romm Helm chart

Name: romm Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

ernail-romm

Scored 14 Sept 2026

A lightweight Helm chart for `romm` (a self-hosted rom manager and player) that prioritizes transparency and flexibility.

Latest 1.0.1app version 4.4.1 0Artifact Hub

romm 1.0.1 deploys 1 container image: rommapp/romm. Across them, 247 findings — 0 critical, 2 high — 1 on CISA KEV. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0.

Radar Score

2,8960241204

247 findings over 1 of 1 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
rommapp/romm	4.4.1	0241204	2,896

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

41 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2026-25243	valkey@8.1.4-r0	8.1.7-r0
Medium	ALPINE-CVE-2026-45447	openssl@3.5.4-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-23631	valkey@8.1.4-r0	8.1.7-r0
Medium	GHSA-wp53-j4wj-2cfg	python-multipart@0.0.20	0.0.22
Medium	GHSA-38jv-5279-wg99	urllib3@2.5.0	2.6.3
Medium	ALPINE-CVE-2025-11187	openssl@3.5.4-r0	3.5.5-r0
Medium	ALPINE-CVE-2026-23479	valkey@8.1.4-r0	8.1.7-r0
Medium	ALPINE-CVE-2026-2005	postgresql17@17.7-r0	17.8-r0
Medium	ALPINE-CVE-2026-63073	openssl@3.5.4-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-2004	postgresql17@17.7-r0	17.8-r0
Medium	ALPINE-CVE-2026-2006	postgresql17@17.7-r0	17.8-r0
Medium	ALPINE-CVE-2026-6473	postgresql17@17.7-r0	17.10-r0
Medium	ALPINE-CVE-2026-18798	openssl@3.5.4-r0	3.5.8-r0
Medium	PYSEC-2026-36	cryptography@45.0.5	46.0.7
Medium	ALPINE-CVE-2025-58050	pcre2@10.43-r1	10.46-r0
Medium	ALPINE-CVE-2026-63076	openssl@3.5.4-r0	3.5.8-r0
Medium	PYSEC-2026-217	mariadb@1.1.12	no fix listed
Medium	ALPINE-CVE-2026-25646	libpng@1.6.47-r0	1.6.55-r0
Medium	ALPINE-CVE-2026-42764	openssl@3.5.4-r0	3.5.7-r0
Medium	GHSA-2xpw-w6gg-jr37	urllib3@2.5.0	2.6.0
Medium	GHSA-gm62-xv2j-4w53	urllib3@2.5.0	2.6.0
Medium	ALPINE-CVE-2026-14669	postgresql17@17.7-r0	17.11-r0
Medium	ALPINE-CVE-2026-34182	openssl@3.5.4-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-33416	libpng@1.6.47-r0	1.6.56-r0
Medium	ALPINE-CVE-2026-34183	openssl@3.5.4-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-31790	openssl@3.5.4-r0	3.5.6-r0
Medium	ALPINE-CVE-2026-34180	openssl@3.5.4-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-7383	openssl@3.5.4-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-14457	openssl@3.5.4-r0	3.5.8-r0
Medium	GHSA-wvwj-cvrp-7pv5	authlib@1.6.5	1.6.9
Medium	GHSA-2h4p-vjrc-8xpq	mako@1.3.10	1.3.12
Medium	PYSEC-2026-2118	authlib@1.6.5	1.6.7
Medium	ALPINE-CVE-2026-66046	expat@2.7.3-r0	2.8.4-r0
Medium	GHSA-7gcm-g887-7qv7	protobuf@6.31.1	6.33.5
Medium	ALPINE-CVE-2026-28388	openssl@3.5.4-r0	3.5.6-r0
Medium	ALPINE-CVE-2025-69421	openssl@3.5.4-r0	3.5.5-r0
Medium	ALPINE-CVE-2026-16239	postgresql17@17.7-r0	17.11-r0
Medium	ALPINE-CVE-2026-28387	openssl@3.5.4-r0	3.5.6-r0
Medium	GHSA-63hf-3vf5-4wqf	aiohttp@3.12.14	3.13.4
Medium	ALPINE-CVE-2026-28389	openssl@3.5.4-r0	3.5.6-r0
Medium	ALPINE-CVE-2026-28390	openssl@3.5.4-r0	3.5.6-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.1latest	—	4.4.1	0241204	2,896

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/ernail-romm/romm.svg)](https://charts.stackradar.io/charts/ernail-romm/romm)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.