StackRadar

navidrome 6.8.6 Helm chart

djjudas21Verified publisher

Scored 9 Oct 2026

Navidrome is an open source web-based music collection server and streamer

Version 6.8.6 9 days agoapp version 0.64.2 2Artifact Hub

navidrome 6.8.6 deploys 1 container image: deluan/navidrome. Across them, 28 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2021-27219 in glib 2.84.4-r0, fixed in 2.66.6-r0. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

15600127

28 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
deluan/navidrome0.64.200127156

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

27 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowALPINE-CVE-2026-85091zlib@1.3.2-r01.3.2-r1
LowRUSTSEC-2025-0024crossbeam-channel@0.5.140.5.15
LowGO-2024-3029github.com/navidrome/navidrome@v0.64.2+dirtyno fix listed
LowALPINE-CVE-2026-40930libpng@1.6.57-r01.6.59-r0
LowGO-2026-5932golang.org/x/crypto@v0.57.0no fix listed
LowGO-2026-6599stdlib@go1.27.11.26.9
LowGO-2026-6600stdlib@go1.27.11.26.9
LowGO-2026-6603stdlib@go1.27.11.27.2
LowGO-2026-6603golang.org/x/net@v0.59.00.60.0
LowGO-2026-6604stdlib@go1.27.11.26.9
LowGO-2026-6605stdlib@go1.27.11.26.9
LowGO-2026-6607stdlib@go1.27.11.26.9
LowGO-2026-6608stdlib@go1.27.11.26.9
LowGO-2026-6609stdlib@go1.27.11.26.9
LowGO-2026-6610stdlib@go1.27.11.27.2
LowGO-2026-6610golang.org/x/net@v0.59.00.60.0
LowGO-2026-6611stdlib@go1.27.11.27.2
LowGO-2026-6611golang.org/x/net@v0.59.00.60.0
LowGO-2026-6612stdlib@go1.27.11.27.2
LowGO-2026-6612golang.org/x/net@v0.59.00.60.0
LowGO-2026-6613stdlib@go1.27.11.26.9
LowGO-2026-6617stdlib@go1.27.11.27.2
LowGO-2026-6617golang.org/x/net@v0.59.00.60.0
LowRUSTSEC-2024-0436paste@1.0.14no fix listed
LowRUSTSEC-2026-0190anyhow@1.0.981.0.103
LowRUSTSEC-2026-0204crossbeam-epoch@0.9.180.9.20
LowGHSA-cq8v-f236-94qcrand@0.8.50.8.6

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
6.8.6latest9 days ago0.64.200127156
6.8.518 days ago0.64.000713239
6.8.43 months ago0.63.100315160

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/djjudas21/navidrome.svg)](https://charts.stackradar.io/charts/djjudas21/navidrome)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 1 Oct 2026 · scanned 9 Oct 2026 · advisories as of 9 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.