StackRadar

mastodon 0.3.1 Helm chart

default-ghVerified publisher

Scored 14 Sept 2026

A Helm chart for Kubernetes

Version 0.3.1 3 years agoapp version v4.1.2 1Artifact Hub

mastodon 0.3.1 deploys 3 container images: bitnami/minio, ghcr.io/mastodon/mastodon and bitnami/redis. Across the 1 measured, 412 findings1 critical, 8 high 4 on CISA KEV. The highest contribution is GHSA-754f-8gm6-c4r2 in ruby-saml 1.13.0, fixed in 1.18.0.

Radar Score

5,0561869334

412 findings over 1 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
bitnami/minio2023.5.4-debian-11-r0unmeasured
ghcr.io/mastodon/mastodon×10v4.1.218693345,056
bitnami/redis×27.0.11-debian-11-r0unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

334 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGHSA-8p34-64r3-mwg8net-imap@0.3.40.5.15
LowGHSA-qjxf-mc72-wjr2devise-two-factor@4.0.26.0.0
LowGHSA-m7pr-hjqh-92cmaxios@1.3.21.15.1
LowGHSA-f27w-vcwj-c954bcrypt@3.1.173.1.22
LowGHSA-49q7-c7j4-3p7melliptic@6.5.46.5.7
LowDSA-5394-1ffmpeg@7:4.3.5-0+deb11u17:4.3.6-0+deb11u1
LowGHSA-r657-rxjc-j557rack@2.2.6.22.2.20
LowDSA-5349-1gnutls28@3.7.1-5+deb11u23.7.1-5+deb11u3
LowDSA-5567-1tiff@4.2.0-1+deb11u44.2.0-1+deb11u5
LowDLA-3910-1e2fsprogs@1.46.2-21.46.2-2+deb11u1
LowGHSA-mrxw-mxhj-p664nokogiri@1.14.11.18.4
LowGHSA-mmx7-hfxf-jppxaxios@1.3.21.18.0
LowDLA-4064-1libxml2@2.9.10+dfsg-6.7+deb11u32.9.10+dfsg-6.7+deb11u6
LowDLA-4257-1libcaca@0.99.beta19-2.20.99.beta19-2.2+deb11u1
LowGHSA-8j3g-f24p-4mpwwebsocket-driver@0.7.50.8.1
LowGHSA-353f-x4gh-cqq8nokogiri@1.14.11.18.9
LowGHSA-hw46-3hmr-x9xvomniauth-saml@1.10.31.10.6
LowGHSA-5v8h-3h3q-446pnokogiri@1.14.11.19.4
LowGHSA-76r7-hhxj-r776activerecord@6.1.7.27.1.5.2
LowGHSA-xh69-987w-hrp8resolv@0.2.10.2.3
LowDSA-5409-1libssh@0.9.5-1+deb11u10.9.7-0+deb11u1
LowDSA-5678-1glibc@2.31-13+deb11u52.31-13+deb11u10
LowGHSA-hm49-wcqc-g2xgnet-imap@0.3.40.4.24
LowDLA-4267-1gnutls28@3.7.1-5+deb11u23.7.1-5+deb11u8
LowDLA-4063-1gnutls28@3.7.1-5+deb11u23.7.1-5+deb11u7
LowDLA-4382-1libsdl2@2.0.14+dfsg2-3+deb11u12.0.14+dfsg2-3+deb11u2
LowDLA-3881-1aom@1.0.0.errata1-31.0.0.errata1-3+deb11u2
LowDLA-3962-1glib2.0@2.66.8-12.66.8-1+deb11u5
LowGHSA-cm22-4g7w-348pserve-static@1.15.01.16.0
LowDSA-5401-1postgresql-13@13.9-0+deb11u113.11-0+deb11u1
LowGHSA-gvwx-54wh-qm9jtar@6.1.117.5.17
LowDLA-4344-1gdk-pixbuf@2.42.2+dfsg-1+deb11u12.42.2+dfsg-1+deb11u4
LowGHSA-434g-2637-qmqrelliptic@6.5.46.5.6
LowGHSA-vjh7-7g9h-fjfhelliptic@6.5.46.6.1
LowGHSA-33mh-2634-fwr2faraday@1.9.31.10.5
LowDLA-4061-1libtasn1-6@4.16.0-24.16.0-2+deb11u2
LowGHSA-378v-28hj-76wfbn.js@4.12.04.12.3
LowDSA-5391-1libxml2@2.9.10+dfsg-6.7+deb11u32.9.10+dfsg-6.7+deb11u4
LowGHSA-fv7c-fp4j-7gwp@babel/plugin-transform-modules-systemjs@7.19.67.29.4
LowGHSA-977x-g7h5-7qgwelliptic@6.5.46.5.7
LowGHSA-28wg-ghj8-5hjvnanoid@3.3.43.3.16
LowGHSA-m6fv-jmcg-4jfgsend@0.18.00.19.0
LowGHSA-w9j2-pvgh-6h63axios@1.3.21.15.1
LowDLA-4145-1expat@2.2.10-2+deb11u52.2.10-2+deb11u7
LowGHSA-2v37-7h3g-55p8nanoid@3.3.43.3.18
LowGHSA-58qx-3vcg-4xpxws@8.12.08.20.1
LowGHSA-4vpr-x523-8j87svgo@1.3.22.8.4
LowDLA-4481-1libpng1.6@1.6.37-31.6.37-3+deb11u2
LowGHSA-fc9h-whq2-v747elliptic@6.5.46.6.0
LowGHSA-3v7f-55p6-f55ppicomatch@2.3.12.3.2

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.3.1latest3 years agov4.1.218693345,056

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/default-gh/mastodon.svg)](https://charts.stackradar.io/charts/default-gh/mastodon)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.