monica Helm chart
gabe565Verified publisherScored 14 Sept 2026
Personal CRM. Remember everything about your friends, family and business relationships.
Latest 0.10.0 1 year agoapp version 4.1.2-fpm-alpine 0Artifact Hub
monica 0.10.0 deploys 2 container images: library/monica and library/nginx. Across them, 114 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-19931 in curl 8.21.0-r0, fixed in 8.22.0-r0. Chart.yaml declares kubeVersion >=1.22.0-0; rendered for Kubernetes 1.22.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| library/ | 4.1.2-fpm-alpine | 001396 | 1,139 |
| library/ | stable-alpine | 0004 | 34 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-jjv6-8j6v-6j52 | league/ | 2.9.1 |
| Low | GHSA-j8pm-gj4c-rq4x | league/ | 2.9.1 |
| Low | GHSA-8rr7-cvq3-gmfh | league/ | 2.10.0 |
| Low | GHSA-c2pc-g5qf-rfrf | league/ | 2.6.0 |
| Low | GHSA-h5x3-xfc9-m39h | symfony/ | 6.4.41 |
| Low | ALPINE-CVE-2026-76642 | util-linux | 2.42.3-r0 |
| Low | ALPINE-CVE-2026-6471 | postgresql18 | 18.5-r0 |
| Low | ALPINE-CVE-2026-63074 | openssl | 3.5.8-r0 |
| Low | GHSA-3527-qv2q-pfvx | league/ | 2.7.0 |
| Low | GHSA-3qpq-r242-jqj7 | phpseclib/ | 3.0.52 |
| Low | GHSA-cx96-42px-69fm | dompdf/ | 3.1.6 |
| Low | GHSA-v5mv-p594-2x33 | guzzlehttp/ | 7.15.2 |
| Low | GHSA-jc38-x7x8-2xc8 | web-token/ | 3.4.10 |
| Low | GHSA-j8qw-6jw8-r297 | dompdf/ | 3.1.6 |
| Low | GHSA-3prj-6hqw-cm82 | web-token/ | 3.4.10 |
| Low | GHSA-hh8v-hgvp-g3f5 | league/ | 2.8.2 |
| Low | GHSA-875x-g8p7-5w27 | web-auth/ | 4.9.0 |
| Low | GHSA-72xp-p242-47p9 | symfony/ | 6.4.40 |
| Low | GHSA-29pj-957v-52mc | league/ | 2.9.0 |
| Low | ALPINE-CVE-2026-78408 | util-linux | 2.42.3-r1 |
| Low | GHSA-r39x-jcww-82v6 | symfony/ | 6.4.33 |
| Low | GHSA-h95v-h523-3mw8 | guzzlehttp/ | 7.15.1 |
| Low | GHSA-wm3w-8rrp-j577 | guzzlehttp/ | 7.15.1 |
| Low | GHSA-27qh-8cxx-2cr5 | aws/ | 3.371.4 |
| Low | ALPINE-CVE-2026-78410 | util-linux | 2.42.3-r0 |
| Low | ALPINE-CVE-2026-78409 | util-linux | 2.42.3-r0 |
| Low | GHSA-g2gp-3wwq-f4ph | league/ | 2.9.0 |
| Low | GHSA-jfm3-95jq-q3rf | league/ | 2.9.0 |
| Low | GHSA-mh25-x5hq-wrqp | league/ | 2.9.0 |
| Low | GHSA-m557-wrgg-6rp4 | phpseclib/ | 3.0.54 |
| Low | GHSA-cwxw-98qj-8qjx | guzzlehttp/ | 7.12.1 |
| Low | GHSA-2x45-7fc3-mxwq | firebase/ | 7.0.0 |
| Low | GHSA-f7vp-7xgx-4w4r | guzzlehttp/ | 7.15.2 |
| Low | ALPINE-CVE-2026-14672 | postgresql18 | 18.5-r0 |
| Low | GHSA-f283-ghqc-fg79 | guzzlehttp/ | 7.15.1 |
| Low | GHSA-94pj-82f3-465w | guzzlehttp/ | 7.14.2 |
| Low | GHSA-x8cp-jf6f-r4xh | aws/ | 3.368.0 |
| Low | GHSA-wpwq-4j6v-78m3 | guzzlehttp/ | 7.12.1 |
| Low | GHSA-34xg-wgjx-8xph | guzzlehttp/ | 2.10.2 |
| Low | GHSA-4v6x-c7xx-hw9f | league/ | 2.8.1 |
| Low | GHSA-hq7v-mx3g-29hw | guzzlehttp/ | 2.10.2 |
| Low | ALPINE-CVE-2026-14663 | postgresql18 | 18.5-r0 |
| Low | GHSA-vm85-hxw5-5432 | guzzlehttp/ | 2.12.1 |
| Low | GHSA-5739-39v2-5754 | web-token/ | 3.4.10 |
| Low | GHSA-c2w2-prh8-qm98 | guzzlehttp/ | 2.12.3 |
| Low | GHSA-6vvh-pxr4-25r7 | web-token/ | 3.4.10 |
| Low | GHSA-r854-jrxh-36qx | phpseclib/ | 3.0.51 |
| Low | GHSA-g446-98w2-8p5w | guzzlehttp/ | 7.12.3 |
| Low | GHSA-mrfv-m5wm-5w6w | paragonie/ | 1.24.0 |
| Low | GHSA-mrqx-rp3w-jpjp | symfony/ | 6.4.14 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 0.10.0latest | 1 year ago | 4.1.2-fpm-alpine | 0013100 | 1,173 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.