quickchart Helm chart

Name: quickchart Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cowboysysop

Scored 14 Sept 2026

Chart image and QR code web API

Latest 5.0.0 1 year agoapp version 1.7.1 0Artifact Hub

quickchart 5.0.0 deploys 1 container image: ianw/quickchart. Across them, 377 findings — 5 critical, 8 high — 3 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 7.80.0-r3, fixed in 8.4.0-r0.

Radar Score

5,48858106258

377 findings over 1 of 1 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ianw/quickchart	v1.7.1	58106258	5,488

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

377 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	ALPINE-CVE-2023-38545	curl@7.80.0-r3	8.4.0-r0
Critical	ALPINE-CVE-2023-4863KEV	libwebp@1.2.2-r0	1.2.2-r2
Critical	GHSA-ch3r-j5x3-6q2m	vm2@3.9.11	3.9.17
Critical	GHSA-7jxr-cg7f-gpgv	vm2@3.9.11	3.9.15
Critical	ALPINE-CVE-2023-44487KEV	nghttp2@1.46.0-r0	1.46.0-r2
High	ALPINE-CVE-2023-0286	openssl@1.1.1q-r0	1.1.1t-r0
High	ALPINE-CVE-2023-2650	openssl@1.1.1q-r0	1.1.1u-r0
High	GHSA-r5fr-rjxr-66jc	lodash@4.17.21	4.18.0
High	GHSA-w573-4hg7-7wgq	decode-uri-component@0.2.0	0.2.1
High	ALPINE-CVE-2022-4450	openssl@1.1.1q-r0	1.1.1t-r0
High	GHSA-whpj-8f3w-67p5	vm2@3.9.11	3.9.18
High	ALPINE-CVE-2022-43551	curl@7.80.0-r3	7.80.0-r5
High	GO-2022-0535KEV	stdlib@go1.13.1	1.12.16
Medium	GHSA-hrpp-h998-j3pp	qs@6.5.2	6.5.3
Medium	GO-2024-2687	stdlib@go1.13.1	1.21.9
Medium	GHSA-2p57-rm9w-gvfp	ip@1.1.5	no fix listed
Medium	GHSA-xvch-5gv4-984h	minimist@1.2.5	1.2.6
Medium	ALPINE-CVE-2022-32221	curl@7.80.0-r3	7.80.0-r4
Medium	GHSA-g644-9gfx-q4q4	vm2@3.9.11	no fix listed
Medium	GHSA-cchq-frgv-rjh5	vm2@3.9.11	3.10.0
Medium	GHSA-xj72-wvfv-8985	vm2@3.9.11	3.9.16
Medium	GHSA-9c47-m6qq-7p4h	json5@1.0.1	1.0.2
Medium	ALPINE-CVE-2022-4304	openssl@1.1.1q-r0	1.1.1t-r0
Medium	GHSA-x3cc-x39p-42qx	fast-xml-parser@3.21.1	4.1.2
Medium	GHSA-p6mc-m468-83gw	lodash.pick@4.4.0	no fix listed
Medium	ALPINE-CVE-2023-0215	openssl@1.1.1q-r0	1.1.1t-r0
Medium	GHSA-6j2x-vhqr-qr7q	vm2@3.9.11	3.11.4
Medium	ALPINE-CVE-2022-42915	curl@7.80.0-r3	7.80.0-r4
Medium	ALPINE-CVE-2023-0464	openssl@1.1.1q-r0	1.1.1t-r2
Medium	GHSA-93q8-gq69-wqmw	ansi-regex@4.1.0	4.1.1
Medium	ALPINE-CVE-2023-27534	curl@7.80.0-r3	8.0.1-r0
Medium	GHSA-fjxv-7rqg-78g4	form-data@2.5.1	2.5.4
Medium	ALPINE-CVE-2023-27533	curl@7.80.0-r3	8.0.1-r0
Medium	ALPINE-CVE-2021-27219	glib@2.70.1-r0	2.66.6-r0
Medium	GHSA-99p7-6v5w-7xg8	vm2@3.9.11	3.10.2
Medium	GHSA-c2qf-rxjj-qqgw	semver@5.7.1	5.7.2
Medium	GHSA-43fc-jf86-j433	axios@0.24.0	0.30.3
Medium	GHSA-qm95-pgcg-qqfq	socket.io-parser@3.3.2	3.3.3
Medium	ALPINE-CVE-2022-45061	python3@3.9.13-r1	3.9.16-r0
Medium	GHSA-v37h-5mfm-c47c	vm2@3.9.11	3.11.0
Medium	ALPINE-CVE-2023-28319	curl@7.80.0-r3	8.1.0-r0
Medium	ALPINE-CVE-2022-44638	pixman@0.40.0-r3	0.40.0-r4
Medium	ALPINE-CVE-2022-43680	expat@2.4.9-r0	2.5.0-r0
Medium	GHSA-87r5-mp6g-5w5j	jsonpath@1.1.1	1.3.0
Medium	GHSA-47x8-96vw-5wg6	vm2@3.9.11	3.11.0
Medium	ALPINE-CVE-2023-3446	openssl@1.1.1q-r0	1.1.1u-r2
Medium	GHSA-pq67-2wwv-3xjx	tar-fs@2.1.1	2.1.2
Medium	GHSA-rp65-9cf3-cjxr	nth-check@1.0.2	2.0.1
Medium	ALPINE-CVE-2022-3970	tiff@4.4.0-r0	4.4.0-r1
Medium	GHSA-ffh4-j6h5-pg66	vm2@3.9.11	3.10.5

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
5.0.0latest	1 year ago	1.7.1	58106258	5,488

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cowboysysop/quickchart.svg)](https://charts.stackradar.io/charts/cowboysysop/quickchart)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.