StackRadar

lemmy Helm chart

ananace-chartsVerified publisher

Scored 14 Sept 2026

A link aggregator and forum for the fediverse

Latest 0.6.15 1 month agoapp version 0.19.20 10Artifact Hub

lemmy 0.6.15 deploys 5 container images: dessalines/lemmy, dessalines/lemmy-ui, asonix/pictrs, library/nginx and 1 more. Across the 4 measured, 572 findings — 1 critical, 8 high — 1 on CISA KEV. The highest contribution is ALPINE-CVE-2023-4863 in libwebp 1.2.3-r0, fixed in 1.2.3-r2.

Radar Score

7,21018140423

572 findings over 4 of 5 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images
ImageTagVulnerabilitiesRadar Score
dessalines/lemmy0.19.2000311451,921
dessalines/lemmy-ui0.19.2005812514,240
asonix/pictrs0.4.0-beta.191328231,015
library/nginx1-alpine000434
bitnami/postgresql15.4.0-debian-11-r45—unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

319 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGHSA-c27g-q93r-2cwflaunch-editor@2.8.12.9.0
LowDEBIAN-CVE-2026-66035libssh2@1.11.1-1+deb13u11.11.1-1+deb13u2
LowDEBIAN-CVE-2025-69720ncurses@6.5+20250216-2no fix listed
LowGHSA-8qq5-rm4j-mr97tar@2.2.17.5.3
LowDEBIAN-CVE-2026-86145pcre2@10.46-1~deb13u110.46-1~deb13u2
LowALPINE-CVE-2023-43787libx11@1.8-r01.8.7-r0
LowDEBIAN-CVE-2026-63075openssl@3.5.6-1~deb13u23.5.7-1~deb13u2
LowGHSA-v39h-62p7-jpjcfast-uri@3.0.13.1.2
LowGHSA-23c5-xmqv-rm74minimatch@5.1.65.1.8
LowGHSA-ppp5-5v6c-4jwpnode-forge@1.3.11.4.0
LowGHSA-mh99-v99m-4gvgbrace-expansion@1.1.111.1.17
LowGHSA-gcx4-mw62-g8wmrollup@2.79.12.79.2
LowDEBIAN-CVE-2026-6464postgresql-15@15.18-0+deb12u115.19-0+deb12u1
LowDEBIAN-CVE-2026-9538perl@5.40.1-6no fix listed
LowDEBIAN-CVE-2026-58050libssh2@1.11.1-1+deb13u11.11.1-1+deb13u2
LowDEBIAN-CVE-2020-15719openldap@2.6.10+dfsg-1no fix listed
LowGHSA-73wf-gq98-2v4gbrowserslist@4.23.34.28.7
LowALPINE-CVE-2023-27102libde265@1.0.11-r01.0.11-r1
LowGHSA-v2hh-gcrm-f6hxfast-uri@3.0.13.1.4
LowDEBIAN-CVE-2026-66034libssh2@1.11.1-1+deb13u11.11.1-1+deb13u2
LowGHSA-8x88-c5mf-7j5wtar@7.5.167.5.18
LowGHSA-v245-v573-v5vmlinkify-it@5.0.05.0.2
LowDEBIAN-CVE-2026-82208curl@8.14.1-2+deb13u4no fix listed
LowDEBIAN-CVE-2025-15661libssh2@1.10.0-3+b11.10.0-3+deb12u1
LowDEBIAN-CVE-2026-14668postgresql-15@15.18-0+deb12u115.19-0+deb12u1
LowDEBIAN-CVE-2026-54411pam@1.7.0-5no fix listed
LowDEBIAN-CVE-2026-42497perl@5.40.1-65.40.1-6+deb13u1
LowDEBIAN-CVE-2026-41992gzip@1.13-11.13-1+deb13u1
LowGHSA-xv26-6w52-cph6websocket-driver@0.7.40.7.5
LowGHSA-c2c7-rcm5-vvqjpicomatch@2.3.12.3.2
LowDEBIAN-CVE-2026-12064curl@8.14.1-2+deb13u4no fix listed
LowGHSA-mwp4-54f8-5fhrip-address@10.2.010.3.1
LowDEBIAN-CVE-2026-8932curl@8.14.1-2+deb13u4no fix listed
LowGHSA-2g4f-4pwh-qvx6ajv@8.17.18.18.0
LowDEBIAN-CVE-2026-8286curl@8.14.1-2+deb13u4no fix listed
LowDEBIAN-CVE-2026-75803openssl@3.5.6-1~deb13u23.5.7-1~deb13u2
LowGHSA-p8p7-x288-28g6request@2.85.0no fix listed
LowGHSA-r6q2-hw4h-h46wtar@2.2.17.5.4
LowGHSA-2883-xcg3-v3hhjs-yaml@3.14.13.15.2
LowGHSA-4c8g-83qw-93j6fast-uri@3.0.13.1.3
LowDEBIAN-CVE-2026-14679postgresql-15@15.18-0+deb12u115.19-0+deb12u1
LowGHSA-r292-9mhp-454mtar@7.5.167.5.21
LowGHSA-r4q5-vmmm-2653follow-redirects@1.15.61.16.0
LowGHSA-r28c-9q8g-f849postcss@8.4.418.5.18
LowDEBIAN-CVE-2026-58051libssh2@1.11.1-1+deb13u11.11.1-1+deb13u2
LowDEBIAN-CVE-2026-48959perl@5.40.1-65.40.1-6+deb13u1
LowDEBIAN-CVE-2026-5928glibc@2.41-12+deb13u32.41-12+deb13u4
LowDEBIAN-CVE-2026-7598libssh2@1.10.0-3+b11.10.0-3+deb12u1
LowGHSA-395f-4hp3-45gvshell-quote@1.8.11.9.0
LowGHSA-c83g-rgw3-j3cxbrowserslist@4.23.34.28.7

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.6.15latest1 month ago0.19.20181404237,210

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/ananace-charts/lemmy.svg)](https://charts.stackradar.io/charts/ananace-charts/lemmy)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.