StackRadar

airsonic 6.4.2 Helm chart

geek-cookbookVerified publisher

Scored 14 Sept 2026

Airsonic is a Free and Open Source community driven media server

Version 6.4.2 4 years agodeploys tag latest 0Artifact Hub

airsonic 6.4.2 deploys 1 container image: airsonicadvanced/airsonic-advanced. Across them, 1,153 findings — 19 critical, 36 high — 9 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-beans 5.3.8, fixed in 5.3.18. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

18,2301936366732

1,153 findings over 1 of 1 images measured

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
airsonicadvanced/airsonic-advancedlatest193636673218,230

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

366 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumUBUNTU-CVE-2023-3138libx11@2:1.6.9-2ubuntu1.22:1.6.9-2ubuntu1.5
MediumUBUNTU-CVE-2022-2097openssl@1.1.1f-1ubuntu2.21.1.1f-1ubuntu2.16
MediumUBUNTU-CVE-2024-33599glibc@2.31-0ubuntu9.22.31-0ubuntu9.16
MediumGHSA-9w3m-gqgf-c4p9snakeyaml@1.281.32
MediumUBUNTU-CVE-2025-32911libsoup2.4@2.70.0-12.70.0-1ubuntu0.3
MediumGHSA-m6cj-93v6-cvr5junrar@4.0.07.4.1
MediumUBUNTU-CVE-2025-13836python3.8@3.8.5-1~20.04.33.8.10-0ubuntu1~20.04.18+esm4
MediumUBUNTU-CVE-2026-4176perl@5.30.0-9ubuntu0.2no fix listed
MediumUBUNTU-CVE-2024-0553gnutls28@3.6.13-2ubuntu1.33.6.13-2ubuntu1.10
MediumUBUNTU-CVE-2026-18924curl@7.68.0-1ubuntu2.4no fix listed
MediumGHSA-j8r2-6x86-q33qrequests@2.22.02.31.0
MediumUBUNTU-CVE-2023-32681requests@2.22.0-2ubuntu12.22.0-2ubuntu1.1
MediumUBUNTU-CVE-2023-5678openssl@1.1.1f-1ubuntu2.21.1.1f-1ubuntu2.21
MediumUBUNTU-CVE-2022-1304e2fsprogs@1.45.5-2ubuntu11.45.5-2ubuntu1.1
MediumUBUNTU-CVE-2025-9230openssl@1.1.1f-1ubuntu2.21.1.1f-1ubuntu2.24+esm1
MediumGHSA-p22x-g9px-3945tomcat-embed-core@9.0.469.0.68
MediumUBUNTU-CVE-2026-11856curl@7.68.0-1ubuntu2.47.68.0-1ubuntu2.25+esm6
MediumPYSEC-2023-192urllib3@1.25.82.0.6
MediumUBUNTU-CVE-2017-20230perl@5.30.0-9ubuntu0.2no fix listed
MediumUBUNTU-CVE-2024-7006tiff@4.1.0+git191117-2ubuntu0.20.04.14.1.0+git191117-2ubuntu0.20.04.14
MediumUBUNTU-CVE-2021-30498libcaca@0.99.beta19-2.1ubuntu1.20.04.10.99.beta19-2.1ubuntu1.20.04.2
MediumUBUNTU-CVE-2023-45927slang2@2.3.2-4no fix listed
MediumGHSA-2wrp-6fg6-hmc5spring-web@5.3.85.3.34
MediumUBUNTU-CVE-2025-25467ffmpeg@7:4.4-1ubuntu0~20.04.sav0.1no fix listed
MediumUBUNTU-CVE-2025-25467x264@2:0.161.3039+git544c61f-0ubuntu1~20.04.sav1no fix listed
MediumUBUNTU-CVE-2021-4156libsndfile@1.0.28-71.0.28-7ubuntu0.3
MediumUBUNTU-CVE-2026-1761libsoup2.4@2.70.0-1no fix listed
MediumGHSA-j288-q9x7-2f5vcommons-lang@2.6no fix listed
MediumGHSA-j288-q9x7-2f5vcommons-lang3@3.12.03.18.0
MediumGHSA-wqvq-5m8c-6g24urllib3@1.25.81.25.9
MediumUBUNTU-CVE-2020-14155pcre3@2:8.39-12build12:8.39-12ubuntu0.1
MediumUBUNTU-CVE-2021-22947curl@7.68.0-1ubuntu2.47.68.0-1ubuntu2.7
MediumUBUNTU-CVE-2021-3671heimdal@7.7.0+dfsg-1ubuntu17.7.0+dfsg-1ubuntu1.1
MediumUBUNTU-CVE-2021-37750krb5@1.17-6ubuntu4.11.17-6ubuntu4.3
MediumUBUNTU-CVE-2021-30499libcaca@0.99.beta19-2.1ubuntu1.20.04.10.99.beta19-2.1ubuntu1.20.04.2
MediumUBUNTU-CVE-2025-49794libxml2@2.9.10+dfsg-5ubuntu0.20.04.12.9.10+dfsg-5ubuntu0.20.04.10+esm1
MediumPYSEC-2024-60idna@2.83.7
MediumUBUNTU-CVE-2019-6462cairo@1.16.0-4ubuntu11.16.0-4ubuntu1+esm1
MediumUBUNTU-CVE-2024-25062libxml2@2.9.10+dfsg-5ubuntu0.20.04.12.9.10+dfsg-5ubuntu0.20.04.7
MediumGHSA-9q4x-fr4m-jp86commons-vfs2@2.22.10.0
MediumGHSA-v682-8vv8-vpwrtomcat-embed-websocket@9.0.469.0.86
MediumUBUNTU-CVE-2019-6461cairo@1.16.0-4ubuntu11.16.0-4ubuntu1+esm1
MediumUBUNTU-CVE-2025-6021libxml2@2.9.10+dfsg-5ubuntu0.20.04.12.9.10+dfsg-5ubuntu0.20.04.10+esm1
MediumUBUNTU-CVE-2023-25434tiff@4.1.0+git191117-2ubuntu0.20.04.14.1.0+git191117-2ubuntu0.20.04.8
MediumUBUNTU-CVE-2023-0361gnutls28@3.6.13-2ubuntu1.33.6.13-2ubuntu1.8
MediumGHSA-c4r9-r8fh-9vj2snakeyaml@1.281.31
MediumGHSA-xjp4-hw94-mvp5commons-configuration2@2.72.10.1
MediumUBUNTU-CVE-2026-42009gnutls28@3.6.13-2ubuntu1.33.6.13-2ubuntu1.12+esm2
MediumUBUNTU-CVE-2024-56171libxml2@2.9.10+dfsg-5ubuntu0.20.04.12.9.10+dfsg-5ubuntu0.20.04.9
MediumGHSA-78wr-2p64-hpwjcommons-io@2.62.14.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
6.4.2latest4 years agolatest193636673218,230

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/geek-cookbook/airsonic.svg)](https://charts.stackradar.io/charts/geek-cookbook/airsonic)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.