StackRadar

lemmy Helm chart

ananace-chartsVerified publisher

Scored 14 Sept 2026

A link aggregator and forum for the fediverse

Latest 0.6.15 1 month agoapp version 0.19.20 10Artifact Hub

lemmy 0.6.15 deploys 5 container images: dessalines/lemmy, dessalines/lemmy-ui, asonix/pictrs, library/nginx and 1 more. Across the 4 measured, 572 findings1 critical, 8 high 1 on CISA KEV. The highest contribution is ALPINE-CVE-2023-4863 in libwebp 1.2.3-r0, fixed in 1.2.3-r2.

Radar Score

7,21018140423

572 findings over 4 of 5 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images
ImageTagVulnerabilitiesRadar Score
dessalines/lemmy0.19.2000311451,921
dessalines/lemmy-ui0.19.2005812514,240
asonix/pictrs0.4.0-beta.191328231,015
library/nginx1-alpine000434
bitnami/postgresql15.4.0-debian-11-r45unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

448 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGHSA-v245-v573-v5vmlinkify-it@5.0.05.0.2
LowDEBIAN-CVE-2026-82208curl@8.14.1-2+deb13u4no fix listed
LowDEBIAN-CVE-2025-15661libssh2@1.10.0-3+b11.10.0-3+deb12u1
LowDEBIAN-CVE-2026-14668postgresql-15@15.18-0+deb12u115.19-0+deb12u1
LowDEBIAN-CVE-2026-54411pam@1.7.0-5no fix listed
LowDEBIAN-CVE-2026-42497perl@5.40.1-65.40.1-6+deb13u1
LowDEBIAN-CVE-2026-41992gzip@1.13-11.13-1+deb13u1
LowGHSA-xv26-6w52-cph6websocket-driver@0.7.40.7.5
LowGHSA-c2c7-rcm5-vvqjpicomatch@2.3.12.3.2
LowDEBIAN-CVE-2026-12064curl@8.14.1-2+deb13u4no fix listed
LowGHSA-mwp4-54f8-5fhrip-address@10.2.010.3.1
LowDEBIAN-CVE-2026-8932curl@8.14.1-2+deb13u4no fix listed
LowGHSA-2g4f-4pwh-qvx6ajv@8.17.18.18.0
LowDEBIAN-CVE-2026-8286curl@8.14.1-2+deb13u4no fix listed
LowDEBIAN-CVE-2026-75803openssl@3.5.6-1~deb13u23.5.7-1~deb13u2
LowGHSA-p8p7-x288-28g6request@2.85.0no fix listed
LowGHSA-r6q2-hw4h-h46wtar@2.2.17.5.4
LowGHSA-2883-xcg3-v3hhjs-yaml@3.14.13.15.2
LowGHSA-4c8g-83qw-93j6fast-uri@3.0.13.1.3
LowDEBIAN-CVE-2026-14679postgresql-15@15.18-0+deb12u115.19-0+deb12u1
LowGHSA-r292-9mhp-454mtar@7.5.167.5.21
LowGHSA-r4q5-vmmm-2653follow-redirects@1.15.61.16.0
LowGHSA-r28c-9q8g-f849postcss@8.4.418.5.18
LowDEBIAN-CVE-2026-58051libssh2@1.11.1-1+deb13u11.11.1-1+deb13u2
LowDEBIAN-CVE-2026-48959perl@5.40.1-65.40.1-6+deb13u1
LowDEBIAN-CVE-2026-5928glibc@2.41-12+deb13u32.41-12+deb13u4
LowDEBIAN-CVE-2026-7598libssh2@1.10.0-3+b11.10.0-3+deb12u1
LowGHSA-395f-4hp3-45gvshell-quote@1.8.11.9.0
LowGHSA-c83g-rgw3-j3cxbrowserslist@4.23.34.28.7
LowDEBIAN-CVE-2026-6791glibc@2.41-12+deb13u3no fix listed
LowDEBIAN-CVE-2022-27943gcc-12@12.2.0-14+deb12u1no fix listed
LowDEBIAN-CVE-2026-8458curl@8.14.1-2+deb13u4no fix listed
LowDEBIAN-CVE-2026-6253curl@7.88.1-10+deb12u15no fix listed
LowGHSA-w5hq-g745-h8pquuid@3.2.111.1.1
LowGHSA-2328-f5f3-gj25node-forge@1.3.11.4.0
LowGHSA-9ppj-qmqm-q256tar@2.2.17.5.11
LowGHSA-4xrf-jv44-h6hhip-address@10.2.010.2.2
LowDEBIAN-CVE-2026-9547curl@8.14.1-2+deb13u4no fix listed
LowGHSA-968p-4wvh-cqc8@babel/helpers@7.25.07.26.10
LowGHSA-968p-4wvh-cqc8@babel/runtime@7.25.47.26.10
LowDEBIAN-CVE-2021-45346sqlite3@3.46.1-7+deb13u1no fix listed
LowDEBIAN-CVE-2025-8941pam@1.7.0-5no fix listed
LowDEBIAN-CVE-2025-70873sqlite3@3.46.1-7+deb13u1no fix listed
LowDEBIAN-CVE-2026-57432perl@5.40.1-65.40.1-6+deb13u1
LowDEBIAN-CVE-2026-6276curl@7.88.1-10+deb12u15no fix listed
LowGHSA-64mm-vxmg-q3vjhttp-proxy-middleware@2.0.62.0.10
LowDEBIAN-CVE-2024-26458krb5@1.21.3-5+deb13u1no fix listed
LowGHSA-xwg4-73v4-xw9wnanoid@3.3.73.3.12
LowALPINE-CVE-2025-26519musl@1.2.3-r21.2.3-r4
LowGHSA-f886-m6hf-6m8vbrace-expansion@1.1.111.1.13

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.6.15latest1 month ago0.19.20181404237,210

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/ananace-charts/lemmy.svg)](https://charts.stackradar.io/charts/ananace-charts/lemmy)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.