StackRadar

mastodon 0.3.1 Helm chart

default-ghVerified publisher

Scored 14 Sept 2026

A Helm chart for Kubernetes

Version 0.3.1 3 years agoapp version v4.1.2 1Artifact Hub

mastodon 0.3.1 deploys 3 container images: bitnami/minio, ghcr.io/mastodon/mastodon and bitnami/redis. Across the 1 measured, 412 findings1 critical, 8 high 4 on CISA KEV. The highest contribution is GHSA-754f-8gm6-c4r2 in ruby-saml 1.13.0, fixed in 1.18.0.

Radar Score

5,0561869334

412 findings over 1 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
bitnami/minio2023.5.4-debian-11-r0unmeasured
ghcr.io/mastodon/mastodon×10v4.1.218693345,056
bitnami/redis×27.0.11-debian-11-r0unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

412 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumGHSA-hwj9-h5mp-3pm3postcss@7.0.327.0.36
MediumGHSA-jr5f-v2jv-69x6axios@1.3.21.8.2
MediumGHSA-95m3-7q98-8xr5sha.js@2.4.112.4.12
MediumGHSA-8hc4-vh64-cxmjaxios@1.3.21.7.4
MediumGHSA-5866-49gr-22v4rexml@3.2.53.3.3
MediumGHSA-gjh7-p2fx-99vxrack@2.2.6.22.2.14
MediumGHSA-7wqh-767x-r66vrack@2.2.6.22.2.13
MediumGHSA-4hjh-wcwx-xvwjaxios@1.3.21.12.0
MediumGHSA-9xrj-h377-fr87activestorage@6.1.7.27.2.3.1
MediumGHSA-f23m-r3pf-42rhlodash@4.17.214.18.0
MediumGHSA-xxjr-mmjv-4gpglodash@4.17.214.17.23
MediumGHSA-xvcm-6775-5m9rimmutable@4.2.44.3.9
MediumGHSA-73f9-jhhh-hr5mactivestorage@6.1.7.27.2.3.1
MediumGHSA-67hx-6x53-jw92@babel/traverse@7.20.127.23.2
MediumGHSA-2j26-frm8-cmj9activesupport@6.1.7.27.2.3.1
MediumGHSA-r46p-8f7g-vvvgactivestorage@6.1.7.27.2.3.1
MediumGHSA-37ch-88jc-xwx2path-to-regexp@0.1.70.1.13
MediumGHSA-9wv6-86v2-598jpath-to-regexp@0.1.70.1.10
MediumGHSA-p543-xpfm-54cprack@2.2.6.22.2.19
MediumGHSA-wpv5-97wm-hp9crack@2.2.6.22.2.19
MediumGHSA-cpq7-6gpm-g9rccipher-base@1.0.41.0.5
MediumGHSA-566m-qj78-rww5postcss@7.0.327.0.36
MediumGHSA-3xgq-45jj-v275cross-spawn@6.0.56.0.6
MediumGHSA-p92q-9vqr-4j8vaxios@1.3.21.16.0
MediumGHSA-qwcr-r2fm-qrc7body-parser@1.20.11.20.3
MediumGHSA-96hv-2xvq-fx4pws@7.4.67.5.11
MediumGHSA-3ppc-4f35-3m26minimatch@3.1.23.1.3
MediumGHSA-pf86-5x62-jrwfaxios@1.3.21.15.1
LowGHSA-vcc3-ghjq-m6frdecode-uri-component@0.2.20.5.0
LowGHSA-rhx6-c78j-4q9wpath-to-regexp@0.1.70.1.12
LowGHSA-7g2v-jj9q-g3rgrack@2.2.6.22.2.11
LowGHSA-v62p-rq8g-8h59pbkdf2@3.1.13.1.3
LowGHSA-62hf-57xw-28j9axios@1.3.21.15.1
LowGHSA-h7cp-r72f-jxh6pbkdf2@3.1.13.1.3
LowGHSA-9v8j-x534-2fx3ruby-saml@1.13.01.18.0
LowGHSA-vg3r-rm7w-2xghrexml@3.2.53.2.7
LowGHSA-34x7-hfp2-rc4vtar@6.1.117.5.7
LowGHSA-q8qp-cvcw-x6jjaxios@1.3.21.15.2
LowGHSA-3g43-6gmg-66jwaxios@1.3.21.15.2
LowGHSA-cxjh-pqwp-8mfpfollow-redirects@1.15.21.15.6
LowGHSA-h8w8-99g7-qmvjconcurrent-ruby@1.2.01.3.7
LowGHSA-hfxv-24rg-xrqfaxios@1.3.21.16.0
LowGHSA-2cw7-v8ff-p88roj@3.13.233.17.3
LowGHSA-475m-ph3x-64gpoj@3.13.233.17.3
LowGHSA-9cv6-qcjw-4grxoj@3.13.233.17.3
LowGHSA-m578-w5vf-rfcmoj@3.13.233.17.3
LowGHSA-vwm4-62gf-x745oj@3.13.233.17.3
LowDLA-3954-1postgresql-13@13.9-0+deb11u113.17-0+deb11u1
LowDLA-4297-1imagemagick@8:6.9.11.60+dfsg-1.3+deb11u18:6.9.11.60+dfsg-1.3+deb11u6
LowGHSA-mxw3-3hh2-x2mhrack@2.2.6.22.2.22

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.3.1latest3 years agov4.1.218693345,056

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/default-gh/mastodon.svg)](https://charts.stackradar.io/charts/default-gh/mastodon)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.