karakeep 2.5.1 Helm chart

Name: karakeep Helm chart 2.5.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

self-hosters-by-night

Scored 14 Sept 2026

A Helm chart for Karakeep - AI-powered knowledge management and bookmark organizer

Version 2.5.1 23 days agoapp version 0.27.1 1Artifact Hub

karakeep 2.5.1 deploys 1 container image: ghcr.io/karakeep-app/karakeep. Across them, 503 findings — 0 critical, 3 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.1-r0, fixed in 3.5.5-r0.

Radar Score

5,2130371429

503 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/karakeep-app/karakeep	0.27.1	0371429	5,213

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

429 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-22801	libpng@1.6.47-r0	1.6.54-r0
Low	GHSA-3v7f-55p6-f55p	picomatch@4.0.2	4.0.4
Low	GHSA-x445-f3h2-j279	@auth/core@0.27.0	0.41.3
Low	GHSA-9vqf-7f2p-gf9v	hono@4.7.11	4.12.16
Low	GO-2023-2041	stdlib@go1.20.7	1.20.8
Low	ALPINE-CVE-2026-42769	openssl@3.5.1-r0	3.5.7-r0
Low	GO-2023-2043	stdlib@go1.20.7	1.20.8
Low	GO-2023-2186	stdlib@go1.20.7	1.20.11
Low	GHSA-g6gw-c38x-mqfc	hono@4.7.11	4.13.5
Low	ALPINE-CVE-2026-34979	cups@2.4.11-r0	2.4.18-r0
Low	GHSA-92pp-h63x-v22m	@hono/node-server@1.19.0	1.19.13
Low	ALPINE-CVE-2026-78408	util-linux@2.41-r9	2.41.6-r1
Low	GHSA-v8jm-5vwx-cfxm	dompurify@3.2.6	3.2.7
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@2.0.2	2.1.2
Low	GHSA-gh4j-gqv2-49f6	fast-xml-parser@4.4.1	5.7.0
Low	GHSA-76mc-f452-cxcm	dompurify@3.2.6	3.4.7
Low	GO-2024-3105	stdlib@go1.20.7	1.22.7
Low	GHSA-q8mj-m7cp-5q26	qs@6.14.0	6.15.2
Low	GHSA-5c6j-r48x-rmvq	serialize-javascript@6.0.2	7.0.3
Low	GHSA-p88m-4jfj-68fv	undici@6.21.3	6.27.0
Low	GO-2026-4981	stdlib@go1.23.10	1.25.10
Low	GO-2025-3563	stdlib@go1.20.7	1.23.8
Low	GHSA-vmf3-w455-68vh	tar@7.4.3	7.5.16
Low	GO-2026-4977	stdlib@go1.23.10	1.25.10
Low	GHSA-xpcf-pg52-r92g	hono@4.7.11	4.12.12
Low	GO-2024-2610	stdlib@go1.20.7	1.21.8
Low	ALPINE-CVE-2026-76957	expat@2.7.1-r0	2.8.4-r0
Low	GO-2026-4986	stdlib@go1.23.10	1.25.10
Low	GO-2026-4918	stdlib@go1.23.10	1.25.10
Low	GO-2026-4337	stdlib@go1.23.10	1.24.13
Low	ALPINE-CVE-2025-54764	mbedtls@3.6.4-r0	3.6.5-r0
Low	GHSA-39q2-94rc-95cp	dompurify@3.2.6	3.4.0
Low	GHSA-cj63-jhhr-wcxv	dompurify@3.2.6	3.3.2
Low	GO-2026-4601	stdlib@go1.23.10	1.25.8
Low	GHSA-gx5p-jg67-6x7h	next@15.3.3	15.5.16
Low	GHSA-qx2v-qp2m-jg93	postcss@8.4.31	8.5.10
Low	GHSA-wfc6-r584-vfw7	next@15.3.3	15.5.16
Low	GHSA-j6c9-x7qj-28xf	hono@4.7.11	4.12.25
Low	ALPINE-CVE-2026-56403	expat@2.7.1-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56404	expat@2.7.1-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56405	expat@2.7.1-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56408	expat@2.7.1-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56406	expat@2.7.1-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56407	expat@2.7.1-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56410	expat@2.7.1-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56411	expat@2.7.1-r0	2.8.2-r0
Low	GHSA-6hxr-mr5r-9836	re2@1.22.1	1.25.2
Low	GHSA-rp9w-3fw7-7cwq	dompurify@3.2.6	3.4.7
Low	GO-2026-5026	stdlib@go1.23.10	1.25.13
Low	ALPINE-CVE-2025-14104	util-linux@2.41-r9	2.41.6-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.5.1latest	23 days ago	0.27.1	0371429	5,213

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/self-hosters-by-night/karakeep.svg)](https://charts.stackradar.io/charts/self-hosters-by-night/karakeep)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.