StackRadar

guacamole Helm chart

beryju-org

Scored 14 Sept 2026

Apache Guacamole is a clientless remote desktop gateway. It supports standard protocols like VNC, RDP, and SSH.

Latest 1.4.2 1 year agoapp version 1.6.0 13Artifact Hub

guacamole 1.4.2 deploys 3 container images: guacamole/guacamole, bitnami/postgresql and guacamole/guacd. Across the 2 measured, 362 findings — 1 critical, 1 high. The highest contribution is UBUNTU-CVE-2025-6965 in sqlite3 3.45.1-1ubuntu2.3, fixed in 3.45.1-1ubuntu2.4.

Radar Score

3,6061152306

362 findings over 2 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
guacamole/guacamole×21.6.011513063,583
bitnami/postgresql14.3.0-debian-10-r9—unmeasured
guacamole/guacd1.6.0001023

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

362 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowUBUNTU-CVE-2026-80489glibc@2.39-0ubuntu8.42.39-0ubuntu8.9
LowUBUNTU-CVE-2025-68160openssl@3.0.13-0ubuntu3.53.0.13-0ubuntu3.7
LowUBUNTU-CVE-2025-69644binutils@2.42-4ubuntu2.5no fix listed
LowUBUNTU-CVE-2026-59845libssh@0.10.6-2build20.10.6-2ubuntu0.5
LowUBUNTU-CVE-2025-15224curl@8.5.0-2ubuntu10.68.5.0-2ubuntu10.7
LowUBUNTU-CVE-2026-42250bzip2@1.0.8-5.1build0.11.0.8-5.1ubuntu0.1
LowUBUNTU-CVE-2026-32777expat@2.6.1-2ubuntu0.3no fix listed
LowUBUNTU-CVE-2026-39113sqlite3@3.45.1-1ubuntu2.3no fix listed
LowUBUNTU-CVE-2025-9820gnutls28@3.8.3-1.1ubuntu3.33.8.3-1.1ubuntu3.5
LowUBUNTU-CVE-2026-0968libssh@0.10.6-2build20.10.6-2ubuntu0.3
LowUBUNTU-CVE-2026-76957expat@2.6.1-2ubuntu0.3no fix listed
LowUBUNTU-CVE-2026-27456util-linux@2.39.3-9ubuntu6.22.39.3-9ubuntu6.6
LowUBUNTU-CVE-2026-18508tar@1.35+dfsg-3build1no fix listed
LowUBUNTU-CVE-2025-8277libssh@0.10.6-2build20.10.6-2ubuntu0.3
LowUBUNTU-CVE-2026-0992libxml2@2.9.14+dfsg-1.3ubuntu3.32.9.14+dfsg-1.3ubuntu3.7
LowUBUNTU-CVE-2026-41990libgcrypt20@1.10.3-2build11.12.0-2ubuntu0.1~Fips1~rc11
LowUBUNTU-CVE-2026-45186expat@2.6.1-2ubuntu0.3no fix listed
LowUBUNTU-CVE-2022-3219gnupg2@2.4.4-2ubuntu17.2no fix listed
LowUBUNTU-CVE-2026-32776expat@2.6.1-2ubuntu0.3no fix listed
LowUBUNTU-CVE-2025-3198binutils@2.42-4ubuntu2.52.42-4ubuntu2.6
LowUBUNTU-CVE-2026-41080expat@2.6.1-2ubuntu0.3no fix listed
LowUBUNTU-CVE-2025-11839binutils@2.42-4ubuntu2.52.42-4ubuntu2.7
LowUBUNTU-CVE-2025-11840binutils@2.42-4ubuntu2.52.42-4ubuntu2.7
LowUBUNTU-CVE-2025-4878libssh@0.10.6-2build20.10.6-2ubuntu0.1
LowUBUNTU-CVE-2025-11495binutils@2.42-4ubuntu2.52.42-4ubuntu2.8
LowUBUNTU-CVE-2025-8225binutils@2.42-4ubuntu2.52.42-4ubuntu2.6
LowUBUNTU-CVE-2025-11413binutils@2.42-4ubuntu2.52.42-4ubuntu2.8
LowUBUNTU-CVE-2025-11731libxslt@1.1.39-0exp1ubuntu0.24.04.2no fix listed
LowUBUNTU-CVE-2025-11494binutils@2.42-4ubuntu2.52.42-4ubuntu2.8
LowUBUNTU-CVE-2025-69418openssl@3.0.13-0ubuntu3.53.0.13-0ubuntu3.7
LowUBUNTU-CVE-2025-8732libxml2@2.9.14+dfsg-1.3ubuntu3.32.9.14+dfsg-1.3ubuntu3.7
LowUBUNTU-CVE-2025-11412binutils@2.42-4ubuntu2.52.42-4ubuntu2.8
LowUBUNTU-CVE-2025-11414binutils@2.42-4ubuntu2.52.42-4ubuntu2.8
LowUBUNTU-CVE-2026-59846libssh@0.10.6-2build20.10.6-2ubuntu0.5
LowUBUNTU-CVE-2026-18477tar@1.35+dfsg-3build1no fix listed
LowUBUNTU-CVE-2025-6141ncurses@6.4+20240113-1ubuntu26.4+20240113-1ubuntu2.2
LowUSN-7412-2gnupg2@2.4.4-2ubuntu17.22.4.4-2ubuntu17.3
LowUSN-8091-1util-linux@2.39.3-9ubuntu6.22.39.3-9ubuntu6.5
LowUSN-8436-1ca-certificates@2024020320260601~24.04.1
LowUSN-8543-2wget@1.21.4-1ubuntu4.11.21.4-1ubuntu4.5
LowUSN-8625-1openssl@3.0.13-0ubuntu3.53.0.13-0ubuntu3.12
LowUSN-8688-1pam@1.5.3-5ubuntu5.11.5.3-5ubuntu5.7
LowUBUNTU-CVE-2026-0965libssh@0.10.6-2build20.10.6-2ubuntu0.3
LowUBUNTU-CVE-2026-27171zlib@1:1.3.dfsg-3.1ubuntu2.11:1.3.dfsg-3.1ubuntu2.2
LowUBUNTU-CVE-2025-66382expat@2.6.1-2ubuntu0.3no fix listed
LowUBUNTU-CVE-2025-6170libxml2@2.9.14+dfsg-1.3ubuntu3.32.9.14+dfsg-1.3ubuntu3.4
LowUBUNTU-CVE-2026-24515expat@2.6.1-2ubuntu0.32.6.1-2ubuntu0.4
LowUBUNTU-CVE-2026-40228systemd@255.4-1ubuntu8.6no fix listed
LowUBUNTU-CVE-2026-32778expat@2.6.1-2ubuntu0.3no fix listed
LowUBUNTU-CVE-2026-57062gnupg2@2.4.4-2ubuntu17.22.4.4-2ubuntu17.6

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.4.2latest1 year ago1.6.011523063,606

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/beryju-org/guacamole.svg)](https://charts.stackradar.io/charts/beryju-org/guacamole)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.