navidrome 6.8.7 Helm chart

Name: navidrome Helm chart 6.8.7: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

djjudas21

Not scored yet

Navidrome is an open source web-based music collection server and streamer

Version 6.8.7 todayapp version 0.64.2 2Artifact Hub

navidrome 6.8.7 deploys 1 container image: deluan/navidrome. The highest contribution is ALPINE-CVE-2021-27219 in glib 2.84.4-r0, fixed in 2.66.6-r0. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

Not yet scored

The daily scoring run has not folded the 1 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
deluan/navidrome	0.64.2	00847	597

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

55 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2021-27219	glib@2.84.4-r0	2.66.6-r0
Medium	ALPINE-CVE-2026-8924	curl@8.14.1-r3	8.14.1-r4
Medium	GO-2026-6612	golang.org/x/net@v0.59.0	0.60.0
Medium	GO-2026-6612	stdlib@go1.27.1	1.27.2
Medium	GO-2026-6604	stdlib@go1.27.1	1.26.9
Medium	ALPINE-CVE-2026-92392	curl@8.14.1-r3	8.14.1-r4
Medium	ALPINE-CVE-2026-3805	curl@8.14.1-r3	8.14.1-r4
Medium	ALPINE-CVE-2026-8927	curl@8.14.1-r3	8.14.1-r4
Low	ALPINE-CVE-2026-77214	expat@2.8.5-r0	2.9.0-r0
Low	ALPINE-CVE-2026-5773	curl@8.14.1-r3	8.14.1-r4
Low	GO-2026-6603	golang.org/x/net@v0.59.0	0.60.0
Low	GO-2026-6603	stdlib@go1.27.1	1.27.2
Low	GO-2026-6611	golang.org/x/net@v0.59.0	0.60.0
Low	GO-2026-6611	stdlib@go1.27.1	1.27.2
Low	ALPINE-CVE-2026-86145	pcre2@10.46-r0	10.46-r1
Low	ALPINE-CVE-2026-85091	zlib@1.3.2-r0	1.3.2-r1
Low	GO-2026-6617	golang.org/x/net@v0.59.0	0.60.0
Low	GO-2026-6617	stdlib@go1.27.1	1.27.2
Low	GO-2026-6608	stdlib@go1.27.1	1.26.9
Low	GO-2026-6607	stdlib@go1.27.1	1.26.9
Low	ALPINE-CVE-2026-8286	curl@8.14.1-r3	8.14.1-r4
Low	GO-2026-6609	stdlib@go1.27.1	1.26.9
Low	RUSTSEC-2025-0024	crossbeam-channel@0.5.14	0.5.15
Low	ALPINE-CVE-2026-6253	curl@8.14.1-r3	8.14.1-r4
Low	ALPINE-CVE-2026-6276	curl@8.14.1-r3	8.14.1-r4
Low	GO-2026-6613	stdlib@go1.27.1	1.26.9
Low	GO-2026-6605	stdlib@go1.27.1	1.26.9
Low	ALPINE-CVE-2026-3784	curl@8.14.1-r3	8.14.1-r4
Low	GO-2026-6610	golang.org/x/net@v0.59.0	0.60.0
Low	GO-2026-6610	stdlib@go1.27.1	1.27.2
Low	GO-2024-3029	github.com/navidrome/navidrome@v0.64.2+dirty	no fix listed
Low	ALPINE-CVE-2026-89157	pcre2@10.46-r0	10.46-r1
Low	ALPINE-CVE-2025-14819	curl@8.14.1-r3	8.14.1-r4
Low	ALPINE-CVE-2025-14524	curl@8.14.1-r3	8.14.1-r4
Low	ALPINE-CVE-2026-103111	pcre2@10.46-r0	10.46-r1
Low	ALPINE-CVE-2026-3783	curl@8.14.1-r3	8.14.1-r4
Low	ALPINE-CVE-2026-6429	curl@8.14.1-r3	8.14.1-r4
Low	ALPINE-CVE-2026-4873	curl@8.14.1-r3	8.14.1-r4
Low	ALPINE-CVE-2026-89160	pcre2@10.46-r0	10.46-r1
Low	ALPINE-CVE-2026-102633	expat@2.8.5-r0	2.9.0-r0
Low	ALPINE-CVE-2026-7168	curl@8.14.1-r3	8.14.1-r4
Low	ALPINE-CVE-2026-89158	pcre2@10.46-r0	10.46-r1
Low	ALPINE-CVE-2026-89156	pcre2@10.46-r0	10.46-r1
Low	ALPINE-CVE-2026-89161	pcre2@10.46-r0	10.46-r1
Low	ALPINE-CVE-2026-40930	libpng@1.6.57-r0	1.6.59-r0
Low	ALPINE-CVE-2025-13034	curl@8.14.1-r3	8.14.1-r4
Low	GO-2026-6599	stdlib@go1.27.1	1.26.9
Low	GO-2026-6600	stdlib@go1.27.1	1.26.9
Low	GO-2026-6809	stdlib@go1.27.1	1.26.10
Low	GO-2026-5932	golang.org/x/crypto@v0.57.0	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
6.8.7latest	today	0.64.2	—	—
6.8.6	22 days ago	0.64.2	00847	597
6.8.5	1 month ago	0.64.0	00713	239
6.8.4	3 months ago	0.63.1	00315	160

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/djjudas21/navidrome.svg)](https://charts.stackradar.io/charts/djjudas21/navidrome)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.