umami 7.14.0 Helm chart
christianhuthVerified publisherScored 29 Sept 2026
Umami is a simple, fast, privacy-focused alternative to Google Analytics.
Version 7.14.0 2 days agodeploys tag postgresql-v2.20.1 5Artifact Hub
umami 7.14.0 deploys 2 container images: ghcr.io/umami-software/umami and bitnami/postgresql. Across them, 189 findings — 1 critical, 0 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | postgresql-v2.20.1 | 1043144 | 2,387 |
| bitnami/ | latest | 0001 | 13 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | ALPINE-CVE-2026-75803 | openssl | 3.5.8-r0 |
| Low | GHSA-q8wf-6r8g-63ch | next | 15.5.21 |
| Low | GHSA-rxhj-4m44-96r4 | pnpm | 10.34.0 |
| Low | ALPINE-CVE-2026-80230 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-6253 | curl | 8.20.0-r0 |
| Low | ALPINE-CVE-2026-6276 | curl | 8.20.0-r0 |
| Low | GHSA-m733-5w8f-5ggw | pnpm | 10.28.2 |
| Low | GHSA-cjhr-43r9-cfmw | pnpm | 10.34.0 |
| Low | GHSA-72r4-9c5j-mj57 | pnpm | 10.34.4 |
| Low | GHSA-fr4h-3cph-29xv | pnpm | 10.34.4 |
| Low | ALPINE-CVE-2026-5545 | curl | 8.20.0-r0 |
| Low | GHSA-xpqm-wm3m-f34h | pnpm | 10.28.1 |
| Low | GHSA-6x96-7vc8-cm3p | pnpm | 10.28.1 |
| Low | ALPINE-CVE-2026-2673 | openssl | 3.5.6-r0 |
| Low | GHSA-ggv3-7p47-pfv8 | next | 15.5.13 |
| Low | GHSA-4c39-4ccg-62r3 | next | 15.5.21 |
| Low | GHSA-955p-x3mx-jcvp | next | 15.5.21 |
| Low | GHSA-6pfh-p556-v868 | pnpm | 10.28.1 |
| Low | ALPINE-CVE-2026-3784 | curl | 8.19.0-r0 |
| Low | GHSA-4gxm-v5v7-fqc4 | pnpm | 10.34.2 |
| Low | GHSA-2v37-7h3g-55p8 | nanoid | 3.3.18 |
| Low | GHSA-xwg4-73v4-xw9w | nanoid | 3.3.12 |
| Low | ALPINE-CVE-2026-63074 | openssl | 3.5.8-r0 |
| Low | GHSA-fxqj-rqcc-2cmp | postcss | 8.5.23 |
| Low | ALPINE-CVE-2025-14819 | curl | 8.18.0-r0 |
| Low | ALPINE-CVE-2026-8458 | curl | 8.22.0-r0 |
| Low | GHSA-9g9p-9gw9-jx7f | next | 15.5.10 |
| Low | GHSA-9ppj-qmqm-q256 | tar | 7.5.11 |
| Low | GHSA-3qhv-2rgh-x77r | pnpm | 10.34.2 |
| Low | ALPINE-CVE-2025-14524 | curl | 8.18.0-r0 |
| Low | GHSA-w8wr-v893-vjvp | tar | 7.5.18 |
| Low | ALPINE-CVE-2025-66199 | openssl | 3.5.5-r0 |
| Low | GHSA-vx52-2968-3vc6 | pnpm | 10.34.5 |
| Low | ALPINE-CVE-2026-40200 | musl | 1.2.5-r23 |
| Low | ALPINE-CVE-2026-7168 | curl | 8.20.0-r0 |
| Low | ALPINE-CVE-2025-62408 | c-ares | 1.34.6-r0 |
| Low | ALPINE-CVE-2026-42767 | openssl | 3.5.7-r0 |
| Low | ALPINE-CVE-2026-22796 | openssl | 3.5.5-r0 |
| Low | GHSA-2xp9-vwfh-vxw4 | next | 15.5.24 |
| Low | GHSA-p4xf-rf54-rj3x | pnpm | 10.34.0 |
| Low | GHSA-v253-rj99-jwpq | pnpm | 10.28.2 |
| Low | GHSA-gj8w-mvpf-x27x | pnpm | 10.34.2 |
| Low | GHSA-52v5-jr5w-gjxr | sigstore | 4.1.1 |
| Low | GHSA-4633-3j49-mh5q | next | 15.5.21 |
| Low | GHSA-5wx6-mg75-v57r | pnpm | 10.34.2 |
| Low | ALPINE-CVE-2026-6429 | curl | 8.20.0-r0 |
| Low | GHSA-v2v4-37r5-5v8g | ip-address | 10.1.1 |
| Low | GHSA-3v7f-55p6-f55p | picomatch | 4.0.4 |
| Low | GHSA-gvwx-54wh-qm9j | tar | 7.5.17 |
| Low | ALPINE-CVE-2026-3783 | curl | 8.19.0-r0 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 7.14.0latest | 2 days ago | postgresql-v2.20.1 | 1043145 | 2,400 |
| 7.13.2 | 8 days ago | postgresql-v2.20.1 | 1043145 | 2,400 |
| 7.13.1 | 13 days ago | postgresql-v2.20.1 | 1043144 | 2,387 |
| 7.13.0 | 17 days ago | postgresql-v2.20.1 | 1043144 | 2,387 |
| 7.12.0 | 19 days ago | postgresql-v2.20.1 | 1043144 | 2,387 |
| 7.11.6 | 22 days ago | postgresql-v2.20.1 | 1043144 | 2,387 |
| 7.11.5 | 1 month ago | postgresql-v2.20.1 | 1043144 | 2,387 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.