music-assistant-server Helm chart

Name: music-assistant-server Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

andibraeu

Scored 14 Sept 2026

Music Assistant is a free, opensource Media library manager that connects to your streaming services and a wide range of connected speakers.

Latest 2.1.2 1 month agoapp version 2.9.9 0Artifact Hub

music-assistant-server 2.1.2 deploys 1 container image: ghcr.io/music-assistant/server. Across them, 588 findings — 0 critical, 1 high. The highest contribution is GHSA-4v7x-pqxf-cx7m in golang.org/x/net v0.17.0, fixed in 0.23.0. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

5,8170174512

588 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/music-assistant/server	2.9.9	0174512	5,817

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

588 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.46.0	0.52.0
Low	DEBIAN-CVE-2026-5435	glibc@2.36-9+deb12u14	no fix listed
Low	GHSA-h35f-9h28-mq5c	setuptools@81.0.0	83.0.0
Low	DEBIAN-CVE-2024-36615	ffmpeg@7:5.1.9-0+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-54369	acl@2.3.1-3	no fix listed
Low	DEBIAN-CVE-2025-52496	mbedtls@2.28.3-1	no fix listed
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.48.0	0.55.0
Low	GHSA-fj7v-r99m-22gq	pillow@12.2.0	12.3.0
Low	DEBIAN-CVE-2026-70628	ffmpeg@7:5.1.9-0+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-7017	perl@5.36.0-7+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-15806	python3.11@3.11.2-6+deb12u7	no fix listed
Low	DEBIAN-CVE-2026-16118	glib2.0@2.74.6-2+deb12u9	no fix listed
Low	DEBIAN-CVE-2021-4214	libpng1.6@1.6.39-2+deb12u5	no fix listed
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.1-4	no fix listed
Low	DEBIAN-CVE-2026-63388	libevent@2.1.12-stable-8	no fix listed
Low	DEBIAN-CVE-2026-75141	ffmpeg@7:5.1.9-0+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-75142	ffmpeg@7:5.1.9-0+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-75144	ffmpeg@7:5.1.9-0+deb12u1	no fix listed
Low	DEBIAN-CVE-2024-52615	avahi@0.8-10+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-52491	tiff@4.5.0-6+deb12u4	no fix listed
Low	DEBIAN-CVE-2023-1916	tiff@4.5.0-6+deb12u4	no fix listed
Low	DEBIAN-CVE-2026-58470	wget@1.21.3-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-13858	ffmpeg@7:5.1.9-0+deb12u1	no fix listed
Low	PYSEC-2026-3721	pip@26.1.2	26.2
Low	DEBIAN-CVE-2025-15079	curl@7.88.1-10+deb12u14	no fix listed
Low	GHSA-vvgc-356p-c3xw	golang.org/x/net@v0.17.0	0.38.0
Low	DEBIAN-CVE-2026-58224	samba@2:4.17.12+dfsg-0+deb12u4	no fix listed
Low	DEBIAN-CVE-2025-12781	python3.11@3.11.2-6+deb12u7	no fix listed
Low	DEBIAN-CVE-2026-58471	wget@1.21.3-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-58472	wget@1.21.3-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-15366	python3.11@3.11.2-6+deb12u7	no fix listed
Low	DEBIAN-CVE-2026-87910	python3.11@3.11.2-6+deb12u7	no fix listed
Low	DEBIAN-CVE-2026-25835	mbedtls@2.28.3-1	no fix listed
Low	DEBIAN-CVE-2026-6429	curl@7.88.1-10+deb12u14	no fix listed
Low	DEBIAN-CVE-2026-65706	ffmpeg@7:5.1.9-0+deb12u1	no fix listed
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.46.0	0.52.0
Low	DEBIAN-CVE-2026-53689	libnfs@4.0.0-1	4.0.0-1+deb12u1
Low	DEBIAN-CVE-2026-64833	ffmpeg@7:5.1.9-0+deb12u1	no fix listed
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.46.0	0.52.0
Low	DEBIAN-CVE-2026-12505	cifs-utils@2:7.0-2	no fix listed
Low	DEBIAN-CVE-2025-10148	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2026-24401	avahi@0.8-10+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-16461	rpcbind@1.2.6-6+b1	no fix listed
Low	DEBIAN-CVE-2026-1965	curl@7.88.1-10+deb12u14	no fix listed
Low	DEBIAN-CVE-2022-0563	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-11979	libxml2@2.9.14+dfsg-1.3~deb12u5	no fix listed
Low	DEBIAN-CVE-2026-7168	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2026-86140	libxml2@2.9.14+dfsg-1.3~deb12u5	no fix listed
Low	DEBIAN-CVE-2025-15367	python3.11@3.11.2-6+deb12u7	no fix listed
Low	DEBIAN-CVE-2026-3783	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.1.2latest	1 month ago	2.9.9	0174512	5,817

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/andibraeu/music-assistant-server.svg)](https://charts.stackradar.io/charts/andibraeu/music-assistant-server)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.