StackRadar

vikunja 1.0.0 Helm chart

schmitzis

Scored 14 Sept 2026

The open-source, self-hostable to-do app. Organize everything, on all platforms.

Version 1.0.0 1 year agoapp version 0.24.6 0Artifact Hub

vikunja 1.0.0 deploys 3 container images: typesense/typesense, vikunja/vikunja and bitnami/postgresql. Across the 2 measured, 359 findings2 critical, 5 high 1 on CISA KEV. The highest contribution is UBUNTU-CVE-2023-4911 in glibc 2.35-0ubuntu3.1, fixed in 2.35-0ubuntu3.4. Chart.yaml declares kubeVersion >= 1.19; rendered for Kubernetes 1.19.0.

Radar Score

4,0702560292

359 findings over 2 of 3 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
typesense/typesense0.25.125501472,728
vikunja/vikunja0.24.600101451,342
bitnami/postgresql17.2.0-debian-12-r8unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

359 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowUBUNTU-CVE-2025-6020pam@1.4.0-11ubuntu2.31.4.0-11ubuntu2.6
LowUBUNTU-CVE-2026-86145pcre2@10.39-3ubuntu0.1no fix listed
LowGHSA-q4h4-gmj2-qvw2golang.org/x/crypto@v0.27.00.52.0
LowUBUNTU-CVE-2023-47039perl@5.34.0-3ubuntu1.2no fix listed
LowGHSA-w879-237q-wc7rgolang.org/x/crypto@v0.27.00.52.0
LowUBUNTU-CVE-2025-15281glibc@2.35-0ubuntu3.12.35-0ubuntu3.13
LowUBUNTU-CVE-2023-1255openssl@3.0.2-0ubuntu1.103.0.2-0ubuntu1.10+Fips1
LowUBUNTU-CVE-2025-6297dpkg@1.21.1ubuntu2.21.21.1ubuntu2.6
LowGHSA-vq4q-79hh-q767code.vikunja.io/api@v0.24.6no fix listed
LowUBUNTU-CVE-2026-42011gnutls28@3.7.3-4ubuntu1.23.7.3-4ubuntu1.9
LowUBUNTU-CVE-2024-12243gnutls28@3.7.3-4ubuntu1.23.7.3-4ubuntu1.6
LowUBUNTU-CVE-2025-32989gnutls28@3.7.3-4ubuntu1.23.7.3-4ubuntu1.7
LowUBUNTU-CVE-2026-9538perl@5.34.0-3ubuntu1.2no fix listed
LowUBUNTU-CVE-2025-6395gnutls28@3.7.3-4ubuntu1.23.7.3-4ubuntu1.7
LowGHSA-gg93-x632-9ccvcode.vikunja.io/api@v0.24.62.4.0
LowUBUNTU-CVE-2025-24528krb5@1.19.2-2ubuntu0.21.19.2-2ubuntu0.6
LowGHSA-vfp3-v2gw-7wfqgithub.com/labstack/echo/v4@v4.12.04.15.3
LowUBUNTU-CVE-2026-85091zlib@1:1.2.11.dfsg-2ubuntu9.2no fix listed
LowGHSA-7jp5-298q-jg98code.vikunja.io/api@v0.24.6no fix listed
LowUBUNTU-CVE-2026-42497perl@5.34.0-3ubuntu1.2no fix listed
LowUBUNTU-CVE-2026-41992gzip@1.10-4ubuntu4.11.10-4ubuntu4.2
LowUBUNTU-CVE-2023-7008systemd@249.11-0ubuntu3.9249.11-0ubuntu3.21
LowUBUNTU-CVE-2022-3715bash@5.1-6ubuntu15.1-6ubuntu1.1
LowUBUNTU-CVE-2024-4603openssl@3.0.2-0ubuntu1.103.0.2-0ubuntu1.17
LowGHSA-8hp8-9fhr-pfm9code.vikunja.io/api@v0.24.62.2.2
LowGHSA-2vq4-854f-5c72code.vikunja.io/api@v0.24.62.3.0
LowUBUNTU-CVE-2024-12133libtasn1-6@4.18.0-4build14.18.0-4ubuntu0.1
LowUBUNTU-CVE-2026-75803openssl@3.0.2-0ubuntu1.103.0.2-0ubuntu1.29
LowUBUNTU-CVE-2024-33602glibc@2.35-0ubuntu3.12.35-0ubuntu3.8
LowGHSA-94xm-jj8x-3cr4code.vikunja.io/api@v0.24.62.2.1
LowUBUNTU-CVE-2026-4046glibc@2.35-0ubuntu3.12.35-0ubuntu3.14
LowUBUNTU-CVE-2026-48959perl@5.34.0-3ubuntu1.2no fix listed
LowUBUNTU-CVE-2026-5928glibc@2.35-0ubuntu3.12.35-0ubuntu3.14
LowUBUNTU-CVE-2026-3833gnutls28@3.7.3-4ubuntu1.23.7.3-4ubuntu1.9
LowUBUNTU-CVE-2026-6791glibc@2.35-0ubuntu3.12.35-0ubuntu3.15
LowUBUNTU-CVE-2022-27943gcc-12@12.3.0-1ubuntu1~22.04no fix listed
LowGHSA-m4g2-2q66-vc9vcode.vikunja.io/api@v0.24.6no fix listed
LowGHSA-q675-qj96-32m9golang.org/x/image@v0.20.00.41.0
LowGHSA-jfmm-mjcp-8wq2code.vikunja.io/api@v0.24.62.2.1
LowGO-2026-4341stdlib@go1.23.41.24.12
LowGHSA-c6gw-w398-hv78github.com/go-jose/go-jose/v4@v4.0.24.0.5
LowUBUNTU-CVE-2026-42012gnutls28@3.7.3-4ubuntu1.23.7.3-4ubuntu1.9
LowUBUNTU-CVE-2026-40355krb5@1.19.2-2ubuntu0.21.19.2-2ubuntu0.8
LowUBUNTU-CVE-2026-57432perl@5.34.0-3ubuntu1.25.34.0-3ubuntu1.8
LowUBUNTU-CVE-2026-40356krb5@1.19.2-2ubuntu0.21.19.2-2ubuntu0.8
LowUBUNTU-CVE-2024-26458krb5@1.19.2-2ubuntu0.21.19.2-2ubuntu0.6
LowUBUNTU-CVE-2016-2781coreutils@8.32-4.1ubuntu1no fix listed
LowUBUNTU-CVE-2026-42767openssl@3.0.2-0ubuntu1.103.0.2-0ubuntu1.25
LowGHSA-8jvc-mcx6-r4cgcode.vikunja.io/api@v0.24.62.3.0
LowUBUNTU-CVE-2026-48962perl@5.34.0-3ubuntu1.2no fix listed

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.0latest1 year ago0.24.625602924,070

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/schmitzis/vikunja.svg)](https://charts.stackradar.io/charts/schmitzis/vikunja)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.