matomo 12.0.21 Helm chart

Name: matomo Helm chart 12.0.21: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

digitalist-open-cloud-matomo

Scored 21 Oct 2026

A Helm chart for Matomo

Version 12.0.21app version 5.12.0 1Artifact Hub

matomo 12.0.21 deploys 3 container images: digitalist/matomo, hipages/php-fpm_exporter and digitalist/nginx. Across them, 269 findings — 1 critical, 6 high. The highest contribution is GO-2024-2687 in stdlib go1.17.10, fixed in 1.21.9.

Radar Score

3,7551673189

269 findings over 3 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
digitalist/matomo×14	5.12.0	0219101	1,443
hipages/php-fpm_exporter×2	2.2.0	145482	2,279
digitalist/nginx×2	1.31.6	0006	33

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

189 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-4340	stdlib@go1.17.10	1.24.12
Low	CGA-fv7m-5pp8-x296	glibc-2.44@2.44-r6	2.44-r8
Low	GHSA-34xg-wgjx-8xph	guzzlehttp/psr7@2.7.0	2.10.2
Low	ALPINE-CVE-2026-60747	mariadb@11.8.8-r0	11.8.9-r0
Low	GHSA-hq7v-mx3g-29hw	guzzlehttp/psr7@2.7.0	2.10.2
Low	GO-2026-6599	stdlib@go1.17.10	1.26.9
Low	GO-2026-6600	stdlib@go1.17.10	1.26.9
Low	ALPINE-CVE-2026-53799	rsync@3.4.3-r1	3.5.0-r0
Low	GHSA-m557-wrgg-6rp4	phpseclib/phpseclib@3.0.36	3.0.54
Low	GHSA-cwxw-98qj-8qjx	guzzlehttp/guzzle@7.10.0	7.12.1
Low	GHSA-2x45-7fc3-mxwq	firebase/php-jwt@v6.10.1	7.0.0
Low	ALPINE-CVE-2026-47023	mariadb@11.8.8-r0	11.8.9-r0
Low	GO-2025-3503	stdlib@go1.17.10	1.23.7
Low	GO-2022-0531	stdlib@go1.17.10	1.17.11
Low	GHSA-wpwq-4j6v-78m3	guzzlehttp/guzzle@7.10.0	7.12.1
Low	GO-2026-4869	stdlib@go1.17.10	1.25.9
Low	ALPINE-CVE-2026-60184	mariadb@11.8.8-r0	11.8.9-r0
Low	ALPINE-CVE-2026-53797	rsync@3.4.3-r1	3.5.0-r0
Low	ALPINE-CVE-2026-53800	rsync@3.4.3-r1	3.5.0-r0
Low	ALPINE-CVE-2026-53796	rsync@3.4.3-r1	3.5.0-r0
Low	GHSA-vm85-hxw5-5432	guzzlehttp/psr7@2.11.0	2.12.1
Low	CGA-5mg5-hvq2-8763	glibc-2.44@2.44-r6	2.44-r8
Low	GHSA-c2w2-prh8-qm98	guzzlehttp/psr7@2.11.0	2.12.3
Low	ALPINE-CVE-2026-0864	python3@3.14.5-r0	3.14.7-r0
Low	GHSA-r854-jrxh-36qx	phpseclib/phpseclib@3.0.36	3.0.51
Low	GO-2025-3447	stdlib@go1.17.10	1.22.12
Low	CGA-3g3j-42jj-77j3	glibc-2.44@2.44-r6	2.44-r8
Low	GHSA-g446-98w2-8p5w	guzzlehttp/guzzle@7.10.0	7.12.3
Low	CGA-4gmv-8mr7-5pxx	glibc-2.44@2.44-r6	no fix listed
Low	GO-2026-4403	stdlib@go1.17.10	1.23.9
Low	CGA-32jh-59ph-xj58	ca-certificates@20260909-r0	20260909-r3
Low	GO-2026-6809	stdlib@go1.17.10	1.26.10
Low	CGA-53q8-cxrp-gx53	glibc-2.44@2.44-r6	2.44-r8
Low	GO-2026-5024	golang.org/x/sys@v0.0.0-20220412211240-33da011f77ad	0.44.0
Low	ALPINE-CVE-2026-89162	pcre2@10.47-r1	10.48-r0
Low	ALPINE-CVE-2026-61081	mariadb@11.8.8-r0	11.8.9-r0
Low	ALPINE-CVE-2026-15310	python3@3.14.5-r0	3.14.8-r0
Low	ALPINE-CVE-2026-6879	python3@3.14.5-r0	3.14.7-r0
Low	GO-2026-4602	stdlib@go1.17.10	1.25.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
12.0.26latest	—	5.12.0	—	—
12.0.21	—	5.12.0	1673189	3,755
12.0.20	—	5.12.0	21589184	4,740

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/digitalist-open-cloud-matomo/matomo.svg)](https://charts.stackradar.io/charts/digitalist-open-cloud-matomo/matomo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.