StackRadar

firefly-iii Helm chart

geek-cookbookVerified publisher

Scored 14 Sept 2026

Firefly III: a personal finances manager

Latest 0.3.0 3 years agoapp version version-5.6.14 1Artifact Hub

firefly-iii 0.3.0 deploys 1 container image: fireflyiii/core. Across them, 157 findings0 critical, 2 high 2 on CISA KEV. The highest contribution is DLA-3570-1 in libwebp 0.6.1-2+deb10u1, fixed in 0.6.1-2+deb10u3. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

2,0760238116

157 findings over 1 of 1 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
fireflyiii/coreversion-5.6.1402381162,076

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

38 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumDSA-5035-1apache2@2.4.38-3+deb10u62.4.38-3+deb10u7
MediumDSA-5169-1openssl@1.1.1d-0+deb10u71.1.1n-0+deb10u3
MediumDLA-3818-1apache2@2.4.38-3+deb10u62.4.59-1~deb10u1
MediumDLA-3807-1glibc@2.28-102.28-10+deb10u3
MediumDLA-3804-1nghttp2@1.36.0-2+deb10u11.36.0-2+deb10u3
MediumDLA-3401-1apache2@2.4.38-3+deb10u62.4.38-3+deb10u10
MediumDSA-5139-1openssl@1.1.1d-0+deb10u71.1.1n-0+deb10u2
MediumDLA-3449-1openssl@1.1.1d-0+deb10u71.1.1n-0+deb10u5
MediumDSA-5103-1openssl@1.1.1d-0+deb10u71.1.1d-0+deb10u8
MediumDSA-5140-1openldap@2.4.47+dfsg-3+deb10u62.4.47+dfsg-3+deb10u7
MediumDLA-3351-1apache2@2.4.38-3+deb10u62.4.38-3+deb10u9
MediumDLA-3325-1openssl@1.1.1d-0+deb10u71.1.1n-0+deb10u4
MediumDSA-5111-1zlib@1:1.2.11.dfsg-11:1.2.11.dfsg-1+deb10u1
MediumDSA-5085-1expat@2.2.6-2+deb10u12.2.6-2+deb10u3
MediumDLA-3085-1curl@7.64.0-4+deb10u27.64.0-4+deb10u3
MediumDLA-3172-1libxml2@2.9.4+dfsg1-7+deb10u22.9.4+dfsg1-7+deb10u5
MediumDLA-3103-1zlib@1:1.2.11.dfsg-11:1.2.11.dfsg-1+deb10u2
MediumGHSA-52m2-vc4m-jj33twig/twig@v3.3.83.4.3
MediumDSA-5135-1postgresql-11@11.14-0+deb10u111.16-0+deb10u1
MediumGHSA-25mq-v84q-4j7rguzzlehttp/guzzle@7.4.17.4.5
MediumGHSA-h7vf-5wrv-9fhvsymfony/http-kernel@v5.4.45.4.20
MediumGHSA-f2wf-25xc-69c9guzzlehttp/guzzle@7.4.17.4.4
MediumGHSA-w248-ffj2-4v5qguzzlehttp/guzzle@7.4.17.4.4
MediumDLA-3559-1libssh2@1.8.0-2.11.8.0-2.1+deb10u1
MediumGHSA-q559-8m2m-g699guzzlehttp/guzzle@7.4.17.4.5
MediumGHSA-cwmx-hcrq-mhc3guzzlehttp/guzzle@7.4.17.4.3
MediumGHSA-8xf4-w7qw-pjjwfirebase/php-jwt@v5.5.16.0.0
MediumGHSA-7p85-w9px-jpjptwig/twig@v3.3.83.26.0
MediumGHSA-wj7q-gjg8-3cpmleague/oauth2-server@8.3.38.4.2
MediumGHSA-6j75-5wfj-gh66twig/twig@v3.3.83.11.1
MediumGHSA-3rg7-wf37-54rmsymfony/http-foundation@v5.4.35.4.50
MediumGHSA-5vg9-5847-vvmqlaravel/framework@v8.82.012.60.0
MediumDLA-3530-1openssl@1.1.1d-0+deb10u71.1.1n-0+deb10u6
MediumDLA-3213-1krb5@1.17-3+deb10u31.17-3+deb10u5
MediumDLA-3613-1curl@7.64.0-4+deb10u27.64.0-4+deb10u7
MediumGHSA-q7rv-6hp3-vh96guzzlehttp/psr7@2.1.02.1.1
MediumGHSA-hm7p-r324-hhf3phpseclib/phpseclib@3.0.133.0.19
MediumDLA-3152-1glibc@2.28-102.28-10+deb10u2

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.3.0latest3 years agoversion-5.6.1402381162,076

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/geek-cookbook/firefly-iii.svg)](https://charts.stackradar.io/charts/geek-cookbook/firefly-iii)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.