jellyfin Helm chart

Name: jellyfin Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

beluga-cloud

Scored 14 Sept 2026

Your media, your server, your way

Latest 2.3.0 2 years agoapp version 10.8.13 5Artifact Hub

jellyfin 2.3.0 deploys 1 container image: ghcr.io/beluga-cloud/jellyfin/jellyfin. Across them, 339 findings — 5 critical, 4 high — 2 on CISA KEV. The highest contribution is GHSA-2m69-gcr7-jv3q in SQLitePCLRaw.lib.e_sqlite3 2.1.0, with no fix listed. Chart.yaml declares kubeVersion >=1.20; rendered for Kubernetes 1.20.0.

Radar Score

4,2445471259

339 findings over 1 of 1 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/beluga-cloud/jellyfin/jellyfin	10.8.13	5471259	4,244

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

339 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-86139	libxml2@2.9.13+dfsg-1ubuntu0.3	no fix listed
Low	UBUNTU-CVE-2025-50422	cairo@1.16.0-5ubuntu2	no fix listed
Low	UBUNTU-CVE-2026-13757	p11-kit@0.24.0-6build1	0.24.0-6ubuntu0.1
Low	UBUNTU-CVE-2026-11850	krb5@1.19.2-2ubuntu0.3	1.19.2-2ubuntu0.8
Low	UBUNTU-CVE-2026-56132	expat@2.4.7-1ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-15588	glib2.0@2.72.4-0ubuntu2.2	no fix listed
Low	UBUNTU-CVE-2025-8058	glibc@2.35-0ubuntu3.5	2.35-0ubuntu3.11
Low	UBUNTU-CVE-2026-40930	libpng1.6@1.6.37-3build5	1.6.37-3ubuntu0.6
Low	UBUNTU-CVE-2025-64506	libpng1.6@1.6.37-3build5	1.6.37-3ubuntu0.1
Low	UBUNTU-CVE-2025-45582	tar@1.34+dfsg-1ubuntu0.1.22.04.2	1.34+dfsg-1ubuntu0.1.22.04.4
Low	UBUNTU-CVE-2026-15534	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.9
Low	UBUNTU-CVE-2026-86144	libxml2@2.9.13+dfsg-1ubuntu0.3	no fix listed
Low	UBUNTU-CVE-2024-10041	pam@1.4.0-11ubuntu2.3	no fix listed
Low	UBUNTU-CVE-2026-50812	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.7
Low	UBUNTU-CVE-2023-4641	shadow@1:4.8.1-2ubuntu2.1	1:4.8.1-2ubuntu2.2
Low	UBUNTU-CVE-2026-34757	libpng1.6@1.6.37-3build5	1.6.37-3ubuntu0.5
Low	UBUNTU-CVE-2026-18938	p11-kit@0.24.0-6build1	0.24.0-6ubuntu0.1
Low	UBUNTU-CVE-2026-0989	libxml2@2.9.13+dfsg-1ubuntu0.3	2.9.13+dfsg-1ubuntu0.11
Low	UBUNTU-CVE-2025-5278	coreutils@8.32-4.1ubuntu1	8.32-4.1ubuntu1.4
Low	UBUNTU-CVE-2026-22795	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.21
Low	UBUNTU-CVE-2024-7883	llvm-toolchain-12@1:12.0.1-19ubuntu3	no fix listed
Low	UBUNTU-CVE-2024-7883	llvm-toolchain-15@1:15.0.7-0ubuntu0.22.04.3	no fix listed
Low	UBUNTU-CVE-2026-42770	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.25
Low	UBUNTU-CVE-2025-3360	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.7
Low	UBUNTU-CVE-2026-1484	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.9
Low	UBUNTU-CVE-2026-67990	at@3.2.5-1ubuntu1	no fix listed
Low	UBUNTU-CVE-2026-54370	acl@2.3.1-1	no fix listed
Low	UBUNTU-CVE-2026-56412	expat@2.4.7-1ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-56131	expat@2.4.7-1ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-50219	expat@2.4.7-1ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2025-15649	perl@5.34.0-3ubuntu1.3	no fix listed
Low	UBUNTU-CVE-2026-0988	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.8
Low	UBUNTU-CVE-2026-29111	systemd@249.11-0ubuntu3.11	249.11-0ubuntu3.19
Low	UBUNTU-CVE-2025-7039	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.7
Low	UBUNTU-CVE-2026-15059	systemd@249.11-0ubuntu3.11	249.11-0ubuntu3.22
Low	UBUNTU-CVE-2024-56433	shadow@1:4.8.1-2ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2026-41991	gzip@1.10-4ubuntu4.1	1.10-4ubuntu4.2
Low	UBUNTU-CVE-2026-40226	systemd@249.11-0ubuntu3.11	249.11-0ubuntu3.21
Low	UBUNTU-CVE-2026-18374	glibc@2.35-0ubuntu3.5	no fix listed
Low	UBUNTU-CVE-2026-16742	systemd@249.11-0ubuntu3.11	249.11-0ubuntu3.22
Low	UBUNTU-CVE-2026-86469	glib2.0@2.72.4-0ubuntu2.2	no fix listed
Low	GHSA-qrmm-w75w-3wpx	Swashbuckle.AspNetCore.SwaggerUI@6.2.3	6.3.0
Low	UBUNTU-CVE-2026-19542	glibc@2.35-0ubuntu3.5	2.35-0ubuntu3.15
Low	UBUNTU-CVE-2026-53613	util-linux@2.37.2-4ubuntu3	2.37.2-4ubuntu3.6
Low	UBUNTU-CVE-2026-53615	util-linux@2.37.2-4ubuntu3	2.37.2-4ubuntu3.6
Low	UBUNTU-CVE-2026-61626	libass@1:0.15.2-1	no fix listed
Low	UBUNTU-CVE-2026-61627	libass@1:0.15.2-1	no fix listed
Low	UBUNTU-CVE-2026-77117	glibc@2.35-0ubuntu3.5	2.35-0ubuntu3.15
Low	UBUNTU-CVE-2026-80489	glibc@2.35-0ubuntu3.5	2.35-0ubuntu3.15
Low	UBUNTU-CVE-2025-68160	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.21

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.3.0latest	2 years ago	10.8.13	5471259	4,244

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/beluga-cloud/jellyfin.svg)](https://charts.stackradar.io/charts/beluga-cloud/jellyfin)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.