music-assistant Helm chart

Name: music-assistant Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

bdclark-helm-charts

Scored 14 Sept 2026

Music Assistant - Universal media library manager for streaming services and connected audio devices

Latest 0.4.13 yesterdayapp version 2.10.3 1Artifact Hub

music-assistant 0.4.13 deploys 1 container image: ghcr.io/music-assistant/server. Across them, 357 findings — 0 critical, 0 high. The highest contribution is GHSA-5cgq-3rg8-m6cv in golang.org/x/crypto v0.46.0, fixed in 0.52.0.

Radar Score

3,6570053303

357 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/music-assistant/server	2.10.3	0053303	3,657

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

357 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-48961	perl@5.40.1-6	5.40.1-6+deb13u1
Low	DEBIAN-CVE-2024-52616	avahi@0.8-16	no fix listed
Low	DEBIAN-CVE-2025-61144	tiff@4.7.0-3+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-6238	glibc@2.41-12+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-75146	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.46.0	0.52.0
Low	DEBIAN-CVE-2026-5435	glibc@2.41-12+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-54369	acl@2.3.2-2+b1	no fix listed
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.48.0	0.55.0
Low	DEBIAN-CVE-2026-70628	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-7017	perl@5.40.1-6	5.40.1-6+deb13u1
Low	DEBIAN-CVE-2026-15806	python3.13@3.13.5-2+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-16118	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5
Low	DEBIAN-CVE-2021-4214	libpng1.6@1.6.48-1+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.2-3	no fix listed
Low	DEBIAN-CVE-2026-63388	libevent@2.1.12-stable-10+b1	2.1.13-stable-1~deb13u1
Low	DEBIAN-CVE-2026-75141	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-75142	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-75144	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2024-52615	avahi@0.8-16	no fix listed
Low	DEBIAN-CVE-2026-52491	tiff@4.7.0-3+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-58470	wget@1.25.0-2	no fix listed
Low	DEBIAN-CVE-2026-13858	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2025-15079	curl@8.14.1-2+deb13u4	no fix listed
Low	DEBIAN-CVE-2025-12781	python3.13@3.13.5-2+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-58471	wget@1.25.0-2	no fix listed
Low	DEBIAN-CVE-2026-58472	wget@1.25.0-2	no fix listed
Low	DEBIAN-CVE-2025-15366	python3.13@3.13.5-2+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-87910	python3.13@3.13.5-2+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-65706	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.46.0	0.52.0
Low	DEBIAN-CVE-2026-53689	libnfs@5.0.2-1+b2	5.0.2-1+deb13u1
Low	DEBIAN-CVE-2026-64833	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.46.0	0.52.0
Low	DEBIAN-CVE-2026-12505	cifs-utils@2:7.4-1	no fix listed
Low	DEBIAN-CVE-2026-24401	avahi@0.8-16	no fix listed
Low	DEBIAN-CVE-2026-16461	rpcbind@1.2.7-1	no fix listed
Low	DEBIAN-CVE-2022-0563	util-linux@2.41.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-11979	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-86140	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	DEBIAN-CVE-2025-15367	python3.13@3.13.5-2+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-5704	tar@1.35+dfsg-3.1	no fix listed
Low	DEBIAN-CVE-2026-66038	ffmpeg@7:7.1.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-3184	util-linux@2.41.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-5673	libtheora@1.2.0~alpha1+dfsg-6	no fix listed
Low	DEBIAN-CVE-2026-58055	nghttp2@1.64.0-1.1+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-7010	perl@5.40.1-6	5.40.1-6+deb13u1
Low	DEBIAN-CVE-2026-19487	perl@5.40.1-6	no fix listed
Low	DEBIAN-CVE-2026-52492	tiff@4.7.0-3+deb13u3	no fix listed
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.46.0	0.52.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.4.13latest	yesterday	2.10.3	0053303	3,657
0.4.12	9 days ago	2.10.2	0051305	3,599

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/bdclark-helm-charts/music-assistant.svg)](https://charts.stackradar.io/charts/bdclark-helm-charts/music-assistant)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.