matomo Helm chart

Name: matomo Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

digitalist-open-cloud-matomo

Scored 14 Sept 2026

A Helm chart for Matomo

Latest 12.0.20app version 5.12.0 1Artifact Hub

matomo 12.0.20 deploys 3 container images: digitalist/matomo, hipages/php-fpm_exporter and digitalist/nginx. Across them, 246 findings — 1 critical, 15 high — 1 on CISA KEV. The highest contribution is ALPINE-CVE-2023-4863 in libwebp 1.2.2-r0, fixed in 1.2.2-r2.

Radar Score

3,53911546184

246 findings over 3 of 3 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
digitalist/matomo×14	5.12.0	021972	1,142
hipages/php-fpm_exporter×2	2.2.0	0411111	1,379
digitalist/nginx×2	1.21.6	19161	1,018

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

235 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	ALPINE-CVE-2023-4863KEV	libwebp@1.2.2-r0	1.2.2-r2
High	ALPINE-CVE-2022-0778	openssl@1.1.1l-r8	1.1.1n-r0
High	ALPINE-CVE-2022-0778	libretls@3.3.4-r2	3.3.4-r3
High	ALPINE-CVE-2023-0286	openssl@1.1.1n-r0	1.1.1t-r0
High	ALPINE-CVE-2018-25032	zlib@1.2.11-r3	1.2.12-r0
High	ALPINE-CVE-2023-2650	openssl@1.1.1n-r0	1.1.1u-r0
High	ALPINE-CVE-2022-37434	zlib@1.2.12-r0	1.2.12-r2
High	ALPINE-CVE-2021-30560	libxslt@1.1.34-r1	1.1.35-r0
High	ALPINE-CVE-2018-18312	perl@5.42.2-r0	5.26.3-r0
High	ALPINE-CVE-2018-18311	perl@5.42.2-r0	5.26.3-r0
High	ALPINE-CVE-2022-40303	libxml2@2.9.12-r2	2.9.14-r2
High	ALPINE-CVE-2022-4450	openssl@1.1.1n-r0	1.1.1t-r0
Medium	GO-2024-2687	stdlib@go1.17.10	1.21.9
Medium	ALPINE-CVE-2022-1271	xz@5.2.5-r0	5.2.5-r1
Medium	ALPINE-CVE-2022-4304	openssl@1.1.1n-r0	1.1.1t-r0
Medium	ALPINE-CVE-2022-40304	libxml2@2.9.12-r2	2.9.14-r2
Medium	ALPINE-CVE-2022-27404	freetype@2.11.0-r0	2.11.1-r1
Medium	ALPINE-CVE-2022-23308	libxml2@2.9.12-r2	2.9.13-r0
Medium	ALPINE-CVE-2022-28391	busybox@1.34.1-r3	1.34.1-r5
Medium	ALPINE-CVE-2023-0215	openssl@1.1.1n-r0	1.1.1t-r0
Medium	ALPINE-CVE-2023-0464	openssl@1.1.1n-r0	1.1.1t-r2
Medium	ALPINE-CVE-2022-27406	freetype@2.11.0-r0	2.11.1-r2
Medium	ALPINE-CVE-2022-27405	freetype@2.11.0-r0	2.11.1-r2
Medium	ALPINE-CVE-2022-2309	libxml2@2.9.12-r2	2.9.14-r1
Medium	ALPINE-CVE-2026-19931	curl@8.21.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2022-29824	libxml2@2.9.12-r2	2.9.14-r0
Medium	ALPINE-CVE-2023-3446	openssl@1.1.1n-r0	1.1.1u-r2
Medium	ALPINE-CVE-2026-63073	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2022-2097	openssl@1.1.1n-r0	1.1.1q-r0
Medium	ALPINE-CVE-2026-18924	curl@8.21.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2023-5678	openssl@1.1.1n-r0	1.1.1w-r1
Medium	GHSA-69ch-w2m2-3vjp	golang.org/x/text@v0.3.7	0.3.8
Medium	ALPINE-CVE-2026-18798	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-63076	openssl@3.5.7-r0	3.5.8-r0
Medium	GHSA-8r3f-844c-mc37	google.golang.org/protobuf@v1.28.0	1.33.0
Medium	ALPINE-CVE-2026-14457	openssl@3.5.7-r0	3.5.8-r0
Medium	GHSA-4f99-4q7p-p3gh	github.com/sirupsen/logrus@v1.8.1	1.8.3
Medium	ALPINE-CVE-2023-1999	libwebp@1.2.2-r0	1.2.2-r1
Medium	ALPINE-CVE-2026-53790	rsync@3.4.3-r1	3.5.0-r0
Medium	ALPINE-CVE-2026-80231	curl@8.21.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-70461	rsync@3.4.3-r1	3.5.0-r0
Medium	ALPINE-CVE-2026-66046	expat@2.8.2-r0	2.8.4-r0
Medium	ALPINE-CVE-2026-80229	curl@8.21.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-53791	rsync@3.4.3-r1	3.5.0-r0
Medium	ALPINE-CVE-2026-70464	rsync@3.4.3-r1	3.5.0-r0
Medium	ALPINE-CVE-2026-9669	python3@3.14.5-r0	3.14.7-r0
Medium	ALPINE-CVE-2026-70455	rsync@3.4.3-r1	3.5.0-r0
Medium	GO-2022-1144	stdlib@go1.17.10	1.18.9
Medium	ALPINE-CVE-2026-11940	python3@3.14.5-r0	3.14.7-r0
Medium	ALPINE-CVE-2026-70460	rsync@3.4.3-r1	3.5.0-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
12.0.20latest	—	5.12.0	11546184	3,539

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/digitalist-open-cloud-matomo/matomo.svg)](https://charts.stackradar.io/charts/digitalist-open-cloud-matomo/matomo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.