StackRadar

karakeep Helm chart

rtomik-helm-chartsVerified publisher

Scored 14 Sept 2026

Karakeep helm chart for Kubernetes

Latest 0.0.1 1 year agoapp version 0.26.0 0Artifact Hub

karakeep 0.0.1 deploys 3 container images: ghcr.io/karakeep-app/karakeep, gcr.io/zenika-hub/alpine-chrome and getmeili/meilisearch. Across the 2 measured, 491 findings1 critical, 4 high. The highest contribution is ALPINE-CVE-2025-6965 in sqlite 3.49.2-r0, fixed in 3.49.2-r1.

Radar Score

5,3381481405

491 findings over 2 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
ghcr.io/karakeep-app/karakeep0.26.013723874,968
gcr.io/zenika-hub/alpine-chrome124unmeasured
getmeili/meilisearchv1.13.301918370

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

466 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGO-2023-2102stdlib@go1.20.71.20.10
LowGHSA-qffp-2rhf-9h96tar@6.2.17.5.10
LowGHSA-j759-j44w-7fr8@xmldom/xmldom@0.9.60.9.10
LowGHSA-23hp-3jrh-7fpwtar@6.2.17.5.19
LowALPINE-CVE-2026-42013gnutls@3.8.8-r03.8.13-r0
LowALPINE-CVE-2025-49795libxml2@2.13.8-r02.13.9-r0
LowALPINE-CVE-2026-76641expat@2.7.1-r02.8.4-r0
LowGHSA-93r5-fhx6-vmg9@xmldom/xmldom@0.9.60.9.12
LowGHSA-965w-775f-mr7g@xmldom/xmldom@0.9.60.9.12
LowGHSA-27p8-2357-5qqv@xmldom/xmldom@0.9.60.9.12
LowGHSA-4w3w-2rp5-g8jm@xmldom/xmldom@0.9.60.9.11
LowGHSA-c7q8-3ch8-vqpv@xmldom/xmldom@0.9.60.9.12
LowGHSA-w2rr-34g9-rvrj@xmldom/xmldom@0.9.60.9.11
LowALPINE-CVE-2026-3833gnutls@3.8.8-r03.8.13-r0
LowALPINE-CVE-2026-31789openssl@3.5.1-r03.5.6-r0
LowALPINE-CVE-2025-69419openssl@3.5.1-r03.5.5-r0
LowGHSA-8344-3jmq-59r6@xmldom/xmldom@0.9.60.9.12
LowGHSA-hmw2-7cc7-3qxxform-data@4.0.34.0.6
LowGHSA-3x4c-7xq6-9pq8next@14.2.2515.5.14
LowGHSA-pqf5-4pqq-29f5openssl@0.10.710.10.78
LowALPINE-CVE-2026-54874openssl@3.5.1-r03.5.8-r0
LowGHSA-7r86-cg39-jmmjminimatch@9.0.59.0.7
LowALPINE-CVE-2026-42766openssl@3.5.1-r03.5.7-r0
LowGHSA-3px3-54cx-rmw9@xmldom/xmldom@0.9.60.9.12
LowALPINE-CVE-2026-34980cups@2.4.11-r02.4.18-r0
LowGHSA-2qfp-q593-8484brotli@1.1.01.2.0
LowGHSA-8qq5-rm4j-mr97tar@6.2.17.5.3
LowGHSA-f269-vfmq-vjvjundici@6.21.36.24.0
LowALPINE-CVE-2025-48965mbedtls@3.6.3.1-r03.6.4-r0
LowALPINE-CVE-2026-63075openssl@3.5.1-r03.5.8-r0
LowGHSA-rcmh-qjqh-p98vnodemailer@7.0.47.0.11
LowALPINE-CVE-2026-3644python3@3.12.11-r03.12.14-r0
LowALPINE-CVE-2026-22184zlib@1.3.1-r21.3.2-r0
LowGHSA-v39h-62p7-jpjcfast-uri@3.0.63.1.2
LowGHSA-23c5-xmqv-rm74minimatch@9.0.59.0.7
LowGHSA-wh4c-j3r5-mjhp@xmldom/xmldom@0.9.60.9.9
LowGHSA-6mj3-qw4j-hgrw@xmldom/xmldom@0.9.60.9.12
LowGHSA-g53g-w8rj-fmg7@xmldom/xmldom@0.9.60.9.11
LowGHSA-mh99-v99m-4gvgbrace-expansion@2.0.12.1.3
LowGHSA-8c75-8mhr-p7r9openssl@0.10.710.10.78
LowGHSA-xmf8-cvqr-rfgj@auth/core@0.27.00.41.3
LowALPINE-CVE-2026-45186expat@2.7.1-r02.8.1-r0
LowGHSA-w4gp-fjgq-3q4ghappy-dom@17.4.920.8.9
LowALPINE-CVE-2026-42011gnutls@3.8.8-r03.8.13-r0
LowALPINE-CVE-2024-12243gnutls@3.8.8-r03.8.12-r0
LowGHSA-73rr-hh4g-fpgxdiff@5.2.05.2.2
LowALPINE-CVE-2025-32989gnutls@3.8.8-r03.8.12-r0
LowGHSA-r6ph-v2qm-q3c2cryptography@44.0.346.0.5
LowALPINE-CVE-2025-6395gnutls@3.8.8-r03.8.12-r0
LowGHSA-73wf-gq98-2v4gbrowserslist@4.25.04.28.7

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.0.1latest1 year ago0.26.014814055,338

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/rtomik-helm-charts/karakeep.svg)](https://charts.stackradar.io/charts/rtomik-helm-charts/karakeep)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.