self-host 2.4.0 Helm chart

Name: self-host Helm chart 2.4.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

bitwarden

Scored 14 Sept 2026

A Helm chart for deploying a Bitwarden instance on Kubernetes

Version 2.4.0 24 days agoapp version 2026.8.0 1Artifact Hub

self-host 2.4.0 deploys 11 container images: ghcr.io/bitwarden/admin, ghcr.io/bitwarden/api, ghcr.io/bitwarden/attachments, ghcr.io/bitwarden/events and 7 more. Across them, 511 findings — 0 critical, 0 high. The highest contribution is UBUNTU-CVE-2026-45447 in openssl 3.0.13-0ubuntu3.9, fixed in 3.0.13-0ubuntu3.11.

Radar Score

5,1900081430

511 findings over 11 of 11 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/bitwarden/admin	2026.8.0	00415	209
ghcr.io/bitwarden/api	2026.8.0	00415	209
ghcr.io/bitwarden/attachments	2026.8.0	00415	209
ghcr.io/bitwarden/events	2026.8.0	00415	209
ghcr.io/bitwarden/icons	2026.8.0	00415	209
ghcr.io/bitwarden/identity	2026.8.0	00415	209
ghcr.io/bitwarden/notifications	2026.8.0	00415	209
ghcr.io/bitwarden/sso	2026.8.0	00415	209
ghcr.io/bitwarden/web	2026.8.0	001432	609
mcr.microsoft.com/mssql/server	2025-CU5-ubuntu-24.04	0031272	2,760
ghcr.io/bitwarden/mssqlmigratorutility	2026.8.0	0046	149

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

341 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-6100	python3.12@3.12.3-1ubuntu0.13	3.12.3-1ubuntu0.15
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-11352	curl@8.20.0-r0	8.22.0-r0
Low	UBUNTU-CVE-2026-9076	openssl@3.0.13-0ubuntu3.9	3.0.13-0ubuntu3.11
Low	ALPINE-CVE-2026-82209	curl@8.20.0-r0	8.22.0-r0
Low	UBUNTU-CVE-2026-82209	curl@8.5.0-2ubuntu10.9	no fix listed
Low	UBUNTU-CVE-2024-10524	wget@1.21.4-1ubuntu4.1	no fix listed
Low	UBUNTU-CVE-2026-4224	python3.12@3.12.3-1ubuntu0.13	3.12.3-1ubuntu0.15
Low	ALPINE-CVE-2026-80255	curl@8.20.0-r0	8.22.0-r0
Low	UBUNTU-CVE-2026-7210	python3.12@3.12.3-1ubuntu0.13	no fix listed
Low	UBUNTU-CVE-2026-12087	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
Low	ALPINE-CVE-2026-11564	curl@8.20.0-r0	8.22.0-r0
Low	UBUNTU-CVE-2026-15308	python3.12@3.12.3-1ubuntu0.13	3.12.3-1ubuntu0.17
Low	UBUNTU-CVE-2026-40469	gawk@1:5.2.1-2build3	1:5.2.1-2ubuntu0.1
Low	ALPINE-CVE-2026-13608	curl@8.20.0-r0	8.22.0-r0
Low	UBUNTU-CVE-2026-13608	curl@8.5.0-2ubuntu10.9	no fix listed
Low	ALPINE-CVE-2026-63072	openssl@3.5.7-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-63072	openssl@3.0.13-0ubuntu3.9	3.0.13-0ubuntu3.15
Low	ALPINE-CVE-2026-11586	curl@8.20.0-r0	8.22.0-r0
Low	UBUNTU-CVE-2026-45445	openssl@3.0.13-0ubuntu3.9	3.0.13-0ubuntu3.11
Low	UBUNTU-CVE-2021-31879	wget@1.21.4-1ubuntu4.1	no fix listed
Low	UBUNTU-CVE-2026-66046	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-11972	python3.12@3.12.3-1ubuntu0.13	no fix listed
Low	ALPINE-CVE-2026-80230	curl@8.20.0-r0	8.22.0-r0
Low	UBUNTU-CVE-2025-69534	python3.12@3.12.3-1ubuntu0.13	3.12.3-1ubuntu0.15
Low	UBUNTU-CVE-2026-80230	curl@8.5.0-2ubuntu10.9	no fix listed
Low	UBUNTU-CVE-2026-42013	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6
Low	UBUNTU-CVE-2026-58016	glib2.0@2.80.0-6ubuntu3.8	no fix listed
Low	UBUNTU-CVE-2024-2236	libgcrypt20@1.10.3-2build1	1.10.3-2ubuntu0.2
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-54874	openssl@3.0.13-0ubuntu3.9	3.0.13-0ubuntu3.15
Low	UBUNTU-CVE-2026-42766	openssl@3.0.13-0ubuntu3.9	3.0.13-0ubuntu3.11
Low	UBUNTU-CVE-2026-74860	libxml2@2.9.14+dfsg-1.3ubuntu3.7	no fix listed
Low	ALPINE-CVE-2026-9546	curl@8.20.0-r0	8.22.0-r0
Low	UBUNTU-CVE-2026-14164	libarchive@3.7.2-2ubuntu0.6	3.7.2-2ubuntu0.8
Low	UBUNTU-CVE-2026-86145	pcre2@10.42-4ubuntu2.1	no fix listed
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-3644	python3.12@3.12.3-1ubuntu0.13	3.12.3-1ubuntu0.15
Low	UBUNTU-CVE-2026-7774	python3.12@3.12.3-1ubuntu0.13	3.12.3-1ubuntu0.15
Low	UBUNTU-CVE-2026-42011	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6
Low	UBUNTU-CVE-2026-9538	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
Low	ALPINE-CVE-2026-82208	curl@8.20.0-r0	8.22.0-r0
Low	UBUNTU-CVE-2026-85091	zlib@1:1.3.dfsg-3.1ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2026-42497	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.3
Low	UBUNTU-CVE-2026-41992	gzip@1.12-1ubuntu3.1	1.12-1ubuntu3.2
Low	ALPINE-CVE-2026-12064	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-8932	curl@8.20.0-r0	8.22.0-r0
Low	UBUNTU-CVE-2026-8932	curl@8.5.0-2ubuntu10.9	8.5.0-2ubuntu10.13
Low	ALPINE-CVE-2026-8286	curl@8.20.0-r0	8.22.0-r0
Low	UBUNTU-CVE-2026-8286	curl@8.5.0-2ubuntu10.9	8.5.0-2ubuntu10.10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.4.0latest	24 days ago	2026.8.0	0081430	5,190

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/bitwarden/self-host.svg)](https://charts.stackradar.io/charts/bitwarden/self-host)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.