jellyfin Helm chart
beluga-cloudVerified publisherScored 14 Sept 2026
Your media, your server, your way
Latest 2.3.0 2 years agoapp version 10.8.13 5Artifact Hub
jellyfin 2.3.0 deploys 1 container image: ghcr.io/beluga-cloud/jellyfin/jellyfin. Across them, 339 findings — 5 critical, 4 high — 2 on CISA KEV. The highest contribution is GHSA-2m69-gcr7-jv3q in SQLitePCLRaw.lib.e_sqlite3 2.1.0, with no fix listed. Chart.yaml declares kubeVersion >=1.20; rendered for Kubernetes 1.20.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
1 image
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | 10.8.13 | 5471259 | 4,244 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
339 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-86140 | libxml2 | no fix listed |
| Low | UBUNTU-CVE-2026-34743 | xz-utils | 5.2.5-2ubuntu1.1 |
| Low | UBUNTU-CVE-2026-54411 | pam | 1.4.0-11ubuntu2.7 |
| Low | UBUNTU-CVE-2025-32414 | libxml2 | 2.9.13+dfsg-1ubuntu0.7 |
| Low | UBUNTU-CVE-2026-25210 | expat | 2.4.7-1ubuntu0.7 |
| Low | GHSA-6c8g-7p36-r338 | SharpCompress | 0.48.0 |
| Low | UBUNTU-CVE-2026-19487 | perl | 5.34.0-3ubuntu1.9 |
| Low | UBUNTU-CVE-2026-4878 | libcap2 | 1:2.44-1ubuntu0.22.04.3 |
| Low | UBUNTU-CVE-2025-4373 | glib2.0 | 2.72.4-0ubuntu2.5 |
| Low | UBUNTU-CVE-2026-78408 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2026-54369 | acl | no fix listed |
| Low | UBUNTU-CVE-2026-41989 | libgcrypt20 | 1.9.4-3ubuntu3.2 |
| Low | UBUNTU-CVE-2025-1377 | elfutils | 0.186-1ubuntu0.1 |
| Low | UBUNTU-CVE-2026-13595 | util-linux | 2.37.2-4ubuntu3.6 |
| Low | UBUNTU-CVE-2026-54371 | attr | 1:2.5.1-1ubuntu0.1 |
| Low | UBUNTU-CVE-2026-1489 | glib2.0 | 2.72.4-0ubuntu2.9 |
| Low | UBUNTU-CVE-2026-5704 | tar | 1.34+dfsg-1ubuntu0.1.22.04.6 |
| Low | UBUNTU-CVE-2024-28835 | gnutls28 | 3.7.3-4ubuntu1.5 |
| Low | UBUNTU-CVE-2025-2175 | zvbi | 0.2.35-19ubuntu0.1~esm1 |
| Low | UBUNTU-CVE-2026-72522 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-22695 | libpng1.6 | 1.6.37-3ubuntu0.3 |
| Low | UBUNTU-CVE-2026-56403 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56404 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56405 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56408 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56406 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56407 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56410 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56411 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-78410 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2025-64505 | libpng1.6 | 1.6.37-3ubuntu0.1 |
| Low | UBUNTU-CVE-2026-50593 | graphite2 | 1.3.14-1ubuntu0.1 |
| Low | UBUNTU-CVE-2026-86142 | libxml2 | no fix listed |
| Low | UBUNTU-CVE-2026-42014 | gnutls28 | 3.7.3-4ubuntu1.9 |
| Low | UBUNTU-CVE-2026-78409 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2024-13176 | openssl | 3.0.2-0ubuntu1.19 |
| Low | UBUNTU-CVE-2025-52099 | sqlite3 | 3.37.2-2ubuntu0.4 |
| Low | UBUNTU-CVE-2026-45446 | openssl | 3.0.2-0ubuntu1.25 |
| Low | UBUNTU-CVE-2026-22801 | libpng1.6 | 1.6.37-3ubuntu0.3 |
| Low | UBUNTU-CVE-2026-86138 | libxml2 | no fix listed |
| Low | UBUNTU-CVE-2026-86143 | libxml2 | no fix listed |
| Low | UBUNTU-CVE-2025-29088 | sqlite3 | 3.37.2-2ubuntu0.4 |
| Low | UBUNTU-CVE-2026-40225 | systemd | 249.11-0ubuntu3.19 |
| Low | UBUNTU-CVE-2026-3832 | gnutls28 | 3.7.3-4ubuntu1.9 |
| Low | UBUNTU-CVE-2025-9714 | libxml2 | 2.9.13+dfsg-1ubuntu0.9 |
| Low | UBUNTU-CVE-2026-56409 | expat | no fix listed |
| Low | UBUNTU-CVE-2023-29935 | llvm-toolchain-15 | no fix listed |
| Low | UBUNTU-CVE-2023-29942 | llvm-toolchain-15 | no fix listed |
| Low | UBUNTU-CVE-2025-1390 | libcap2 | 1:2.44-1ubuntu0.22.04.2 |
| Low | UBUNTU-CVE-2026-50813 | sqlite3 | 3.37.2-2ubuntu0.7 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/beluga-cloud/jellyfin)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.