wekan 1.1.1 Helm chart
schmitzisScored 14 Sept 2026
Open Source kanban
Version 1.1.1 3 years agoapp version 5.65 0Artifact Hub
wekan 1.1.1 deploys 1 container image: quay.io/wekan/wekan. Across them, 254 findings — 0 critical, 6 high. The highest contribution is GHSA-phwq-j96m-2c2q in ejs 2.5.6, fixed in 3.1.7.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
1 image
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| quay.io/ | v5.65 | 0679169 | 3,638 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
254 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-22p9-wv53-3rq4 | linkify-it | 5.0.1 |
| Low | GHSA-j759-j44w-7fr8 | xmldom | no fix listed |
| Low | GHSA-23hp-3jrh-7fpw | tar | 7.5.19 |
| Low | GHSA-965w-775f-mr7g | xmldom | no fix listed |
| Low | GHSA-52cp-r559-cp3m | js-yaml | 3.15.0 |
| Low | GHSA-27p8-2357-5qqv | xmldom | no fix listed |
| Low | GHSA-4w3w-2rp5-g8jm | xmldom | no fix listed |
| Low | GHSA-c7q8-3ch8-vqpv | xmldom | no fix listed |
| Low | GHSA-w2rr-34g9-rvrj | xmldom | no fix listed |
| Low | GHSA-q67f-28xg-22rw | node-forge | 1.4.0 |
| Low | GHSA-8344-3jmq-59r6 | xmldom | no fix listed |
| Low | GHSA-hmw2-7cc7-3qxx | form-data | 2.5.6 |
| Low | GHSA-hqq7-2q2v-82xq | @braintree/ | 6.0.0 |
| Low | GHSA-7p89-p6hx-q4fw | basic-auth-connect | 1.1.0 |
| Low | GHSA-mgfv-m47x-4wqp | useragent | no fix listed |
| Low | GHSA-7r86-cg39-jmmj | minimatch | 3.1.3 |
| Low | GHSA-x9w5-v3q2-3rhw | browserify-sign | 4.2.2 |
| Low | GHSA-952p-6rrq-rcjv | micromatch | 4.0.8 |
| Low | GHSA-8qq5-rm4j-mr97 | tar | 7.5.3 |
| Low | GHSA-776f-qx25-q3cc | xml2js | 0.5.0 |
| Low | GHSA-rcmh-qjqh-p98v | nodemailer | 7.0.11 |
| Low | GHSA-6g33-f262-xjp4 | randomatic | 3.0.0 |
| Low | GHSA-qxch-whhj-8956 | multiparty | 4.3.0 |
| Low | GHSA-23c5-xmqv-rm74 | minimatch | 3.1.4 |
| Low | GHSA-ppp5-5v6c-4jwp | node-forge | 1.4.0 |
| Low | GHSA-wh4c-j3r5-mjhp | xmldom | no fix listed |
| Low | GHSA-qpx9-hpmf-5gmw | underscore | 1.13.8 |
| Low | GHSA-mh99-v99m-4gvg | brace-expansion | 1.1.17 |
| Low | GHSA-73rr-hh4g-fpgx | diff | 5.2.2 |
| Low | GHSA-8fr3-hfg3-gpgp | node-forge | 1.0.0 |
| Low | GHSA-w27v-7q3p-w38r | svgo | 2.8.4 |
| Low | GHSA-73wf-gq98-2v4g | browserslist | 4.28.7 |
| Low | GHSA-8x88-c5mf-7j5w | tar | 7.5.18 |
| Low | GHSA-v245-v573-v5vm | linkify-it | 5.0.2 |
| Low | GHSA-4hpf-3wq7-5rpr | is-my-json-valid | 2.17.2 |
| Low | GHSA-mm7p-fcc7-pg87 | nodemailer | 7.0.7 |
| Low | GHSA-xv26-6w52-cph6 | websocket-driver | 0.7.5 |
| Low | GHSA-2g4f-4pwh-qvx6 | ajv | 6.14.0 |
| Low | GHSA-p8p7-x288-28g6 | request | no fix listed |
| Low | GHSA-r6q2-hw4h-h46w | tar | 7.5.4 |
| Low | GHSA-2883-xcg3-v3hh | js-yaml | 3.15.2 |
| Low | GHSA-r292-9mhp-454m | tar | 7.5.21 |
| Low | GHSA-r28c-9q8g-f849 | postcss | 8.5.18 |
| Low | GHSA-c83g-rgw3-j3cx | browserslist | 4.28.7 |
| Low | GHSA-w5hq-g745-h8pq | uuid | 11.1.1 |
| Low | GHSA-w9mr-4mfr-499f | ms | 2.0.0 |
| Low | GHSA-w4pp-8pjf-rmxw | pacote | 21.5.1 |
| Low | GHSA-gxpj-cx7g-858c | debug | 2.6.9 |
| Low | GHSA-65x3-rw7q-gx94 | multiparty | 4.3.0 |
| Low | GHSA-2328-f5f3-gj25 | node-forge | 1.4.0 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/schmitzis/wekan)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.