StackRadar

ddosify Helm chart

anteonVerified publisher

Scored 14 Sept 2026

A Helm chart for Ddosify Self Hosted

Latest 1.7.5 2 years agodeploys tag 1.0.6 0Artifact Hub

ddosify 1.7.5 deploys 13 container images: library/busybox, ddosify/selfhosted_alaz_backend, ddosify/selfhosted_backend, ddosify/selfhosted_frontend and 9 more. Across them, 2,124 findings — 11 critical, 53 high — 6 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 7.88.1-r1, fixed in 8.4.0-r0.

Radar Score

25,66911533721,686

2,124 findings over 13 of 13 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

13 images
ImageTagVulnerabilitiesRadar Score
library/busybox×121.36.100000
ddosify/selfhosted_alaz_backend×41.0.6471094446,694
ddosify/selfhosted_backend×32.6.1144964186,057
ddosify/selfhosted_frontend2.7.4031516652
ddosify/selfhosted_hammer×21.4.206101281,615
ddosify/selfhosted_hammermanager×31.2.40218751,181
library/influxdb2.6.1-alpine29401592,816
library/nginx1.25.4-alpine031516652
library/postgres13.6-alpine15141703
prom/prometheusv2.37.904171351,593
library/rabbitmq×43.13.0-alpine02511311
library/redis×27.2.4-alpine0171201,206
chrislusf/seaweedfs3.5607261632,189

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

944 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumALPINE-CVE-2024-45490expat@2.6.2-r02.6.3-r0
MediumDEBIAN-CVE-2024-45490expat@2.5.0-12.5.0-1+deb12u1
MediumGHSA-qw24-gh76-8rvvgithub.com/rclone/rclone@v1.63.11.74.3
MediumALPINE-CVE-2022-2097openssl@1.1.1n-r01.1.1q-r0
MediumDEBIAN-CVE-2024-33599glibc@2.36-9+deb12u42.36-9+deb12u7
MediumALPINE-CVE-2023-5678openssl@1.1.1n-r01.1.1w-r1
MediumDEBIAN-CVE-2023-5678openssl@3.0.11-1~deb12u23.0.13-1~deb12u1
MediumPYSEC-2026-2269pyopenssl@24.1.026.0.0
MediumALPINE-CVE-2022-1304e2fsprogs@1.46.4-r01.46.6-r0
MediumALPINE-CVE-2025-9230openssl@3.1.4-r53.1.8-r1
MediumDEBIAN-CVE-2025-9230openssl@3.0.11-1~deb12u23.0.17-1~deb12u3
MediumGHSA-69ch-w2m2-3vjpgolang.org/x/text@v0.3.70.3.8
MediumALPINE-CVE-2023-6129openssl@3.1.2-r03.1.4-r3
MediumDEBIAN-CVE-2023-6129openssl@3.0.11-1~deb12u23.0.13-1~deb12u1
MediumGHSA-gvg8-93h5-g6qqdjango@4.2.114.2.28
MediumDEBIAN-CVE-2026-33845gnutls28@3.7.9-2+deb12u23.7.9-2+deb12u7
MediumPYSEC-2025-106django@4.2.114.2.25
MediumDEBIAN-CVE-2011-3389gnutls28@3.7.9-2+deb12u2no fix listed
MediumGHSA-8498-2h75-472jdjango@4.2.114.2.17
MediumDEBIAN-CVE-2025-49794libxml2@2.9.14+dfsg-1.3~deb12u12.9.14+dfsg-1.3~deb12u3
MediumPYSEC-2024-60idna@3.63.7
MediumGO-2026-4887github.com/docker/docker@v20.10.24+incompatibleno fix listed
MediumDEBIAN-CVE-2024-25062libxml2@2.9.14+dfsg-1.3~deb12u12.9.14+dfsg-1.3~deb12u2
MediumGHSA-w62w-66v9-vvgvgithub.com/seaweedfs/seaweedfs@v0.0.0-20230911050541-5407b86766690.0.0-20260526080459-dd1b4287899e
MediumDEBIAN-CVE-2025-6021libxml2@2.9.14+dfsg-1.3~deb12u12.9.14+dfsg-1.3~deb12u3
MediumGHSA-rcjv-mgp8-qvmrgo.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.32.00.44.0
MediumDEBIAN-CVE-2026-42009gnutls28@3.7.9-2+deb12u23.7.9-2+deb12u7
MediumDEBIAN-CVE-2026-63076openssl@3.0.11-1~deb12u2no fix listed
MediumDEBIAN-CVE-2025-59375expat@2.5.0-1no fix listed
MediumALPINE-CVE-2024-8176expat@2.6.2-r02.7.0-r0
MediumDEBIAN-CVE-2024-8176expat@2.5.0-12.5.0-1+deb12u2
MediumALPINE-CVE-2023-28320curl@7.88.1-r18.1.0-r0
MediumALPINE-CVE-2024-9681curl@8.5.0-r08.11.0-r0
MediumALPINE-CVE-2023-35945nghttp2@1.51.0-r01.51.0-r1
MediumDEBIAN-CVE-2024-0743nss@2:3.87.1-12:3.87.1-1+deb12u1
MediumDEBIAN-CVE-2026-33846gnutls28@3.7.9-2+deb12u23.7.9-2+deb12u7
MediumGHSA-8r3f-844c-mc37google.golang.org/protobuf@v1.31.01.33.0
MediumDEBIAN-CVE-2026-16389nss@2:3.87.1-12:3.87.1-1+deb12u4
MediumALPINE-CVE-2024-0727openssl@3.1.2-r03.1.4-r5
MediumDEBIAN-CVE-2024-0727openssl@3.0.11-1~deb12u23.0.13-1~deb12u1
MediumDEBIAN-CVE-2025-7424libxslt@1.1.35-11.1.35-1+deb12u2
MediumGHSA-x527-x647-q7gggolang.org/x/crypto@v0.12.00.52.0
MediumGHSA-qg2p-9jwr-mmqfdjango@4.2.114.2.14
MediumGHSA-c8m8-j448-xjx7twisted@24.3.024.7.0rc1
MediumALPINE-CVE-2025-0725curl@8.5.0-r08.12.0-r0
MediumALPINE-CVE-2023-7104sqlite@3.40.1-r03.40.1-r1
MediumDEBIAN-CVE-2023-7104sqlite3@3.40.1-23.40.1-2+deb12u1
MediumDEBIAN-CVE-2025-13151libtasn1-6@4.19.0-2no fix listed
MediumGHSA-2xpw-w6gg-jr37urllib3@2.2.12.6.0
MediumGHSA-gm62-xv2j-4w53urllib3@2.2.12.6.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.7.5latest2 years ago1.0.611533721,68625,669

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/anteon/ddosify.svg)](https://charts.stackradar.io/charts/anteon/ddosify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.