monica Helm chart

Name: monica Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

gabe565

Scored 14 Sept 2026

Personal CRM. Remember everything about your friends, family and business relationships.

Latest 0.10.0 1 year agoapp version 4.1.2-fpm-alpine 0Artifact Hub

monica 0.10.0 deploys 2 container images: library/monica and library/nginx. Across them, 114 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-19931 in curl 8.21.0-r0, fixed in 8.22.0-r0. Chart.yaml declares kubeVersion >=1.22.0-0; rendered for Kubernetes 1.22.0.

Radar Score

1,1730013100

114 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
library/monica×2	4.1.2-fpm-alpine	001396	1,139
library/nginx	stable-alpine	0004	34

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

114 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2026-19931	curl@8.21.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-63073	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-18924	curl@8.21.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-18798	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-63076	openssl@3.5.7-r0	3.5.8-r0
Medium	GHSA-3rg7-wf37-54rm	symfony/http-foundation@v6.4.7	6.4.29
Medium	GHSA-5vg9-5847-vvmq	laravel/framework@v9.52.16	12.60.0
Medium	ALPINE-CVE-2026-14669	postgresql18@18.4-r0	18.5-r0
Medium	ALPINE-CVE-2026-14457	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-80231	curl@8.21.0-r0	8.22.0-r0
Medium	GHSA-pcw8-m77r-2528	mtdowling/jmespath.php@2.7.0	2.9.1
Medium	ALPINE-CVE-2026-80229	curl@8.21.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-16239	postgresql18@18.4-r0	18.5-r0
Low	GHSA-xx3c-qf5g-hc39	symfony/mailer@v6.4.7	6.4.40
Low	ALPINE-CVE-2026-14662	postgresql18@18.4-r0	18.5-r0
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-82209	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-14664	postgresql18@18.4-r0	18.5-r0
Low	ALPINE-CVE-2026-14670	postgresql18@18.4-r0	18.5-r0
Low	ALPINE-CVE-2026-15742	postgresql18@18.4-r0	18.5-r0
Low	ALPINE-CVE-2026-14676	postgresql18@18.4-r0	18.5-r0
Low	ALPINE-CVE-2026-19385	postgresql18@18.4-r0	18.5-r0
Low	ALPINE-CVE-2026-80255	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-14671	postgresql18@18.4-r0	18.5-r0
Low	ALPINE-CVE-2026-14677	postgresql18@18.4-r0	18.5-r0
Low	ALPINE-CVE-2026-14680	postgresql18@18.4-r0	18.5-r0
Low	ALPINE-CVE-2026-16238	postgresql18@18.4-r0	18.5-r0
Low	ALPINE-CVE-2026-13608	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-63072	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-qq5c-677p-737q	symfony/process@v6.4.7	6.4.14
Low	ALPINE-CVE-2026-18408	postgresql18@18.4-r0	18.5-r0
Low	GHSA-78fx-h6xr-vch4	laravel/framework@v9.52.16	10.48.29
Low	ALPINE-CVE-2026-80230	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-15741	postgresql18@18.4-r0	18.5-r0
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-qpmx-3rfj-7rhv	symfony/mime@v6.4.7	6.4.40
Low	GHSA-94g3-g5v7-q4jg	phpseclib/phpseclib@3.0.37	3.0.50
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-6464	postgresql18@18.4-r0	18.5-r0
Low	GHSA-f5gf-2cj8-52g2	dompdf/dompdf@v2.0.8	3.1.6
Low	GHSA-j3f9-p6hm-5w6q	nesbot/carbon@2.72.3	2.72.6
Low	ALPINE-CVE-2026-82208	curl@8.21.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-14668	postgresql18@18.4-r0	18.5-r0
Low	GHSA-2xf4-cg6j-vhgq	symfony/polyfill-intl-idn@v1.29.0	1.38.1
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-14679	postgresql18@18.4-r0	18.5-r0
Low	GHSA-2q4p-g7hv-5rgv	league/commonmark@2.4.2	2.9.0
Low	GHSA-38cx-cq6f-5755	symfony/http-foundation@v6.4.7	6.4.41
Low	GHSA-vqc8-7275-q272	symfony/mime@v6.4.7	6.4.40
Low	GHSA-8hg6-c449-896m	dompdf/dompdf@v2.0.8	3.1.6

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.0latest	1 year ago	4.1.2-fpm-alpine	0013100	1,173

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/gabe565/monica.svg)](https://charts.stackradar.io/charts/gabe565/monica)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.