self-host 2.5.2 Helm chart
bitwardenNot scored yet
A Helm chart for deploying a Bitwarden instance on Kubernetes
Version 2.5.2 todayapp version 2026.9.2 1Artifact Hub
self-host 2.5.2 deploys 11 container images: ghcr.io/bitwarden/admin, ghcr.io/bitwarden/api, ghcr.io/bitwarden/attachments, ghcr.io/bitwarden/events and 7 more. The highest contribution is UBUNTU-CVE-2026-45447 in openssl 3.0.13-0ubuntu3.9, fixed in 3.0.13-0ubuntu3.11.
Radar Score
Not yet scored
The daily scoring run has not folded the 11 images into a score yet.
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
11 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | 2026.9.2 | 00321 | 278 |
| ghcr.io/ | 2026.9.2 | 00321 | 278 |
| ghcr.io/ | 2026.9.2 | 00321 | 278 |
| ghcr.io/ | 2026.9.2 | 00321 | 278 |
| ghcr.io/ | 2026.9.2 | 00321 | 278 |
| ghcr.io/ | 2026.9.2 | 00321 | 278 |
| ghcr.io/ | 2026.9.2 | 00321 | 278 |
| ghcr.io/ | 2026.9.2 | 00321 | 278 |
| ghcr.io/ | 2026.9.1 | 00321 | 278 |
| mcr.microsoft.com/ | 2025-CU5-ubuntu-24.04 | 0041340 | 3,745 |
| ghcr.io/ | 2026.9.2 | 0001 | 13 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
384 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-13608 | curl | 8.5.0-2ubuntu10.15 |
| Low | GO-2025-4155 | stdlib | 1.24.11 |
| Low | UBUNTU-CVE-2026-48962 | perl | 5.38.2-3.2ubuntu0.4 |
| Low | UBUNTU-CVE-2026-42011 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Low | UBUNTU-CVE-2026-9538 | perl | 5.38.2-3.2ubuntu0.4 |
| Low | GO-2025-4014 | stdlib | 1.24.8 |
| Low | UBUNTU-CVE-2026-58014 | glib2.0 | 2.80.0-6ubuntu3.9 |
| Low | UBUNTU-CVE-2026-19553 | python3.12 | no fix listed |
| Low | UBUNTU-CVE-2026-75803 | openssl | 3.0.13-0ubuntu3.15 |
| Low | UBUNTU-CVE-2026-42012 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Low | UBUNTU-CVE-2026-4786 | python3.12 | 3.12.3-1ubuntu0.15 |
| Low | UBUNTU-CVE-2026-95210 | gnutls28 | no fix listed |
| Low | GO-2025-4007 | stdlib | 1.24.9 |
| Low | GO-2026-6608 | stdlib | 1.26.9 |
| Low | UBUNTU-CVE-2026-93990 | expat | no fix listed |
| Low | USN-8670-1 | curl | 8.5.0-2ubuntu10.13 |
| Low | GO-2026-6607 | stdlib | 1.26.9 |
| Low | UBUNTU-CVE-2026-8286 | curl | 8.5.0-2ubuntu10.10 |
| Low | UBUNTU-CVE-2026-40355 | krb5 | 1.20.1-6ubuntu2.7 |
| Low | UBUNTU-CVE-2026-40356 | krb5 | 1.20.1-6ubuntu2.7 |
| Low | GO-2025-4013 | stdlib | 1.24.8 |
| Low | UBUNTU-CVE-2026-40469 | gawk | 1:5.2.1-2ubuntu0.1 |
| Low | UBUNTU-CVE-2026-6791 | glibc | 2.39-0ubuntu8.9 |
| Low | GO-2026-6609 | stdlib | 1.26.9 |
| Low | UBUNTU-CVE-2026-88647 | gnutls28 | no fix listed |
| Low | UBUNTU-CVE-2026-17084 | python3.12 | no fix listed |
| Low | UBUNTU-CVE-2026-58015 | glib2.0 | 2.80.0-6ubuntu3.9 |
| Low | UBUNTU-CVE-2026-80230 | curl | 8.5.0-2ubuntu10.15 |
| Low | UBUNTU-CVE-2026-4426 | libarchive | 3.7.2-2ubuntu0.7 |
| Low | UBUNTU-CVE-2026-5435 | glibc | 2.39-0ubuntu8.8 |
| Low | GO-2025-3420 | stdlib | 1.22.11 |
| Low | UBUNTU-CVE-2026-40468 | gawk | 1:5.2.1-2ubuntu0.1 |
| Low | GO-2025-3956 | stdlib | 1.23.12 |
| Low | GO-2026-4946 | stdlib | 1.25.9 |
| Low | UBUNTU-CVE-2026-76641 | expat | 2.6.1-2ubuntu0.6 |
| Low | UBUNTU-CVE-2025-5222 | icu | no fix listed |
| Low | UBUNTU-CVE-2026-85091 | zlib | no fix listed |
| Low | USN-8362-1 | xz-utils | 5.6.1+really5.4.5-1ubuntu0.3 |
| Low | UBUNTU-CVE-2026-11822 | sqlite3 | 3.45.1-1ubuntu2.6 |
| Low | UBUNTU-CVE-2026-4519 | python3.12 | 3.12.3-1ubuntu0.15 |
| Low | UBUNTU-CVE-2026-87853 | sssd | no fix listed |
| Low | UBUNTU-CVE-2026-4437 | glibc | 2.39-0ubuntu8.8 |
| Low | UBUNTU-CVE-2026-42015 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| Low | UBUNTU-CVE-2026-19499 | glibc | 2.39-0ubuntu8.9 |
| Low | GO-2026-6613 | stdlib | 1.26.9 |
| Low | UBUNTU-CVE-2026-58013 | glib2.0 | 2.80.0-6ubuntu3.9 |
| Low | UBUNTU-CVE-2026-9547 | curl | 8.5.0-2ubuntu10.10 |
| Low | GO-2025-3849 | stdlib | 1.23.12 |
| Low | GO-2026-6605 | stdlib | 1.26.9 |
| Low | UBUNTU-CVE-2026-58010 | glib2.0 | 2.80.0-6ubuntu3.9 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 2.5.2latest | today | 2026.9.2 | — | — |
| 2.5.1 | 12 days ago | 2026.9.2 | 0068526 | 6,211 |
| 2.5.0 | 13 days ago | 2026.9.0 | 0047421 | 4,408 |
| 2.4.2 | 26 days ago | 2026.9.0 | 0047421 | 4,408 |
| 2.4.1 | 28 days ago | 2026.8.2 | 0091494 | 6,119 |
| 2.4.0 | 1 month ago | 2026.8.0 | 0091494 | 6,126 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/bitwarden/self-host)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.