StackRadar

mastodon 0.3.1 Helm chart

default-ghVerified publisher

Scored 14 Sept 2026

A Helm chart for Kubernetes

Version 0.3.1 3 years agoapp version v4.1.2 1Artifact Hub

mastodon 0.3.1 deploys 3 container images: bitnami/minio, ghcr.io/mastodon/mastodon and bitnami/redis. Across the 1 measured, 412 findings1 critical, 8 high 4 on CISA KEV. The highest contribution is GHSA-754f-8gm6-c4r2 in ruby-saml 1.13.0, fixed in 1.18.0.

Radar Score

5,0561869334

412 findings over 1 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
bitnami/minio2023.5.4-debian-11-r0unmeasured
ghcr.io/mastodon/mastodon×10v4.1.218693345,056
bitnami/redis×27.0.11-debian-11-r0unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

412 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGHSA-2xgq-q749-89fqaws-sdk-s3@1.119.01.208.0
LowDLA-4128-1glib2.0@2.66.8-12.66.8-1+deb11u6
LowGHSA-fm7p-mprw-wjm9oj@3.13.233.17.3
LowDLA-4306-1pam@1.4.0-9+deb11u11.4.0-9+deb11u2
LowGHSA-q4qf-9j86-f5mhrack@2.2.6.22.2.23
LowGHSA-ff6c-w6qf-7xqccss_parser@1.12.01.22.0
LowDLA-4130-1shadow@1:4.8.1-11:4.8.1-1+deb11u1
LowDLA-4217-1icu@67.1-767.1-7+deb11u1
LowDLA-4073-1ffmpeg@7:4.3.5-0+deb11u17:4.3.8-0+deb11u3
LowDLA-4396-1libpng1.6@1.6.37-31.6.37-3+deb11u1
LowDLA-4491-1glib2.0@2.66.8-12.66.8-1+deb11u8
LowGHSA-46q3-7gv7-qmggnet-imap@0.3.40.5.15
LowGHSA-wv3x-4vxv-whppconcurrent-ruby@1.2.01.3.7
LowGHSA-w7fw-mjwx-w883qs@6.11.06.14.2
LowDLA-4287-1libsndfile@1.0.31-21.0.31-2+deb11u1
LowGHSA-6rw7-vpxm-498pqs@6.11.06.14.1
LowDLA-4143-1glibc@2.31-13+deb11u52.31-13+deb11u12
LowDLA-3967-1mpg123@1.26.4-11.26.4-1+deb11u1
LowDLA-4195-1krb5@1.18.3-6+deb11u31.18.3-6+deb11u7
LowDLA-4420-1postgresql-13@13.9-0+deb11u113.23-0+deb11u1
LowGHSA-4g8v-vg43-wpgfactionpack@6.1.7.26.1.7.4
LowGHSA-v422-hmwv-36x6body-parser@1.20.11.20.6
LowGHSA-9wjq-cp2p-hrgfloofah@2.19.12.25.2
LowGHSA-v6h2-p8h4-qcjwbrace-expansion@2.0.12.0.2
LowGHSA-vpfw-47h7-xj4grack@2.2.6.22.2.14
LowDLA-4424-1openjpeg2@2.4.0-32.4.0-3+deb11u2
LowGHSA-22h5-pq3x-2gf2uri@0.10.20.11.3
LowGHSA-q2ww-5357-x388rack@2.2.6.22.2.23
LowGHSA-54rr-7fvw-6x8frack@2.2.6.22.2.8.1
LowDLA-4096-1librabbitmq@0.10.0-10.10.0-1+deb11u1
LowGHSA-78xj-cgh5-2h22ip@2.0.02.0.1
LowGHSA-xj5v-6v4g-jfw6rack@2.2.6.22.2.8.1
LowGHSA-vfm5-rmrh-j26vactionpack@6.1.7.27.0.8.7
LowDLA-4225-1gdk-pixbuf@2.42.2+dfsg-1+deb11u12.42.2+dfsg-1+deb11u3
LowDLA-4435-1libsodium@1.0.18-11.0.18-1+deb11u1
LowDLA-4469-1alsa-lib@1.2.4-1.11.2.4-1.1+deb11u1
LowGHSA-xhjh-pmcv-23jwaxios@1.3.21.15.1
LowDLA-4319-1libxml2@2.9.10+dfsg-6.7+deb11u32.9.10+dfsg-6.7+deb11u9
LowDLA-4437-1gnupg2@2.2.27-2+deb11u22.2.27-2+deb11u3
LowGHSA-v55j-83pf-r9cqactionview@6.1.7.27.2.3.1
LowGHSA-c6qg-cjj8-47qprack@2.2.6.22.2.6.4
LowDLA-3954-2postgresql-13@13.9-0+deb11u113.18-0+deb11u1
LowDLA-3972-1tzdata@2021a-1+deb11u92024b-0+deb11u1
LowDLA-4016-1ucf@3.00433.0043+deb11u2
LowDLA-4085-1tzdata@2021a-1+deb11u92025a-0+deb11u1
LowDLA-4105-1tzdata@2021a-1+deb11u92025b-0+deb11u1
LowDLA-4403-1tzdata@2021a-1+deb11u92025b-0+deb11u2
LowDLA-4485-1ca-certificates@2021011920230311+deb12u1~deb11u1
LowDSA-5682-2glib2.0@2.66.8-12.66.8-1+deb11u3
LowGHSA-pxg6-pf52-xh8xcookie@0.5.00.7.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.3.1latest3 years agov4.1.218693345,056

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/default-gh/mastodon.svg)](https://charts.stackradar.io/charts/default-gh/mastodon)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.