excalidash 2026.10.1 Helm chart

Name: excalidash Helm chart 2026.10.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

unxwares

Scored 23 Oct 2026

A helm chart for ExcaliDash, A self-hosted dashboard and organizer for Excalidraw with live collaboration features

Version 2026.10.1 2 days agoapp version 0.6.5 0Artifact Hub

excalidash 2026.10.1 deploys 2 container images: zimengxiong/excalidash-backend and zimengxiong/excalidash-frontend. Across them, 55 findings — 0 critical, 0 high. The highest contribution is GHSA-5j98-mcp5-4vw2 in glob 10.4.2, fixed in 10.5.0. Chart.yaml declares kubeVersion >=1.27.0-0; rendered for Kubernetes 1.27.0.

Radar Score

59400451

55 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
zimengxiong/excalidash-backend	0.6.5	00440	491
zimengxiong/excalidash-frontend	0.6.5	00011	103

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

50 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-77214	expat@2.8.5-r0	2.9.0-r0
Low	GHSA-mwp4-54f8-5fhr	ip-address@9.0.5	10.3.1
Low	GHSA-rgw5-rvv9-x895	brace-expansion@2.0.1	2.1.4
Low	ALPINE-CVE-2026-4775	tiff@4.7.1-r0	4.7.2-r0
Low	GHSA-mh99-v99m-4gvg	brace-expansion@2.0.1	2.1.3
Low	GHSA-7r86-cg39-jmmj	minimatch@9.0.5	9.0.7
Low	GHSA-23hp-3jrh-7fpw	tar@6.2.1	7.5.19
Low	GHSA-ch52-4w7c-c8xp	http-cache-semantics@4.1.1	no fix listed
Low	GHSA-r292-9mhp-454m	tar@6.2.1	7.5.21
Low	GHSA-qffp-2rhf-9h96	tar@6.2.1	7.5.10
Low	GHSA-23c5-xmqv-rm74	minimatch@9.0.5	9.0.7
Low	GHSA-8qq5-rm4j-mr97	tar@6.2.1	7.5.3
Low	ALPINE-CVE-2026-85091	zlib@1.3.2-r0	1.3.2-r1
Low	GHSA-73rr-hh4g-fpgx	diff@5.2.0	5.2.2
Low	GHSA-jqcg-44mw-7w3h	proxy-addr@2.0.7	2.0.8
Low	GHSA-8x88-c5mf-7j5w	tar@6.2.1	7.5.18
Low	GHSA-r6q2-hw4h-h46w	tar@6.2.1	7.5.4
Low	GHSA-f886-m6hf-6m8v	brace-expansion@2.0.1	2.0.3
Low	GHSA-6j4f-fj2g-mc7p	brace-expansion@2.0.1	2.1.5
Low	GHSA-qhr7-859c-m2p7	brace-expansion@2.0.1	2.1.6
Low	GHSA-68fv-2mgg-jv7q	source-map-js@1.2.1	1.2.2
Low	GHSA-w4pp-8pjf-rmxw	pacote@18.0.6	21.5.1
Low	GHSA-9ppj-qmqm-q256	tar@6.2.1	7.5.11
Low	GHSA-rpw4-54j3-4h4q	ip-address@9.0.5	10.5.1
Low	GHSA-w8wr-v893-vjvp	tar@6.2.1	7.5.18
Low	ALPINE-CVE-2026-103111	pcre2@10.48-r0	10.49-r0
Low	GHSA-j6r3-76f7-8jcv	ip-address@9.0.5	10.7.1
Low	ALPINE-CVE-2026-88806	libx11@1.8.13-r0	1.8.14-r0
Low	GHSA-83g3-92jg-28cx	tar@6.2.1	7.5.8
Low	GHSA-rj75-hqrm-r3gf	postcss-selector-parser@6.1.0	7.1.6
Low	GHSA-52v5-jr5w-gjxr	sigstore@2.3.1	4.1.1
Low	GHSA-cg2g-xh64-v4q7	dompurify@3.4.16	3.4.17
Low	GHSA-v2v4-37r5-5v8g	ip-address@9.0.5	10.1.1
Low	GHSA-gvwx-54wh-qm9j	tar@6.2.1	7.5.17
Low	GHSA-h3mg-xc3c-68pw	ip-address@9.0.5	10.7.1
Low	ALPINE-CVE-2026-102633	expat@2.8.5-r0	2.9.0-r0
Low	ALPINE-CVE-2026-58055	nghttp2@1.69.0-r0	1.70.0-r0
Low	GHSA-rxp7-6hxx-x8q5	ip-address@9.0.5	10.7.4
Low	ALPINE-CVE-2026-94283	libx11@1.8.13-r0	1.8.14-r0
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@2.0.1	2.1.2
Low	GHSA-vmf3-w455-68vh	tar@6.2.1	7.5.16
Low	GHSA-w9m9-85wc-3x92	postcss-selector-parser@6.1.0	6.1.3
Low	GHSA-q2hr-2g5m-vwhr	brace-expansion@2.0.1	2.1.7
Low	GHSA-mrv2-3pqr-j5jr	dompurify@3.4.16	3.4.17
Low	GHSA-jfc7-64v2-mr8c	@sigstore/core@1.1.0	3.2.1
Low	GHSA-v6h2-p8h4-qcjw	brace-expansion@2.0.1	2.0.2
Low	ALPINE-CVE-2026-94284	libx11@1.8.13-r0	1.8.14-r0
Low	ALPINE-CVE-2026-94287	libxpm@3.5.19-r0	3.5.20-r0
Low	ALPINE-CVE-2026-94285	libx11@1.8.13-r0	1.8.14-r0
Low	GHSA-c6gr-qvv4-5v3f	dompurify@3.4.16	3.4.17

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2026.10.1latest	2 days ago	0.6.5	00451	594
2026.2.5	7 months ago	0.4.27	0057190	2,909

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/unxwares/excalidash.svg)](https://charts.stackradar.io/charts/unxwares/excalidash)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.