StackRadar

mastodon 0.3.1 Helm chart

default-ghVerified publisher

Scored 14 Sept 2026

A Helm chart for Kubernetes

Version 0.3.1 3 years agoapp version v4.1.2 1Artifact Hub

mastodon 0.3.1 deploys 3 container images: bitnami/minio, ghcr.io/mastodon/mastodon and bitnami/redis. Across the 1 measured, 412 findings1 critical, 8 high 4 on CISA KEV. The highest contribution is GHSA-754f-8gm6-c4r2 in ruby-saml 1.13.0, fixed in 1.18.0.

Radar Score

5,0561869334

412 findings over 1 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
bitnami/minio2023.5.4-debian-11-r0unmeasured
ghcr.io/mastodon/mastodon×10v4.1.218693345,056
bitnami/redis×27.0.11-debian-11-r0unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

412 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGHSA-vmf3-w455-68vhtar@6.1.117.5.16
LowDLA-4315-1tiff@4.2.0-1+deb11u44.2.0-1+deb11u7
LowDLA-4259-1systemd@247.3-7+deb11u1247.3-7+deb11u7
LowGHSA-mvxr-6m87-mv2qmail@2.8.0.12.9.1
LowGHSA-5c9x-8gcm-mpgxaxios@1.3.21.15.1
LowGHSA-89vf-4333-qx8vactivesupport@6.1.7.27.2.3.1
LowGHSA-vf2m-468p-8v99axios@1.3.21.15.1
LowDSA-5682-1glib2.0@2.66.8-12.66.8-1+deb11u2
LowDLA-4339-1imagemagick@8:6.9.11.60+dfsg-1.3+deb11u18:6.9.11.60+dfsg-1.3+deb11u7
LowGHSA-mhwm-jh88-3gjfcgi@0.2.20.3.5.1
LowDLA-4273-1postgresql-13@13.9-0+deb11u113.22-0+deb11u1
LowGHSA-qx2v-qp2m-jg93postcss@7.0.328.5.10
LowDLA-4159-1postgresql-13@13.9-0+deb11u113.21-0+deb11u1
LowDLA-3875-1gnutls28@3.7.1-5+deb11u23.7.1-5+deb11u6
LowGHSA-cr5q-6q9f-rq6qactivesupport@6.1.7.26.1.7.5
LowDLA-4039-1ffmpeg@7:4.3.5-0+deb11u17:4.3.8-0+deb11u2
LowGHSA-v2fc-qm4h-8hqvnokogiri@1.14.11.19.3
LowGHSA-f7q4-pwc6-w24pelliptic@6.5.46.5.7
LowGHSA-445q-vr5w-6q77axios@1.3.21.15.1
LowDSA-5489-1file@1:5.39-31:5.39-3+deb11u1
LowDLA-4133-1wget@1.21-1+deb11u11.21-1+deb11u2
LowDLA-4497-1imagemagick@8:6.9.11.60+dfsg-1.3+deb11u18:6.9.11.60+dfsg-1.3+deb11u10
LowGHSA-qv7j-4883-hwh7rack@2.2.6.22.2.23
LowDLA-4492-1gnutls28@3.7.1-5+deb11u23.7.1-5+deb11u9
LowGHSA-5p4m-2wfm-xmqjjs-yaml@3.14.13.15.1
LowDLA-4201-1libvpx@1.9.0-11.9.0-1+deb11u4
LowGHSA-57hq-95w6-v4fcdevise@4.8.15.0.3
LowDSA-5517-1libx11@2:1.7.2-12:1.7.2-1+deb11u2
LowDLA-4429-1imagemagick@8:6.9.11.60+dfsg-1.3+deb11u18:6.9.11.60+dfsg-1.3+deb11u8
LowDLA-4146-1libxml2@2.9.10+dfsg-6.7+deb11u32.9.10+dfsg-6.7+deb11u7
LowGHSA-ghr5-ch3p-vcr6ejs@3.1.83.1.10
LowDLA-4176-1openssl@1.1.1n-0+deb11u41.1.1w-0+deb11u3
LowGHSA-4mjr-xmp4-gh2gqs@6.11.06.16.0
LowGHSA-c8v6-786g-vjx6json-jwt@1.15.31.15.3.1
LowDLA-4448-1imagemagick@8:6.9.11.60+dfsg-1.3+deb11u18:6.9.11.60+dfsg-1.3+deb11u9
LowDLA-4489-1libvpx@1.9.0-11.9.0-1+deb11u5
LowDLA-3930-1libsepol@3.1-13.1-1+deb11u1
LowGHSA-vgpv-f759-9wx3rack@2.2.6.22.2.23
LowGHSA-48c2-rrv3-qjmpyaml@1.10.21.10.3
LowGHSA-wx95-c6cv-8532nokogiri@1.14.11.19.1
LowDLA-4440-1ffmpeg@7:4.3.5-0+deb11u17:4.3.9-0+deb11u2
LowGHSA-xx6v-rp6x-q39caxios@1.3.21.15.1
LowGHSA-7mqq-6cf9-v2qprack@2.2.6.22.2.23
LowDLA-4181-1glibc@2.31-13+deb11u52.31-13+deb11u13
LowDLA-4139-1imagemagick@8:6.9.11.60+dfsg-1.3+deb11u18:6.9.11.60+dfsg-1.3+deb11u5
LowGHSA-whrj-4476-wvmprack@2.2.6.22.2.22
LowGHSA-898c-q2cr-xwhgaxios@1.3.21.16.0
LowDLA-4241-1ffmpeg@7:4.3.5-0+deb11u17:4.3.9-0+deb11u1
LowDLA-4065-1krb5@1.18.3-6+deb11u31.18.3-6+deb11u6
LowGHSA-848j-6mx2-7j84elliptic@6.5.4no fix listed

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.3.1latest3 years agov4.1.218693345,056

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/default-gh/mastodon.svg)](https://charts.stackradar.io/charts/default-gh/mastodon)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.