StackRadar

matomo 12.0.26 Helm chart

digitalist-open-cloud-matomo

Not scored yet

A Helm chart for Matomo

Version 12.0.26app version 5.12.0 1Artifact Hub

matomo 12.0.26 deploys 3 container images: digitalist/matomo, hipages/php-fpm_exporter and digitalist/nginx. The highest contribution is GO-2024-2687 in stdlib go1.17.10, fixed in 1.21.9.

Radar Score

Not yet scored

The daily scoring run has not folded the 3 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
digitalist/matomo×145.12.002191011,443
hipages/php-fpm_exporter×22.2.01454822,279
digitalist/nginx×21.31.6-5—not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

263 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumGO-2023-1569stdlib@go1.17.101.19.6
MediumGO-2026-6612stdlib@go1.17.101.26.9
MediumALPINE-CVE-2026-53790rsync@3.4.3-r13.5.0-r0
MediumALPINE-CVE-2026-66046expat@2.8.2-r02.8.4-r0
MediumGO-2024-3106stdlib@go1.17.101.22.7
MediumGO-2023-1570stdlib@go1.17.101.19.6
MediumGO-2026-6604stdlib@go1.17.101.26.9
MediumGO-2024-2609stdlib@go1.17.101.21.8
MediumGO-2024-3107stdlib@go1.17.101.22.7
MediumALPINE-CVE-2026-18924curl@8.21.0-r08.22.0-r0
MediumALPINE-CVE-2026-14457openssl@3.5.7-r03.5.8-r0
MediumGHSA-4f99-4q7p-p3ghgithub.com/sirupsen/logrus@v1.8.11.8.3
MediumGO-2023-1751stdlib@go1.17.101.19.9
MediumGO-2023-1753stdlib@go1.17.101.19.9
MediumGO-2023-1878stdlib@go1.17.101.19.11
MediumGO-2022-0525stdlib@go1.17.101.17.12
MediumALPINE-CVE-2026-11972python3@3.14.5-r03.14.7-r0
MediumGO-2022-0520stdlib@go1.17.101.17.12
MediumALPINE-CVE-2026-70461rsync@3.4.3-r13.5.0-r0
MediumALPINE-CVE-2026-63072openssl@3.5.7-r03.5.8-r0
MediumALPINE-CVE-2026-80231curl@8.21.0-r08.22.0-r0
MediumALPINE-CVE-2026-53791rsync@3.4.3-r13.5.0-r0
MediumALPINE-CVE-2026-70464rsync@3.4.3-r13.5.0-r0
MediumALPINE-CVE-2026-70455rsync@3.4.3-r13.5.0-r0
MediumALPINE-CVE-2026-11940python3@3.14.5-r03.14.7-r0
MediumGO-2026-4601stdlib@go1.17.101.25.8
MediumALPINE-CVE-2026-70460rsync@3.4.3-r13.5.0-r0
MediumALPINE-CVE-2026-70452rsync@3.4.3-r13.5.0-r0
MediumALPINE-CVE-2026-70453rsync@3.4.3-r13.5.0-r0
MediumGO-2026-4981stdlib@go1.17.101.25.10
LowGO-2026-4977stdlib@go1.17.101.25.10
LowALPINE-CVE-2026-19445python3@3.14.5-r03.14.8-r0
LowGO-2026-4986stdlib@go1.17.101.25.10
LowGO-2026-4918stdlib@go1.17.101.25.10
LowALPINE-CVE-2026-63075openssl@3.5.7-r03.5.8-r0
LowALPINE-CVE-2026-13221perl@5.42.2-r05.42.2-r1
LowGO-2024-2599stdlib@go1.17.101.21.8
LowALPINE-CVE-2026-77214expat@2.8.2-r02.9.0-r0
LowALPINE-CVE-2026-14456openssl@3.5.7-r03.5.8-r0
LowGO-2022-0532stdlib@go1.17.101.17.11
LowALPINE-CVE-2026-53793rsync@3.4.3-r13.5.0-r0
LowALPINE-CVE-2026-7210python3@3.14.5-r03.14.7-r0
LowGO-2025-4009stdlib@go1.17.101.24.8
LowGO-2025-4006stdlib@go1.17.101.24.8
LowALPINE-CVE-2026-70456rsync@3.4.3-r13.5.0-r0
LowALPINE-CVE-2026-70458rsync@3.4.3-r13.5.0-r0
LowALPINE-CVE-2026-15308python3@3.14.5-r03.14.7-r0
LowALPINE-CVE-2026-93990expat@2.8.2-r02.8.5-r0
LowALPINE-CVE-2023-0465openssl@1.1.1n-r01.1.1t-r2
LowALPINE-CVE-2026-54874openssl@3.5.7-r03.5.8-r0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
12.0.26latest—5.12.0——
12.0.21—5.12.016731893,755
12.0.20—5.12.0215891844,740

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/digitalist-open-cloud-matomo/matomo.svg)](https://charts.stackradar.io/charts/digitalist-open-cloud-matomo/matomo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 22 Oct 2026 · scanned 21 Oct 2026 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.