matomo Helm chart

Name: matomo Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

digitalist-open-cloud-matomo

Scored 14 Sept 2026

A Helm chart for Matomo

Latest 12.0.20app version 5.12.0 1Artifact Hub

matomo 12.0.20 deploys 3 container images: digitalist/matomo, hipages/php-fpm_exporter and digitalist/nginx. Across them, 246 findings — 1 critical, 15 high — 1 on CISA KEV. The highest contribution is ALPINE-CVE-2023-4863 in libwebp 1.2.2-r0, fixed in 1.2.2-r2.

Radar Score

3,53911546184

246 findings over 3 of 3 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
digitalist/matomo×14	5.12.0	021972	1,142
hipages/php-fpm_exporter×2	2.2.0	0411111	1,379
digitalist/nginx×2	1.21.6	19161	1,018

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

183 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-82209	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-53793	rsync@3.4.3-r1	3.5.0-r0
Low	GO-2023-1571	stdlib@go1.17.10	1.19.6
Low	ALPINE-CVE-2026-80255	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-7210	python3@3.14.5-r0	3.14.7-r0
Low	ALPINE-CVE-2026-70456	rsync@3.4.3-r1	3.5.0-r0
Low	ALPINE-CVE-2026-70458	rsync@3.4.3-r1	3.5.0-r0
Low	ALPINE-CVE-2026-15308	python3@3.14.5-r0	3.14.7-r0
Low	ALPINE-CVE-2026-13608	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-63072	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-11972	python3@3.14.5-r0	3.14.7-r0
Low	GO-2023-2102	stdlib@go1.17.10	1.20.10
Low	ALPINE-CVE-2026-80230	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-53783	rsync@3.4.3-r1	3.5.0-r0
Low	ALPINE-CVE-2023-0465	openssl@1.1.1n-r0	1.1.1t-r2
Low	ALPINE-CVE-2026-76641	expat@2.8.2-r0	2.8.4-r0
Low	ALPINE-CVE-2026-70463	rsync@3.4.3-r1	3.5.0-r0
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Low	GO-2022-0969	stdlib@go1.17.10	1.18.6
Low	ALPINE-CVE-2026-70457	rsync@3.4.3-r1	3.5.0-r0
Low	GHSA-94g3-g5v7-q4jg	phpseclib/phpseclib@3.0.36	3.0.50
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-7774	python3@3.14.5-r0	3.14.7-r0
Low	ALPINE-CVE-2026-53789	rsync@3.4.3-r1	3.5.0-r0
Low	ALPINE-CVE-2026-82208	curl@8.21.0-r0	8.22.0-r0
Low	GO-2023-2185	stdlib@go1.17.10	1.20.11
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0
Low	GO-2022-0537	stdlib@go1.17.10	1.17.13
Low	ALPINE-CVE-2026-53801	rsync@3.4.3-r1	3.5.0-r0
Low	ALPINE-CVE-2026-53795	rsync@3.4.3-r1	3.5.0-r0
Low	GO-2023-1703	stdlib@go1.17.10	1.19.8
Low	GO-2022-0521	stdlib@go1.17.10	1.17.12
Low	GHSA-38cx-cq6f-5755	symfony/http-foundation@v6.4.34	6.4.41
Low	ALPINE-CVE-2026-53784	rsync@3.4.3-r1	3.5.0-r0
Low	ALPINE-CVE-2026-53802	rsync@3.4.3-r1	3.5.0-r0
Low	ALPINE-CVE-2026-70459	rsync@3.4.3-r1	3.5.0-r0
Low	ALPINE-CVE-2026-53803	rsync@3.4.3-r1	3.5.0-r0
Low	GO-2022-0477	stdlib@go1.17.10	1.17.11
Low	GO-2026-4341	stdlib@go1.17.10	1.24.12
Low	GO-2022-0533	stdlib@go1.17.10	1.17.11
Low	GHSA-p2gh-cfq4-4wjc	google/protobuf@v4.33.5	4.33.6
Low	GO-2022-0523	stdlib@go1.17.10	1.17.12
Low	GO-2024-2887	stdlib@go1.17.10	1.21.11
Low	GO-2022-0522	stdlib@go1.17.10	1.17.12
Low	GO-2022-0527	stdlib@go1.17.10	1.17.12
Low	GO-2022-0524	stdlib@go1.17.10	1.17.12
Low	ALPINE-CVE-2026-53794	rsync@3.4.3-r1	3.5.0-r0
Low	ALPINE-CVE-2026-3276	python3@3.14.5-r0	3.14.7-r0
Low	ALPINE-CVE-2026-76956	expat@2.8.2-r0	2.8.4-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
12.0.20latest	—	5.12.0	11546184	3,539

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/digitalist-open-cloud-matomo/matomo.svg)](https://charts.stackradar.io/charts/digitalist-open-cloud-matomo/matomo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.