self-host 2.5.2 Helm chart
bitwardenNot scored yet
A Helm chart for deploying a Bitwarden instance on Kubernetes
Version 2.5.2 todayapp version 2026.9.2 1Artifact Hub
self-host 2.5.2 deploys 11 container images: ghcr.io/bitwarden/admin, ghcr.io/bitwarden/api, ghcr.io/bitwarden/attachments, ghcr.io/bitwarden/events and 7 more. The highest contribution is UBUNTU-CVE-2026-45447 in openssl 3.0.13-0ubuntu3.9, fixed in 3.0.13-0ubuntu3.11.
Radar Score
Not yet scored
The daily scoring run has not folded the 11 images into a score yet.
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
11 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | 2026.9.2 | 00321 | 278 |
| ghcr.io/ | 2026.9.2 | 00321 | 278 |
| ghcr.io/ | 2026.9.2 | 00321 | 278 |
| ghcr.io/ | 2026.9.2 | 00321 | 278 |
| ghcr.io/ | 2026.9.2 | 00321 | 278 |
| ghcr.io/ | 2026.9.2 | 00321 | 278 |
| ghcr.io/ | 2026.9.2 | 00321 | 278 |
| ghcr.io/ | 2026.9.2 | 00321 | 278 |
| ghcr.io/ | 2026.9.1 | 00321 | 278 |
| mcr.microsoft.com/ | 2025-CU5-ubuntu-24.04 | 0041336 | 3,696 |
| ghcr.io/ | 2026.9.2 | 0001 | 13 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
380 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-66046 | expat | 2.6.1-2ubuntu0.6 |
| Low | UBUNTU-CVE-2026-42013 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Low | UBUNTU-CVE-2026-77214 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-9076 | openssl | 3.0.13-0ubuntu3.11 |
| Low | UBUNTU-CVE-2026-45445 | openssl | 3.0.13-0ubuntu3.11 |
| Low | UBUNTU-CVE-2024-10524 | wget | no fix listed |
| Low | UBUNTU-CVE-2026-4224 | python3.12 | 3.12.3-1ubuntu0.15 |
| Low | UBUNTU-CVE-2026-12087 | perl | 5.38.2-3.2ubuntu0.4 |
| Low | UBUNTU-CVE-2026-4046 | glibc | 2.39-0ubuntu8.8 |
| Low | GO-2025-4009 | stdlib | 1.24.8 |
| Low | USN-8601-1 | pam | 1.5.3-5ubuntu5.6 |
| Low | UBUNTU-CVE-2026-74860 | libxml2 | 2.9.14+dfsg-1.3ubuntu3.9 |
| Low | GO-2025-4006 | stdlib | 1.24.8 |
| Low | UBUNTU-CVE-2026-15308 | python3.12 | 3.12.3-1ubuntu0.17 |
| Low | UBUNTU-CVE-2026-82560 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-54874 | openssl | 3.0.13-0ubuntu3.15 |
| Low | GO-2026-4870 | stdlib | 1.25.9 |
| Low | GO-2026-4971 | stdlib | 1.25.10 |
| Low | GO-2026-4947 | stdlib | 1.25.9 |
| Low | UBUNTU-CVE-2026-48959 | perl | 5.38.2-3.2ubuntu0.4 |
| Low | UBUNTU-CVE-2026-7774 | python3.12 | 3.12.3-1ubuntu0.15 |
| Low | UBUNTU-CVE-2021-31879 | wget | no fix listed |
| Low | GO-2026-5037 | stdlib | 1.25.11 |
| Low | UBUNTU-CVE-2025-69534 | python3.12 | 3.12.3-1ubuntu0.15 |
| Low | UBUNTU-CVE-2026-3833 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Low | GO-2026-6603 | stdlib | 1.26.9 |
| Low | GO-2026-5972 | stdlib | 1.25.13 |
| Low | GO-2026-6088 | stdlib | 1.25.13 |
| Low | GO-2026-6089 | stdlib | 1.25.13 |
| Low | GO-2026-6090 | stdlib | 1.25.13 |
| Low | GO-2026-6611 | stdlib | 1.26.9 |
| Low | UBUNTU-CVE-2026-41992 | gzip | 1.12-1ubuntu3.2 |
| Low | GO-2026-5038 | stdlib | 1.25.11 |
| Low | UBUNTU-CVE-2026-9669 | python3.12 | 3.12.3-1ubuntu0.15 |
| Low | GO-2026-6218 | stdlib | 1.25.13 |
| Low | GO-2026-5942 | stdlib | 1.26.6 |
| Low | UBUNTU-CVE-2026-42011 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Low | UBUNTU-CVE-2026-58016 | glib2.0 | 2.80.0-6ubuntu3.9 |
| Low | USN-8711-1 | libgcrypt20 | 1.10.3-2ubuntu0.2 |
| Low | UBUNTU-CVE-2026-42766 | openssl | 3.0.13-0ubuntu3.11 |
| Low | UBUNTU-CVE-2026-86145 | pcre2 | no fix listed |
| Low | UBUNTU-CVE-2026-84782 | openssl | 3.0.13-0ubuntu3.16 |
| Low | GO-2025-3751 | stdlib | 1.23.10 |
| Low | UBUNTU-CVE-2026-58469 | wget | 1.21.4-1ubuntu4.3 |
| Low | UBUNTU-CVE-2026-5928 | glibc | 2.39-0ubuntu8.8 |
| Low | GO-2026-4342 | stdlib | 1.24.12 |
| Low | UBUNTU-CVE-2026-82209 | curl | 8.5.0-2ubuntu10.15 |
| Low | ALPINE-CVE-2026-85091 | zlib | 1.3.2-r1 |
| Low | UBUNTU-CVE-2026-3644 | python3.12 | 3.12.3-1ubuntu0.15 |
| Low | UBUNTU-CVE-2026-59843 | libssh | 0.10.6-2ubuntu0.5 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 2.5.2latest | today | 2026.9.2 | — | — |
| 2.5.1 | 12 days ago | 2026.9.2 | 0068526 | 6,211 |
| 2.5.0 | 13 days ago | 2026.9.0 | 0047421 | 4,408 |
| 2.4.2 | 26 days ago | 2026.9.0 | 0047421 | 4,408 |
| 2.4.1 | 28 days ago | 2026.8.2 | 0091494 | 6,119 |
| 2.4.0 | 1 month ago | 2026.8.0 | 0091494 | 6,126 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/bitwarden/self-host)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.