immich Helm chart
bearNot scored yet
A Helm chart for Immich with separate API and microservices roles
Latest 0.1.1 todayapp version v3.1.0 0Artifact Hub
immich 0.1.1 deploys 2 container images: ghcr.io/immich-app/immich-machine-learning and ghcr.io/immich-app/immich-server. The highest contribution is GHSA-86qp-5c8j-p5mr in starlette 0.50.0, fixed in 1.0.1.
Radar Score
Not yet scored
The daily scoring run has not folded the 2 images into a score yet.
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | v3.1.0 | 0128219 | 2,521 |
| ghcr.io/ | v3.1.0 | 0059351 | 4,319 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| High | GHSA-86qp-5c8j-p5mrKEV | starlette | 1.0.1 |
| Medium | DEBIAN-CVE-2019-1010022 | glibc | no fix listed |
| Medium | DEBIAN-CVE-2023-45853 | zlib | no fix listed |
| Medium | DEBIAN-CVE-2017-17740 | openldap | no fix listed |
| Medium | DEBIAN-CVE-2018-20796 | glibc | no fix listed |
| Medium | DEBIAN-CVE-2017-16232 | tiff | no fix listed |
| Medium | DEBIAN-CVE-2015-3276 | openldap | no fix listed |
| Medium | DEBIAN-CVE-2019-1010023 | glibc | no fix listed |
| Medium | DEBIAN-CVE-2018-16376 | openjpeg2 | no fix listed |
| Medium | DEBIAN-CVE-2016-9580 | openjpeg2 | no fix listed |
| Medium | DEBIAN-CVE-2016-9581 | openjpeg2 | no fix listed |
| Medium | DEBIAN-CVE-2016-9114 | openjpeg2 | no fix listed |
| Medium | DEBIAN-CVE-2016-9113 | openjpeg2 | no fix listed |
| Medium | GHSA-38jv-5279-wg99 | urllib3 | 2.6.3 |
| Medium | DEBIAN-CVE-2026-19931 | curl | no fix listed |
| Medium | DEBIAN-CVE-2019-9192 | glibc | no fix listed |
| Medium | DEBIAN-CVE-2023-31486 | perl | no fix listed |
| Medium | DEBIAN-CVE-2026-63073 | openssl | 3.5.7-1~deb13u2 |
| Medium | DEBIAN-CVE-2018-5709 | krb5 | no fix listed |
| Medium | DEBIAN-CVE-2023-45924 | libglvnd | no fix listed |
| Medium | DEBIAN-CVE-2012-0039 | glib2.0 | no fix listed |
| Medium | DEBIAN-CVE-2024-28757 | expat | no fix listed |
| Medium | DEBIAN-CVE-2017-9937 | jbigkit | no fix listed |
| Medium | DEBIAN-CVE-2018-6829 | libgcrypt20 | no fix listed |
| Medium | DEBIAN-CVE-2026-6473 | postgresql-17 | 17.11-0+deb13u1 |
| Medium | DEBIAN-CVE-2026-18924 | curl | no fix listed |
| Medium | DEBIAN-CVE-2026-11856 | curl | no fix listed |
| Medium | DEBIAN-CVE-2025-25467 | x264 | no fix listed |
| Medium | DEBIAN-CVE-2026-18798 | openssl | 3.5.7-1~deb13u2 |
| Medium | DEBIAN-CVE-2016-9116 | openjpeg2 | no fix listed |
| Medium | DEBIAN-CVE-2016-9117 | openjpeg2 | no fix listed |
| Medium | DEBIAN-CVE-2016-10505 | openjpeg2 | no fix listed |
| Medium | DEBIAN-CVE-2011-3389 | gnutls28 | no fix listed |
| Medium | DEBIAN-CVE-2016-9115 | openjpeg2 | no fix listed |
| Medium | DEBIAN-CVE-2026-63076 | openssl | no fix listed |
| Medium | DEBIAN-CVE-2026-10536 | curl | no fix listed |
| Medium | DEBIAN-CVE-2025-59375 | expat | no fix listed |
| Medium | DEBIAN-CVE-2026-9079 | curl | no fix listed |
| Medium | DEBIAN-CVE-2022-1210 | tiff | no fix listed |
| Medium | DEBIAN-CVE-2018-10126 | tiff | no fix listed |
| Medium | DEBIAN-CVE-2026-8924 | curl | no fix listed |
| Medium | DEBIAN-CVE-2025-13151 | libtasn1-6 | no fix listed |
| Medium | DEBIAN-CVE-2024-26461 | krb5 | no fix listed |
| Medium | DEBIAN-CVE-2019-1010024 | glibc | no fix listed |
| Medium | DEBIAN-CVE-2019-6988 | openjpeg2 | no fix listed |
| Medium | DEBIAN-CVE-2026-5450 | glibc | no fix listed |
| Medium | DEBIAN-CVE-2026-14669 | postgresql-17 | 17.11-0+deb13u1 |
| Medium | DEBIAN-CVE-2023-45931 | mesa | no fix listed |
| Medium | DEBIAN-CVE-2026-8376 | perl | no fix listed |
| Medium | DEBIAN-CVE-2026-14457 | openssl | 3.5.7-1~deb13u2 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 0.1.1latest | today | v3.1.0 | — | — |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.