passbolt-ha Helm chart

Name: passbolt-ha Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

christianhuth

Scored 14 Sept 2026

A Helm chart to deploy Passbolt with MySQL and ProxySQL for HA

Latest 6.0.1 17 days agoApp version not verified against the render 1Artifact Hub

passbolt-ha 6.0.1 deploys 4 container images: passbolt/passbolt, proxysql/proxysql, bitnamilegacy/mysql and bitnamilegacy/os-shell. Across them, 1,003 findings — 1 critical, 7 high — 4 on CISA KEV. The highest contribution is DEBIAN-CVE-2022-31626 in php7.4 7.4.25-1+deb11u1, fixed in 7.4.30-1+deb11u1.

Radar Score

10,81717143851

1,003 findings over 4 of 4 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
passbolt/passbolt	3.4.0-ce-non-root	1543235	3,544
proxysql/proxysql	3.0.11	0018109	1,277
bitnamilegacy/mysql×4	9.4.0-debian-12-r1	0136256	2,905
bitnamilegacy/os-shell×2	12-debian-12-r50	0146255	3,147

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

534 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2022-3219	gnupg2@2.2.40-1.1	no fix listed
Low	DLA-4319-1	libxml2@2.9.10+dfsg-6.7	2.9.10+dfsg-6.7+deb11u9
Low	DEBIAN-CVE-2023-4016	procps@2:4.0.2-3	no fix listed
Low	DEBIAN-CVE-2025-1181	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-90802	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-1180	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-69418	openssl@3.0.17-1~deb12u1	3.0.18-1~deb12u2
Low	DEBIAN-CVE-2007-5686	shadow@1:4.13+dfsg1-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-1151	binutils@2.40-2	no fix listed
Low	GO-2026-5024	golang.org/x/sys@v0.33.0	0.44.0
Low	DEBIAN-CVE-2025-1182	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-18477	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-53613	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-53615	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-77117	glibc@2.36-9+deb12u10	no fix listed
Low	DEBIAN-CVE-2026-78030	libdbi-perl@1.652-2~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-80489	glibc@2.36-9+deb12u10	no fix listed
Low	DLA-3972-1	tzdata@2021a-1+deb11u2	2024b-0+deb11u1
Low	DLA-4016-1	ucf@3.0043	3.0043+deb11u2
Low	DLA-4085-1	tzdata@2021a-1+deb11u2	2025a-0+deb11u1
Low	DLA-4105-1	tzdata@2021a-1+deb11u2	2025b-0+deb11u1
Low	DLA-4213-1	curl@7.74.0-1.3+b1	7.74.0-1.3+deb11u15
Low	DLA-4403-1	tzdata@2021a-1+deb11u2	2025b-0+deb11u2
Low	DLA-4485-1	ca-certificates@20210119	20230311+deb12u1~deb11u1
Low	DSA-5085-2	expat@2.2.10-2	2.2.10-2+deb11u3
Low	DEBIAN-CVE-2026-40228	systemd@252.38-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-61081	mariadb@1:11.8.6-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-57062	gnupg2@2.2.40-1.1	no fix listed
Low	DEBIAN-CVE-2026-53910	diffutils@1:3.8-4	no fix listed
Low	DEBIAN-CVE-2026-89162	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	DEBIAN-CVE-2026-89156	pcre2@10.42-1	10.42-1+deb12u1
Low	DEBIAN-CVE-2025-66861	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-5958	sed@4.9-1	4.9-1+deb12u1
Low	DEBIAN-CVE-2026-6368	glibc@2.36-9+deb12u10	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
6.0.1latest	17 days ago	—	17143851	10,817

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/christianhuth/passbolt-ha.svg)](https://charts.stackradar.io/charts/christianhuth/passbolt-ha)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.