wekan 1.1.1 Helm chart
schmitzisScored 14 Sept 2026
Open Source kanban
Version 1.1.1 3 years agoapp version 5.65 0Artifact Hub
wekan 1.1.1 deploys 1 container image: quay.io/wekan/wekan. Across them, 254 findings — 0 critical, 6 high. The highest contribution is GHSA-phwq-j96m-2c2q in ejs 2.5.6, fixed in 3.1.7.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
1 image
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| quay.io/ | v5.65 | 0679169 | 3,638 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
254 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-3jxr-9vmj-r5cp | brace-expansion | 1.1.16 |
| Low | GHSA-mwcw-c2x4-8c55 | nanoid | 3.3.8 |
| Low | GHSA-76mc-f452-cxcm | dompurify | 3.4.7 |
| Low | GHSA-vmf3-w455-68vh | tar | 7.5.16 |
| Low | GHSA-xcj9-5m2h-648r | mermaid | 10.9.6 |
| Low | GHSA-4vj7-5mj6-jm8m | morgan | 1.11.0 |
| Low | GHSA-39q2-94rc-95cp | dompurify | 3.4.0 |
| Low | GHSA-vxvm-qww3-2fh7 | mongodb | 3.6.10 |
| Low | GHSA-cj63-jhhr-wcxv | dompurify | 3.3.2 |
| Low | GHSA-qx2v-qp2m-jg93 | postcss | 8.5.10 |
| Low | GHSA-9h6g-pr28-7cqp | nodemailer | 6.9.9 |
| Low | GHSA-f7q4-pwc6-w24p | elliptic | 6.5.7 |
| Low | GHSA-rp9w-3fw7-7cwq | dompurify | 3.4.7 |
| Low | GHSA-2x7j-588g-ccc2 | nodemailer | 9.1.0 |
| Low | GHSA-36jr-mh4h-2g58 | d3-color | 3.1.0 |
| Low | GHSA-5p4m-2wfm-xmqj | js-yaml | 3.15.1 |
| Low | GHSA-6chw-6frg-f759 | acorn | 5.7.4 |
| Low | GHSA-c27r-x354-4m68 | xml-crypto | 2.0.0 |
| Low | GHSA-j4mr-9xw3-c9jx | base64-url | 2.0.0 |
| Low | GHSA-mh5c-679w-hh4r | mongodb | 3.1.13 |
| Low | GHSA-55q2-fjhq-7xh7 | dompurify | 3.4.13 |
| Low | GHSA-ghr5-ch3p-vcr6 | ejs | 3.1.10 |
| Low | GHSA-4mjr-xmp4-gh2g | qs | 6.16.0 |
| Low | GHSA-jxfw-x594-9x9m | morgan | 1.12.0 |
| Low | GHSA-m4gq-x24j-jpmf | mermaid | 10.9.3 |
| Low | GHSA-r7g4-qg5f-qqm2 | nodemailer | 8.0.8 |
| Low | GHSA-848j-6mx2-7j84 | elliptic | no fix listed |
| Low | GHSA-268h-hp4c-crq3 | nodemailer | 8.0.9 |
| Low | GHSA-wqvq-jvpq-h66f | nodemailer | 8.0.9 |
| Low | GHSA-w7rc-rwvf-8q5r | node-fetch | 2.6.1 |
| Low | GHSA-cmwh-pvxp-8882 | dompurify | 3.4.11 |
| Low | GHSA-wmmp-3585-3rmp | nodemailer | 9.1.0 |
| Low | GHSA-cjmm-f4jc-qw8r | dompurify | 3.3.2 |
| Low | GHSA-w7fw-mjwx-w883 | qs | 6.14.2 |
| Low | GHSA-6rw7-vpxm-498p | qs | 6.14.1 |
| Low | GHSA-v422-hmwv-36x6 | body-parser | 1.20.6 |
| Low | GHSA-8m3c-c648-2xjj | nodemailer | 9.1.1 |
| Low | GHSA-v6h2-p8h4-qcjw | brace-expansion | 1.1.12 |
| Low | GHSA-xc7v-wxcw-j472 | tunnel-agent | 0.6.0 |
| Low | GHSA-c7w3-x93f-qmm8 | nodemailer | 8.0.4 |
| Low | GHSA-78xj-cgh5-2h22 | ip | 1.1.9 |
| Low | GHSA-76c9-3jph-rj3q | on-headers | 1.1.0 |
| Low | GHSA-pxg6-pf52-xh8x | cookie | 0.7.0 |
| Low | GHSA-52f5-9888-hmc6 | tmp | 0.2.4 |
| Low | GHSA-4gmj-3p3h-gm8h | es5-ext | 0.10.63 |
| Low | GHSA-4x5r-pxfx-6jf8 | @babel/ | 7.29.6 |
| Low | GHSA-vpq2-c234-7xj6 | @tootallnate/ | 2.0.1 |
| Low | GHSA-c4c3-pg64-4m4v | mermaid | 10.9.8 |
| Low | GHSA-vxr8-fq34-vvx9 | dompurify | 3.4.9 |
| Low | GHSA-c2j3-45gr-mqc4 | dompurify | 3.4.12 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/schmitzis/wekan)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.