StackRadar

ghost 0.1.6 Helm chart

chart-ghost

Scored 29 Sept 2026

Install Ghost (ghost.org) from upstream container image including initialization of a new deployment's admin account.

Version 0.1.6 todayapp version 6.65.0 0Artifact Hub

ghost 0.1.6 deploys 2 container images: library/ghost and registry.gitlab.com/gitlab-ci-utils/curl-jq. Across them, 126 findings — 0 critical, 0 high. The highest contribution is GHSA-pfq8-rq6v-vf5m in html-minifier 4.0.0, with no fix listed.

Radar Score

1,105002124

126 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
library/ghost×26.65.0-alpine3.230021231,092
registry.gitlab.com/gitlab-ci-utils/curl-jqlatest000113

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

124 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGHSA-mwp4-54f8-5fhrip-address@10.1.010.3.1
LowGHSA-jmr9-qjv8-65gvextract-zip@2.0.1no fix listed
LowGHSA-rgw5-rvv9-x895brace-expansion@2.0.22.1.4
LowGHSA-23hp-3jrh-7fpwtar@7.5.167.5.19
LowGHSA-8x88-c5mf-7j5wtar@7.5.167.5.18
LowGHSA-mh99-v99m-4gvgbrace-expansion@2.0.22.1.3
LowGHSA-w4pp-8pjf-rmxwpacote@20.0.121.5.1
LowGHSA-8cf7-32gw-wr33jsonwebtoken@8.5.19.0.0
LowGHSA-qfvm-cv95-jqjfmulter@2.2.02.3.0
LowALPINE-CVE-2026-93990expat@2.8.4-r02.8.5-r0
LowGHSA-4cwx-7wf7-3272undici@7.28.07.29.0
LowGHSA-2883-xcg3-v3hhjs-yaml@4.3.04.3.2
LowGHSA-r292-9mhp-454mtar@7.5.167.5.21
LowGHSA-535w-7cp7-47q4multer@2.2.02.3.0
LowGHSA-c2c7-rcm5-vvqjpicomatch@4.0.34.0.4
LowGHSA-wc9g-mqfw-jrwmmulter@2.2.02.3.0
LowGHSA-4c8g-83qw-93j6fast-uri@3.1.23.1.3
LowGHSA-5p2g-fcmc-qvqqimage-size@1.2.12.0.3
LowGHSA-w3rx-r6r6-pgprimage-size@1.2.12.0.3
LowGHSA-f886-m6hf-6m8vbrace-expansion@2.0.22.0.3
LowGHSA-jqff-g426-hqxpfast-uri@3.1.23.1.6
LowGHSA-qw65-cvwx-89v3fast-uri@3.1.23.1.7
LowGHSA-f65p-4m7j-42xcfast-uri@3.1.23.1.6
LowGHSA-fph4-wmhf-6fwffast-uri@3.1.23.1.6
LowGO-2026-4341stdlib@go1.24.61.24.12
LowGHSA-7pqw-9j4j-h8q3extract-zip@2.0.1no fix listed
LowGHSA-qwph-4952-7xr6jsonwebtoken@8.5.19.0.0
LowGHSA-727h-3vm5-qwq6mppx@0.6.200.8.2
LowGHSA-p6gq-j5cr-w38fnodemailer@8.0.119.0.1
LowGHSA-gqvv-2mrq-wpjvhono@4.12.184.13.5
LowGHSA-88fw-hqm2-52qchono@4.12.184.12.25
LowGHSA-wmmp-3585-3rmpnodemailer@8.0.119.1.0
LowGHSA-v2hh-gcrm-f6hxfast-uri@3.1.23.1.4
LowGHSA-cc9r-2j5m-2m83nodemailer@8.0.119.1.0
LowGHSA-w8wr-v893-vjvptar@7.5.167.5.18
LowGHSA-hjrf-2m68-5959jsonwebtoken@8.5.19.0.0
LowGHSA-7p8r-x3mc-p8w7fast-uri@3.1.23.1.5
LowGHSA-crvj-82cr-hjcxhono@4.12.184.13.5
LowGHSA-8j4g-w8fx-2239hono@4.12.184.12.34
LowGHSA-wwfh-h76j-fc44hono@4.12.184.12.25
LowGHSA-3wwx-pv8p-q78vundici@8.10.08.10.2
LowGHSA-hvrm-45r6-mjfjhono@4.12.184.12.27
LowGHSA-jr45-8vmc-qm54undici@7.28.07.29.0
LowGHSA-52v5-jr5w-gjxrsigstore@3.1.04.1.1
LowGHSA-3pph-fpjx-jg34multer@2.2.02.4.0
LowGHSA-g6gw-c38x-mqfchono@4.12.184.13.5
LowGHSA-v2v4-37r5-5v8gip-address@10.1.010.1.1
LowGHSA-3v7f-55p6-f55ppicomatch@4.0.34.0.4
LowGHSA-54fx-42gc-7vw4hono@4.12.184.12.34
LowGHSA-gvwx-54wh-qm9jtar@7.5.167.5.17

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.6latesttoday6.65.00021241,105
0.1.56 months ago6.22.005832604,258

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/chart-ghost/ghost.svg)](https://charts.stackradar.io/charts/chart-ghost/ghost)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 29 Sept 2026 · scanned 29 Sept 2026 · advisories as of 29 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.