umami 7.11.5 Helm chart
christianhuthVerified publisherScored 14 Sept 2026
Umami is a simple, fast, privacy-focused alternative to Google Analytics.
Version 7.11.5 23 days agodeploys tag postgresql-v2.20.1 5Artifact Hub
umami 7.11.5 deploys 2 container images: ghcr.io/umami-software/umami and bitnami/postgresql. Across them, 187 findings — 0 critical, 2 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | postgresql-v2.20.1 | 0239146 | 2,367 |
| bitnami/ | latest | 0000 | 0 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-cjhr-43r9-cfmw | pnpm | 10.34.0 |
| Low | GHSA-72r4-9c5j-mj57 | pnpm | 10.34.4 |
| Low | GHSA-fr4h-3cph-29xv | pnpm | 10.34.4 |
| Low | GHSA-c59q-g84q-2gj5 | pnpm | 10.34.5 |
| Low | GHSA-9ppj-qmqm-q256 | tar | 7.5.11 |
| Low | GHSA-4c39-4ccg-62r3 | next | 15.5.21 |
| Low | ALPINE-CVE-2026-9547 | curl | 8.22.0-r0 |
| Low | GHSA-m733-5w8f-5ggw | pnpm | 10.28.2 |
| Low | GHSA-955p-x3mx-jcvp | next | 15.5.21 |
| Low | GHSA-xpqm-wm3m-f34h | pnpm | 10.28.1 |
| Low | ALPINE-CVE-2026-6276 | curl | 8.20.0-r0 |
| Low | GHSA-4gxm-v5v7-fqc4 | pnpm | 10.34.2 |
| Low | GHSA-6x96-7vc8-cm3p | pnpm | 10.28.1 |
| Low | GHSA-xwg4-73v4-xw9w | nanoid | 3.3.12 |
| Low | ALPINE-CVE-2026-2673 | openssl | 3.5.6-r0 |
| Low | GHSA-f886-m6hf-6m8v | brace-expansion | 2.0.3 |
| Low | ALPINE-CVE-2026-9080 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-42767 | openssl | 3.5.7-r0 |
| Low | ALPINE-CVE-2026-5545 | curl | 8.20.0-r0 |
| Low | ALPINE-CVE-2026-3784 | curl | 8.19.0-r0 |
| Low | ALPINE-CVE-2026-9545 | curl | 8.22.0-r0 |
| Low | GHSA-6pfh-p556-v868 | pnpm | 10.28.1 |
| Low | GHSA-fxqj-rqcc-2cmp | postcss | 8.5.23 |
| Low | ALPINE-CVE-2025-14819 | curl | 8.18.0-r0 |
| Low | GHSA-ggv3-7p47-pfv8 | next | 15.5.13 |
| Low | GHSA-83g3-92jg-28cx | tar | 7.5.8 |
| Low | GHSA-3qhv-2rgh-x77r | pnpm | 10.34.2 |
| Low | ALPINE-CVE-2026-63074 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2025-14524 | curl | 8.18.0-r0 |
| Low | GHSA-w8wr-v893-vjvp | tar | 7.5.18 |
| Low | ALPINE-CVE-2026-34181 | openssl | 3.5.7-r0 |
| Low | GHSA-9g9p-9gw9-jx7f | next | 15.5.10 |
| Low | ALPINE-CVE-2026-40200 | musl | 1.2.5-r23 |
| Low | GHSA-4633-3j49-mh5q | next | 15.5.21 |
| Low | ALPINE-CVE-2025-62408 | c-ares | 1.34.6-r0 |
| Low | ALPINE-CVE-2025-66199 | openssl | 3.5.5-r0 |
| Low | GHSA-2xp9-vwfh-vxw4 | next | 15.5.24 |
| Low | GHSA-p4xf-rf54-rj3x | pnpm | 10.34.0 |
| Low | GHSA-gj8w-mvpf-x27x | pnpm | 10.34.2 |
| Low | GHSA-52v5-jr5w-gjxr | sigstore | 4.1.1 |
| Low | ALPINE-CVE-2026-6429 | curl | 8.20.0-r0 |
| Low | GHSA-v253-rj99-jwpq | pnpm | 10.28.2 |
| Low | GHSA-5wx6-mg75-v57r | pnpm | 10.34.2 |
| Low | ALPINE-CVE-2026-22796 | openssl | 3.5.5-r0 |
| Low | GHSA-gvwx-54wh-qm9j | tar | 7.5.17 |
| Low | GHSA-68g3-v927-f742 | next | 15.5.21 |
| Low | GHSA-hg3w-7f8c-63hp | pnpm | 10.33.4 |
| Low | ALPINE-CVE-2026-1965 | curl | 8.19.0-r0 |
| Low | GHSA-rgj7-g3m4-5g8c | sharp | 0.35.4 |
| Low | ALPINE-CVE-2026-7168 | curl | 8.20.0-r0 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 7.13.0latest | 2 days ago | postgresql-v2.20.1 | 0239146 | 2,367 |
| 7.12.0 | 5 days ago | postgresql-v2.20.1 | 0239146 | 2,367 |
| 7.11.6 | 8 days ago | postgresql-v2.20.1 | 0239146 | 2,367 |
| 7.11.5 | 23 days ago | postgresql-v2.20.1 | 0239146 | 2,367 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.