wekan Helm chart
schmitzisScored 14 Sept 2026
Open Source kanban
Latest 1.1.1 3 years agoapp version 5.65 0Artifact Hub
wekan 1.1.1 deploys 1 container image: quay.io/wekan/wekan. Across them, 254 findings — 0 critical, 6 high. The highest contribution is GHSA-phwq-j96m-2c2q in ejs 2.5.6, fixed in 3.1.7.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
1 image
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| quay.io/ | v5.65 | 0679169 | 3,638 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
254 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-9ppj-qmqm-q256 | tar | 7.5.11 |
| Low | GHSA-4jwp-vfvf-657p | bson | 1.1.4 |
| Low | GHSA-2r2c-g63r-vccr | node-forge | 1.3.0 |
| Low | GHSA-2p49-hgcm-8545 | svgo | 2.8.3 |
| Low | GHSA-968p-4wvh-cqc8 | @babel/ | 7.26.10 |
| Low | GHSA-968p-4wvh-cqc8 | @babel/ | 7.26.10 |
| Low | GHSA-q8gg-vj6m-hgmj | @braintree/ | 6.0.1 |
| Low | GHSA-7fh5-64p2-3v2j | postcss | 8.4.31 |
| Low | GHSA-xwg4-73v4-xw9w | nanoid | 3.3.12 |
| Low | GHSA-f886-m6hf-6m8v | brace-expansion | 1.1.13 |
| Low | GHSA-xh3c-6gcq-g4rv | multiparty | 4.3.0 |
| Low | GHSA-6h8r-xr42-gp59 | xmldom | no fix listed |
| Low | GHSA-fxqj-rqcc-2cmp | postcss | 8.5.23 |
| Low | GHSA-h6q6-9hqw-rwfv | xmldom | 0.5.0 |
| Low | GHSA-83g3-92jg-28cx | tar | 7.5.8 |
| Low | GHSA-w8wr-v893-vjvp | tar | 7.5.18 |
| Low | GHSA-49q7-c7j4-3p7m | elliptic | 6.5.7 |
| Low | GHSA-hpcv-96wg-7vj8 | dompurify | 3.4.6 |
| Low | GHSA-p6gq-j5cr-w38f | nodemailer | 9.0.1 |
| Low | GHSA-6x64-9x62-f2gx | mermaid | 10.9.8 |
| Low | GHSA-6gmq-8vp8-gcm6 | xmldom | no fix listed |
| Low | GHSA-vvjj-xcjg-gr5g | nodemailer | 8.0.5 |
| Low | MAL-2022-4691 | monorepo-symlink-test | no fix listed |
| Low | MAL-2025-28475 | orchestrator | no fix listed |
| Low | GHSA-r47g-fvhr-h676 | dompurify | 3.4.6 |
| Low | GHSA-65ch-62r8-g69g | node-forge | 1.3.2 |
| Low | GHSA-cm22-4g7w-348p | serve-static | 1.16.0 |
| Low | GHSA-crv5-9vww-q3g8 | dompurify | 3.4.0 |
| Low | GHSA-gvwx-54wh-qm9j | tar | 7.5.17 |
| Low | GHSA-434g-2637-qmqr | elliptic | 6.5.6 |
| Low | GHSA-qrpm-p2h7-hrv2 | nanoid | 3.1.31 |
| Low | GHSA-vjh7-7g9h-fjfh | elliptic | 6.6.1 |
| Low | GHSA-87f9-hvmw-gh4p | mermaid | 10.9.6 |
| Low | GHSA-378v-28hj-76wf | bn.js | 4.12.3 |
| Low | GHSA-977x-g7h5-7qgw | elliptic | 6.5.7 |
| Low | GHSA-h8r8-wccr-v5f2 | dompurify | 3.3.2 |
| Low | GHSA-28wg-ghj8-5hjv | nanoid | 3.3.16 |
| Low | GHSA-m6fv-jmcg-4jfg | send | 0.19.0 |
| Low | GHSA-h7mw-gpvr-xq4m | dompurify | 3.4.0 |
| Low | GHSA-mp7j-qc5w-4988 | websocket-driver | 0.7.5 |
| Low | GHSA-2v37-7h3g-55p8 | nanoid | 3.3.18 |
| Low | GHSA-4vpr-x523-8j87 | svgo | 2.8.4 |
| Low | GHSA-x3vm-38hw-55wf | mermaid | 9.1.2 |
| Low | GHSA-fc9h-whq2-v747 | elliptic | 6.6.0 |
| Low | GHSA-mh29-5h37-fv8m | js-yaml | 3.14.2 |
| Low | GHSA-ghcm-xqfw-q4vr | mermaid | 10.9.6 |
| Low | GHSA-h67p-54hq-rp68 | js-yaml | 3.15.0 |
| Low | GHSA-6m6c-36f7-fhxh | mermaid | 10.9.6 |
| Low | GHSA-6v5v-wf23-fmfq | markdown-it | 14.2.0 |
| Low | GHSA-vhxf-7vqr-mrjg | dompurify | 3.2.4 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/schmitzis/wekan)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.