | 1.25.13 |
| Low | DEBIAN-CVE-2025-14104 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-86142 | libxml2 | no fix listed |
| Low | GO-2025-3420 | stdlib | 1.22.11 |
| Low | GO-2026-4342 | stdlib | 1.24.12 |
| Low | GO-2024-2598 | stdlib | 1.21.8 |
| Low | GO-2025-3751 | stdlib | 1.23.10 |
| Low | DEBIAN-CVE-2025-11839 | binutils | no fix listed |
| Low | DEBIAN-CVE-2025-11840 | binutils | no fix listed |
| Low | DEBIAN-CVE-2026-78409 | util-linux | no fix listed |
| Low | DLA-4492-1 | gnutls28 | 3.7.1-5+deb11u9 |
| Low | DEBIAN-CVE-2025-69648 | binutils | no fix listed |
| Low | DEBIAN-CVE-2025-69652 | binutils | no fix listed |
| Low | BIT-mariadb-2026-3494 | mariadb | 10.6.25 |
| Low | DLA-4146-1 | libxml2 | 2.9.10+dfsg-6.7+deb11u7 |
| Low | DEBIAN-CVE-2025-69651 | binutils | no fix listed |
| Low | GO-2026-4870 | stdlib | 1.25.9 |
| Low | GO-2022-0532 | stdlib | 1.17.11 |
| Low | DEBIAN-CVE-2025-11495 | binutils | no fix listed |
| Low | GO-2025-4009 | stdlib | 1.24.8 |
| Low | DEBIAN-CVE-2026-86138 | libxml2 | no fix listed |
| Low | GO-2026-4947 | stdlib | 1.25.9 |
| Low | DLA-4176-1 | openssl | 1.1.1w-0+deb11u3 |
| Low | DEBIAN-CVE-2026-86143 | libxml2 | no fix listed |
| Low | DEBIAN-CVE-2010-4651 | patch | no fix listed |
| Low | GO-2025-4006 | stdlib | 1.24.8 |
| Low | DEBIAN-CVE-2025-8224 | binutils | no fix listed |
| Low | DLA-3930-1 | libsepol | 3.1-1+deb11u1 |
| Low | DEBIAN-CVE-2026-56412 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-4647 | binutils | no fix listed |
| Low | GO-2026-5037 | stdlib | 1.25.11 |
| Low | GO-2026-4971 | stdlib | 1.25.10 |
| Low | DEBIAN-CVE-2026-50219 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-56409 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2025-11413 | binutils | no fix listed |
| Low | GO-2026-5972 | stdlib | 1.25.13 |
| Low | GO-2026-6088 | stdlib | 1.25.13 |
| Low | GO-2026-6089 | stdlib | 1.25.13 |
| Low | GO-2026-6090 | stdlib | 1.25.13 |
| Low | DEBIAN-CVE-2026-27171 | zlib | no fix listed |
| Low | DEBIAN-CVE-2017-14159 | openldap | no fix listed |
| Low | DEBIAN-CVE-2025-69647 | binutils | no fix listed |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 5.0.14latest | yesterday | 2.67.0 | 0240428 | 4,508 |
| 5.0.13 | 19 days ago | 2.65.0 | 0247423 | 4,693 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.