firefly-iii-stack Helm chart

Name: firefly-iii-stack Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

firefly-iii

Scored 14 Sept 2026

Installs Firefly III stack (db, app, importer)

Latest 0.10.2 1 month agoApp version not verified against the render 0Artifact Hub

firefly-iii-stack 0.10.2 deploys 4 container images: library/postgres, fireflyiii/core, fireflyiii/data-importer and library/alpine. Across them, 1,003 findings — 0 critical, 3 high. The highest contribution is ALPINE-CVE-2023-0286 in openssl 1.1.1s-r0, fixed in 1.1.1t-r0.

Radar Score

10,26003131867

1,003 findings over 4 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres×3	10-alpine	0383	392
fireflyiii/core	version-6.5.9	0063441	5,039
fireflyiii/data-importer	version-2.2.3	0060423	4,829
library/alpine	3.13	0000	0

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

519 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-18938	p11-kit@0.25.5-3	no fix listed
Low	DEBIAN-CVE-2025-8225	binutils@2.44-3	no fix listed
Low	GHSA-vm85-hxw5-5432	guzzlehttp/psr7@2.9.0	2.12.1
Low	DEBIAN-CVE-2026-0989	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3
Low	DEBIAN-CVE-2026-6472	postgresql-17@17.8-0+deb13u1	17.10-0+deb13u1
Low	DEBIAN-CVE-2026-13595	util-linux@2.41-5	2.41.5-0+deb13u1
Low	DEBIAN-CVE-2025-5278	coreutils@9.7-3	no fix listed
Low	DEBIAN-CVE-2026-42770	openssl@3.5.5-1~deb13u1	3.5.6-1~deb13u2
Low	DEBIAN-CVE-2008-1688	m4@1.4.19-8	no fix listed
Low	DEBIAN-CVE-2026-63381	libevent@2.1.12-stable-10+b1	2.1.13-stable-1~deb13u1
Low	GHSA-c2w2-prh8-qm98	guzzlehttp/psr7@2.9.0	2.12.3
Low	DEBIAN-CVE-2025-8732	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	2.12.7+dfsg+really2.9.14-2.1+deb13u3
Low	DEBIAN-CVE-2021-4217	unzip@6.0-29	no fix listed
Low	DEBIAN-CVE-2026-56131	expat@2.7.1-2	2.8.2-1~deb13u1
Low	DEBIAN-CVE-2025-15649	perl@5.40.1-6	5.40.1-6+deb13u1
Low	DEBIAN-CVE-2010-4756	glibc@2.41-12+deb13u2	no fix listed
Low	DEBIAN-CVE-2025-6141	ncurses@6.5+20250216-2	no fix listed
Low	DEBIAN-CVE-2026-29111	systemd@257.9-1~deb13u1	257.13-1~deb13u1
Low	DEBIAN-CVE-2026-15059	systemd@257.9-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2024-56433	shadow@1:4.17.4-2	no fix listed
Low	DEBIAN-CVE-2008-1687	m4@1.4.19-8	no fix listed
Low	DEBIAN-CVE-2026-41991	gzip@1.13-1	1.13-1+deb13u1
Low	DEBIAN-CVE-2026-19548	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-5419	gnutls28@3.8.9-3+deb13u2	3.8.9-3+deb13u4
Low	DEBIAN-CVE-2025-1148	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-89157	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	DEBIAN-CVE-2026-40226	systemd@257.9-1~deb13u1	257.13-1~deb13u1
Low	DEBIAN-CVE-2026-15003	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-6845	binutils@2.44-3	no fix listed
Low	GHSA-r854-jrxh-36qx	phpseclib/phpseclib@3.0.50	3.0.51
Low	DEBIAN-CVE-2025-1150	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-89092	glibc@2.41-12+deb13u2	no fix listed
Low	DEBIAN-CVE-2026-18374	glibc@2.41-12+deb13u2	no fix listed
Low	DEBIAN-CVE-2013-0337	nginx@1.28.2-1~trixie	no fix listed
Low	DEBIAN-CVE-2026-19617	lvm2@2:1.02.205-2	no fix listed
Low	GHSA-g446-98w2-8p5w	guzzlehttp/guzzle@7.10.0	7.12.3
Low	DEBIAN-CVE-2026-6844	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-1149	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-16742	systemd@257.9-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-6474	postgresql-17@17.8-0+deb13u1	17.10-0+deb13u1
Low	DEBIAN-CVE-2025-69644	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-14678	postgresql-17@17.8-0+deb13u1	17.11-0+deb13u1
Low	DEBIAN-CVE-2026-18024	postgresql-17@17.8-0+deb13u1	17.11-0+deb13u1
Low	DEBIAN-CVE-2026-6470	postgresql-17@17.8-0+deb13u1	17.11-0+deb13u1
Low	GHSA-mj63-m3rc-8ppr	league/commonmark@2.8.2	2.9.0
Low	DEBIAN-CVE-2025-15224	curl@8.14.1-2+deb13u2	no fix listed
Low	DEBIAN-CVE-2026-22185	openldap@2.6.10+dfsg-1	no fix listed
Low	DEBIAN-CVE-2026-42250	bzip2@1.0.8-6	no fix listed
Low	DEBIAN-CVE-2026-56416	unbound@1.22.0-2+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-39113	sqlite3@3.46.1-7	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.2latest	1 month ago	—	03131867	10,260

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/firefly-iii/firefly-iii-stack.svg)](https://charts.stackradar.io/charts/firefly-iii/firefly-iii-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.