StackRadar

mastodon Helm chart

default-ghVerified publisher

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 0.3.1 3 years agoapp version v4.1.2 1Artifact Hub

mastodon 0.3.1 deploys 3 container images: bitnami/minio, ghcr.io/mastodon/mastodon and bitnami/redis. Across the 1 measured, 412 findings1 critical, 8 high 4 on CISA KEV. The highest contribution is GHSA-754f-8gm6-c4r2 in ruby-saml 1.13.0, fixed in 1.18.0.

Radar Score

5,0561869334

412 findings over 1 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
bitnami/minio2023.5.4-debian-11-r0unmeasured
ghcr.io/mastodon/mastodon×10v4.1.218693345,056
bitnami/redis×27.0.11-debian-11-r0unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

334 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGHSA-54rr-7fvw-6x8frack@2.2.6.22.2.8.1
LowDLA-4096-1librabbitmq@0.10.0-10.10.0-1+deb11u1
LowGHSA-78xj-cgh5-2h22ip@2.0.02.0.1
LowGHSA-xj5v-6v4g-jfw6rack@2.2.6.22.2.8.1
LowGHSA-vfm5-rmrh-j26vactionpack@6.1.7.27.0.8.7
LowDLA-4225-1gdk-pixbuf@2.42.2+dfsg-1+deb11u12.42.2+dfsg-1+deb11u3
LowDLA-4435-1libsodium@1.0.18-11.0.18-1+deb11u1
LowDLA-4469-1alsa-lib@1.2.4-1.11.2.4-1.1+deb11u1
LowGHSA-xhjh-pmcv-23jwaxios@1.3.21.15.1
LowDLA-4319-1libxml2@2.9.10+dfsg-6.7+deb11u32.9.10+dfsg-6.7+deb11u9
LowDLA-4437-1gnupg2@2.2.27-2+deb11u22.2.27-2+deb11u3
LowGHSA-v55j-83pf-r9cqactionview@6.1.7.27.2.3.1
LowGHSA-c6qg-cjj8-47qprack@2.2.6.22.2.6.4
LowDLA-3954-2postgresql-13@13.9-0+deb11u113.18-0+deb11u1
LowDLA-3972-1tzdata@2021a-1+deb11u92024b-0+deb11u1
LowDLA-4016-1ucf@3.00433.0043+deb11u2
LowDLA-4085-1tzdata@2021a-1+deb11u92025a-0+deb11u1
LowDLA-4105-1tzdata@2021a-1+deb11u92025b-0+deb11u1
LowDLA-4403-1tzdata@2021a-1+deb11u92025b-0+deb11u2
LowDLA-4485-1ca-certificates@2021011920230311+deb12u1~deb11u1
LowDSA-5682-2glib2.0@2.66.8-12.66.8-1+deb11u3
LowGHSA-pxg6-pf52-xh8xcookie@0.5.00.7.0
LowGHSA-q2mw-fvj9-vvcwnet-imap@0.3.40.4.24
LowGHSA-4gmj-3p3h-gm8hes5-ext@0.10.530.10.63
LowGHSA-4x5r-pxfx-6jf8@babel/core@7.20.127.29.6
LowGHSA-vpq2-c234-7xj6@tootallnate/once@2.0.02.0.1
LowGHSA-8678-w3jw-xfc2nokogiri@1.14.11.19.4
LowGHSA-vvfq-8hwr-qm4mnokogiri@1.14.11.18.3
LowGHSA-6wx8-w4f5-wwcrconcurrent-ruby@1.2.01.3.7
LowGHSA-c4fp-cxrr-mj66net-imap@0.3.40.5.15
LowGHSA-4mrv-5p47-p938msgpack@1.6.01.8.2
LowGHSA-5w6v-399v-w3ccnokogiri@1.14.11.18.8
LowGHSA-wfpw-mmfh-qq69nokogiri@1.14.11.19.4
LowGHSA-r95h-9x8f-r3f7nokogiri@1.14.11.16.5

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.3.1latest3 years agov4.1.218693345,056

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/default-gh/mastodon.svg)](https://charts.stackradar.io/charts/default-gh/mastodon)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.