immich Helm chart
bearNot scored yet
A Helm chart for Immich with separate API and microservices roles
Latest 0.1.1 todayapp version v3.1.0 0Artifact Hub
immich 0.1.1 deploys 2 container images: ghcr.io/immich-app/immich-machine-learning and ghcr.io/immich-app/immich-server. The highest contribution is GHSA-86qp-5c8j-p5mr in starlette 0.50.0, fixed in 1.0.1.
Radar Score
Not yet scored
The daily scoring run has not folded the 2 images into a score yet.
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | v3.1.0 | 0123225 | 2,452 |
| ghcr.io/ | v3.1.0 | 0053358 | 4,238 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | PYSEC-2026-3721 | pip | 26.2 |
| Low | DEBIAN-CVE-2026-59186 | openexr | no fix listed |
| Low | GHSA-52v5-jr5w-gjxr | sigstore | 4.1.1 |
| Low | DEBIAN-CVE-2025-15079 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-59184 | openexr | no fix listed |
| Low | DEBIAN-CVE-2026-59187 | openexr | no fix listed |
| Low | DEBIAN-CVE-2026-6429 | curl | 8.14.1-2+deb13u4 |
| Low | GHSA-gvwx-54wh-qm9j | tar | 7.5.17 |
| Low | GHSA-wmmp-3585-3rmp | nodemailer | 9.1.0 |
| Low | GHSA-mf9w-mj56-hr94 | python-dotenv | 1.2.2 |
| Low | DEBIAN-CVE-2026-86142 | libxml2 | no fix listed |
| Low | DEBIAN-CVE-2026-1965 | curl | 8.14.1-2+deb13u4 |
| Low | DEBIAN-CVE-2022-0563 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-86140 | libxml2 | no fix listed |
| Low | GHSA-rgj7-g3m4-5g8c | sharp | 0.35.4 |
| Low | DEBIAN-CVE-2026-11979 | libxml2 | no fix listed |
| Low | DEBIAN-CVE-2026-7168 | curl | 8.14.1-2+deb13u4 |
| Low | GHSA-v2v4-37r5-5v8g | ip-address | 10.1.1 |
| Low | GHSA-cc9r-2j5m-2m83 | nodemailer | 9.1.0 |
| Low | DEBIAN-CVE-2026-4878 | libcap2 | 1:2.75-10+deb13u1 |
| Low | DEBIAN-CVE-2026-68516 | openexr | no fix listed |
| Low | DEBIAN-CVE-2026-56404 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-3783 | curl | 8.14.1-2+deb13u4 |
| Low | DEBIAN-CVE-2026-4873 | curl | 8.14.1-2+deb13u4 |
| Low | DEBIAN-CVE-2026-56410 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-56411 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-34743 | xz-utils | 5.4.1-1+deb12u1 |
| Low | DEBIAN-CVE-2026-5704 | tar | no fix listed |
| Low | DEBIAN-CVE-2023-45913 | mesa | no fix listed |
| Low | GHSA-2v37-7h3g-55p8 | nanoid | 3.3.18 |
| Low | DEBIAN-CVE-2026-3184 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2025-27587 | openssl | no fix listed |
| Low | DEBIAN-CVE-2026-5673 | libtheora | no fix listed |
| Low | DEBIAN-CVE-2026-58055 | nghttp2 | no fix listed |
| Low | DEBIAN-CVE-2026-7010 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-19487 | perl | no fix listed |
| Low | DEBIAN-CVE-2023-52426 | expat | no fix listed |
| Low | DEBIAN-CVE-2026-52492 | tiff | no fix listed |
| Low | GHSA-3v7f-55p6-f55p | picomatch | 4.0.4 |
| Low | GHSA-65pc-fj4g-8rjx | idna | 3.15 |
| Low | DEBIAN-CVE-2026-89158 | pcre2 | 10.42-1+deb12u1 |
| Low | DEBIAN-CVE-2011-3374 | apt | no fix listed |
| Low | DEBIAN-CVE-2026-86138 | libxml2 | no fix listed |
| Low | DEBIAN-CVE-2013-4392 | systemd | no fix listed |
| Low | DEBIAN-CVE-2026-89160 | pcre2 | 10.42-1+deb12u1 |
| Low | DEBIAN-CVE-2023-45919 | mesa | no fix listed |
| Low | GHSA-q56x-g2fj-4rj6 | onnx | 1.21.0 |
| Low | DEBIAN-CVE-2026-89161 | pcre2 | 10.42-1+deb12u1 |
| Low | DEBIAN-CVE-2026-78408 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2023-26924 | llvm-toolchain-15 | no fix listed |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 0.1.1latest | today | v3.1.0 | — | — |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.