matomo 12.0.21 Helm chart

Name: matomo Helm chart 12.0.21: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

digitalist-open-cloud-matomo

Not scored yet

A Helm chart for Matomo

Version 12.0.21app version 5.12.0 1Artifact Hub

matomo 12.0.21 deploys 3 container images: digitalist/matomo, hipages/php-fpm_exporter and digitalist/nginx. The highest contribution is ALPINE-CVE-2023-0286 in openssl 1.1.1n-r0, fixed in 1.1.1t-r0.

Radar Score

Not yet scored

The daily scoring run has not folded the 3 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
digitalist/matomo×14	5.12.0	021972	1,143
hipages/php-fpm_exporter×2	2.2.0	0411111	1,379
digitalist/nginx×2	1.31.6	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

219 distinct across the version’s images

Severity	Advisory	Package	Fixed in
High	ALPINE-CVE-2023-0286	openssl@1.1.1n-r0	1.1.1t-r0
High	ALPINE-CVE-2023-2650	openssl@1.1.1n-r0	1.1.1u-r0
High	ALPINE-CVE-2022-37434	zlib@1.2.12-r0	1.2.12-r2
High	ALPINE-CVE-2018-18312	perl@5.42.2-r0	5.26.3-r0
High	ALPINE-CVE-2018-18311	perl@5.42.2-r0	5.26.3-r0
High	ALPINE-CVE-2022-4450	openssl@1.1.1n-r0	1.1.1t-r0
Medium	GO-2024-2687	stdlib@go1.17.10	1.21.9
Medium	ALPINE-CVE-2022-4304	openssl@1.1.1n-r0	1.1.1t-r0
Medium	ALPINE-CVE-2023-0215	openssl@1.1.1n-r0	1.1.1t-r0
Medium	ALPINE-CVE-2023-0464	openssl@1.1.1n-r0	1.1.1t-r2
Medium	ALPINE-CVE-2026-19931	curl@8.21.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2023-3446	openssl@1.1.1n-r0	1.1.1u-r2
Medium	ALPINE-CVE-2026-63073	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2022-2097	openssl@1.1.1n-r0	1.1.1q-r0
Medium	ALPINE-CVE-2026-18924	curl@8.21.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2023-5678	openssl@1.1.1n-r0	1.1.1w-r1
Medium	GHSA-69ch-w2m2-3vjp	golang.org/x/text@v0.3.7	0.3.8
Medium	ALPINE-CVE-2026-18798	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-63076	openssl@3.5.7-r0	3.5.8-r0
Medium	GHSA-8r3f-844c-mc37	google.golang.org/protobuf@v1.28.0	1.33.0
Medium	ALPINE-CVE-2026-14457	openssl@3.5.7-r0	3.5.8-r0
Medium	GHSA-4f99-4q7p-p3gh	github.com/sirupsen/logrus@v1.8.1	1.8.3
Medium	ALPINE-CVE-2026-66046	expat@2.8.2-r0	2.8.4-r0
Medium	ALPINE-CVE-2026-53790	rsync@3.4.3-r1	3.5.0-r0
Medium	ALPINE-CVE-2026-80231	curl@8.21.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-70461	rsync@3.4.3-r1	3.5.0-r0
Medium	ALPINE-CVE-2026-80229	curl@8.21.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-53791	rsync@3.4.3-r1	3.5.0-r0
Medium	ALPINE-CVE-2026-70464	rsync@3.4.3-r1	3.5.0-r0
Medium	ALPINE-CVE-2026-9669	python3@3.14.5-r0	3.14.7-r0
Medium	ALPINE-CVE-2026-70455	rsync@3.4.3-r1	3.5.0-r0
Medium	GO-2022-1144	stdlib@go1.17.10	1.18.9
Medium	ALPINE-CVE-2026-11940	python3@3.14.5-r0	3.14.7-r0
Medium	ALPINE-CVE-2026-70460	rsync@3.4.3-r1	3.5.0-r0
Medium	ALPINE-CVE-2026-70452	rsync@3.4.3-r1	3.5.0-r0
Medium	ALPINE-CVE-2026-70453	rsync@3.4.3-r1	3.5.0-r0
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-82209	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-53793	rsync@3.4.3-r1	3.5.0-r0
Low	GO-2023-1571	stdlib@go1.17.10	1.19.6
Low	ALPINE-CVE-2026-80255	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-63072	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-7210	python3@3.14.5-r0	3.14.7-r0
Low	ALPINE-CVE-2026-70456	rsync@3.4.3-r1	3.5.0-r0
Low	ALPINE-CVE-2026-70458	rsync@3.4.3-r1	3.5.0-r0
Low	ALPINE-CVE-2026-15308	python3@3.14.5-r0	3.14.7-r0
Low	ALPINE-CVE-2026-13608	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-11972	python3@3.14.5-r0	3.14.7-r0
Low	GO-2023-2102	stdlib@go1.17.10	1.20.10
Low	ALPINE-CVE-2026-80230	curl@8.21.0-r0	8.22.0-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
12.0.21latest	—	5.12.0	—	—
12.0.20	—	5.12.0	11546184	3,540

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/digitalist-open-cloud-matomo/matomo.svg)](https://charts.stackradar.io/charts/digitalist-open-cloud-matomo/matomo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.