matomo 12.0.21 Helm chart

Name: matomo Helm chart 12.0.21: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

digitalist-open-cloud-matomo

Scored 21 Oct 2026

A Helm chart for Matomo

Version 12.0.21app version 5.12.0 1Artifact Hub

matomo 12.0.21 deploys 3 container images: digitalist/matomo, hipages/php-fpm_exporter and digitalist/nginx. Across them, 269 findings — 1 critical, 6 high. The highest contribution is GO-2024-2687 in stdlib go1.17.10, fixed in 1.21.9.

Radar Score

3,7551673189

269 findings over 3 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
digitalist/matomo×14	5.12.0	0219101	1,443
hipages/php-fpm_exporter×2	2.2.0	145482	2,279
digitalist/nginx×2	1.31.6	0006	33

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

189 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-4977	stdlib@go1.17.10	1.25.10
Low	ALPINE-CVE-2026-19445	python3@3.14.5-r0	3.14.8-r0
Low	GO-2026-4986	stdlib@go1.17.10	1.25.10
Low	GO-2026-4918	stdlib@go1.17.10	1.25.10
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-13221	perl@5.42.2-r0	5.42.2-r1
Low	GO-2024-2599	stdlib@go1.17.10	1.21.8
Low	ALPINE-CVE-2026-77214	expat@2.8.2-r0	2.9.0-r0
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r0	3.5.8-r0
Low	GO-2022-0532	stdlib@go1.17.10	1.17.11
Low	ALPINE-CVE-2026-53793	rsync@3.4.3-r1	3.5.0-r0
Low	ALPINE-CVE-2026-7210	python3@3.14.5-r0	3.14.7-r0
Low	GO-2025-4009	stdlib@go1.17.10	1.24.8
Low	GO-2025-4006	stdlib@go1.17.10	1.24.8
Low	ALPINE-CVE-2026-70456	rsync@3.4.3-r1	3.5.0-r0
Low	ALPINE-CVE-2026-70458	rsync@3.4.3-r1	3.5.0-r0
Low	ALPINE-CVE-2026-15308	python3@3.14.5-r0	3.14.7-r0
Low	ALPINE-CVE-2026-93990	expat@2.8.2-r0	2.8.5-r0
Low	ALPINE-CVE-2023-0465	openssl@1.1.1n-r0	1.1.1t-r2
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Low	GO-2026-4870	stdlib@go1.17.10	1.25.9
Low	GO-2026-4971	stdlib@go1.17.10	1.25.10
Low	GO-2026-4947	stdlib@go1.17.10	1.25.9
Low	ALPINE-CVE-2026-7774	python3@3.14.5-r0	3.14.7-r0
Low	GO-2026-5037	stdlib@go1.17.10	1.25.11
Low	GO-2026-6603	stdlib@go1.17.10	1.26.9
Low	GHSA-94g3-g5v7-q4jg	phpseclib/phpseclib@3.0.36	3.0.50
Low	GO-2026-5972	stdlib@go1.17.10	1.25.13
Low	GO-2026-6088	stdlib@go1.17.10	1.25.13
Low	GO-2026-6089	stdlib@go1.17.10	1.25.13
Low	GO-2026-6090	stdlib@go1.17.10	1.25.13
Low	GO-2026-6611	stdlib@go1.17.10	1.26.9
Low	GO-2023-1987	stdlib@go1.17.10	1.19.12
Low	ALPINE-CVE-2026-53783	rsync@3.4.3-r1	3.5.0-r0
Low	ALPINE-CVE-2026-80229	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-70459	rsync@3.4.3-r1	3.5.0-r0
Low	GO-2026-5038	stdlib@go1.17.10	1.25.11
Low	ALPINE-CVE-2026-9669	python3@3.14.5-r0	3.14.7-r0
Low	ALPINE-CVE-2026-76641	expat@2.8.2-r0	2.8.4-r0
Low	GO-2026-6218	stdlib@go1.17.10	1.25.13
Low	ALPINE-CVE-2026-70463	rsync@3.4.3-r1	3.5.0-r0
Low	GO-2024-2610	stdlib@go1.17.10	1.21.8
Low	ALPINE-CVE-2026-86145	pcre2@10.47-r1	10.48-r0
Low	GO-2022-1095	stdlib@go1.17.10	1.18.8
Low	GO-2023-2041	stdlib@go1.17.10	1.20.8
Low	GO-2025-3751	stdlib@go1.17.10	1.23.10
Low	ALPINE-CVE-2026-70457	rsync@3.4.3-r1	3.5.0-r0
Low	GO-2023-2043	stdlib@go1.17.10	1.20.8
Low	GO-2026-4342	stdlib@go1.17.10	1.24.12
Low	ALPINE-CVE-2026-82209	curl@8.21.0-r0	8.22.0-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
12.0.26latest	—	5.12.0	—	—
12.0.21	—	5.12.0	1673189	3,755
12.0.20	—	5.12.0	21589184	4,740

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/digitalist-open-cloud-matomo/matomo.svg)](https://charts.stackradar.io/charts/digitalist-open-cloud-matomo/matomo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.