umami 8.0.0 Helm chart

Name: umami Helm chart 8.0.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

christianhuth

Scored 22 Oct 2026

Umami is a simple, fast, privacy-focused alternative to Google Analytics.

Version 8.0.0 5 days agoapp version v3.4.0 5Artifact Hub

umami 8.0.0 deploys 1 container image: ghcr.io/umami-software/umami. Across them, 27 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-63073 in openssl 3.5.7-r0, fixed in 3.5.8-r0.

Radar Score

30500522

27 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/umami-software/umami	3.4.0	00522	305

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

27 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2026-63073	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-63076	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-18798	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-14457	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-63072	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-ggr8-5vv4-36mx	deepmerge-ts@7.1.5	8.0.0
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-85091	zlib@1.3.2-r0	1.3.2-r1
Low	GHSA-pqg4-j6r4-53mv	shell-quote@1.10.0	1.11.0
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-rfgv-xxqx-mfg5	undici@6.28.0	6.28.1
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-wq5f-xc86-pv6w	sharp@0.35.4	0.35.5
Low	GHSA-vcvr-r3jv-pc5j	next@16.3.4	16.3.6
Low	GHSA-3wwx-pv8p-q78v	undici@6.28.0	6.28.1
Low	GHSA-cjq9-62q9-8jv4	next@16.3.4	16.3.8
Low	ALPINE-CVE-2026-58055	nghttp2@1.69.0-r0	1.70.0-r0
Low	GHSA-3f6p-5ww8-9rcr	mysql2@3.15.3	3.22.0
Low	GHSA-4jqv-mc3x-m676	next@16.3.4	16.3.8
Low	GHSA-mcj8-r9mp-w47p	next@16.3.4	16.3.8
Low	GHSA-f87g-xv8r-7p7x	next@16.3.4	16.3.8
Low	GHSA-rgwj-5xj2-c3m3	mysql2@3.15.3	3.23.1
Low	GHSA-39w2-rjm5-chcv	next@16.3.4	16.3.8
Low	GHSA-3w37-wq28-93x7	next@16.3.4	16.3.8
Low	GHSA-r53p-7pc4-xj5r	undici@6.28.0	6.28.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
8.0.0latest	5 days ago	v3.4.0	00522	305
7.14.1	23 days ago	postgresql-v2.20.1	1041160	2,499
7.14.0	25 days ago	postgresql-v2.20.1	1041160	2,499
7.13.2	30 days ago	postgresql-v2.20.1	1041160	2,499
7.13.1	1 month ago	postgresql-v2.20.1	1041159	2,486
7.13.0	1 month ago	postgresql-v2.20.1	1041159	2,486
7.12.0	1 month ago	postgresql-v2.20.1	1041159	2,486
7.11.6	1 month ago	postgresql-v2.20.1	1041159	2,486
7.11.5	1 month ago	postgresql-v2.20.1	1041159	2,486

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/christianhuth/umami.svg)](https://charts.stackradar.io/charts/christianhuth/umami)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.