sonarr Helm chart
geek-cookbookVerified publisherScored 15 Sept 2026
Smart PVR for newsgroup and bittorrent users
Latest 16.3.2 4 years agoapp version v3.0.8.1507 1Artifact Hub
sonarr 16.3.2 deploys 1 container image: ghcr.io/k8s-at-home/sonarr. Across them, 991 findings — 10 critical, 21 high — 4 on CISA KEV. The highest contribution is UBUNTU-CVE-2023-38545 in curl 7.81.0-1ubuntu1.3, fixed in 7.81.0-1ubuntu1.14. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | v3.0.8.1507 | 1021233726 | 13,071 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-19487 | perl | 5.34.0-3ubuntu1.9 |
| Low | UBUNTU-CVE-2026-51401 | vim | no fix listed |
| Low | UBUNTU-CVE-2026-4878 | libcap2 | 1:2.44-1ubuntu0.22.04.3 |
| Low | GHSA-9j88-vvj5-vhgr | MailKit | 4.16.0 |
| Low | UBUNTU-CVE-2022-0158 | vim | 2:8.2.3995-1ubuntu2.9 |
| Low | UBUNTU-CVE-2023-46246 | vim | 2:8.2.3995-1ubuntu2.15 |
| Low | UBUNTU-CVE-2026-89158 | pcre2 | no fix listed |
| Low | UBUNTU-CVE-2026-3592 | bind9 | 1:9.18.39-0ubuntu0.22.04.4 |
| Low | GO-2023-2041 | stdlib | 1.20.8 |
| Low | UBUNTU-CVE-2023-48233 | vim | 2:8.2.3995-1ubuntu2.15 |
| Low | UBUNTU-CVE-2023-48234 | vim | 2:8.2.3995-1ubuntu2.15 |
| Low | UBUNTU-CVE-2023-48235 | vim | 2:8.2.3995-1ubuntu2.15 |
| Low | UBUNTU-CVE-2023-48237 | vim | 2:8.2.3995-1ubuntu2.15 |
| Low | UBUNTU-CVE-2026-55693 | vim | 2:8.2.3995-1ubuntu2.33 |
| Low | GO-2023-2043 | stdlib | 1.20.8 |
| Low | UBUNTU-CVE-2025-4373 | glib2.0 | 2.72.4-0ubuntu2.5 |
| Low | UBUNTU-CVE-2023-3576 | tiff | 4.3.0-6ubuntu0.7 |
| Low | UBUNTU-CVE-2026-3442 | binutils | no fix listed |
| Low | GO-2023-2186 | stdlib | 1.20.11 |
| Low | UBUNTU-CVE-2023-25435 | tiff | 4.3.0-6ubuntu0.4 |
| Low | UBUNTU-CVE-2021-32842 | mono | no fix listed |
| Low | UBUNTU-CVE-2026-3591 | bind9 | 1:9.18.39-0ubuntu0.22.04.3 |
| Low | GHSA-rxmq-m78w-7wmc | SixLabors.ImageSharp | 2.1.11 |
| Low | UBUNTU-CVE-2026-57455 | vim | 2:8.2.3995-1ubuntu2.33 |
| Low | UBUNTU-CVE-2026-33947 | jq | 1.6-2.1ubuntu3.2 |
| Low | UBUNTU-CVE-2026-78408 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2023-48236 | vim | 2:8.2.3995-1ubuntu2.15 |
| Low | UBUNTU-CVE-2022-38533 | binutils | 2.38-4ubuntu2.1 |
| Low | UBUNTU-CVE-2026-54369 | acl | no fix listed |
| Low | UBUNTU-CVE-2026-41989 | libgcrypt20 | 1.9.4-3ubuntu3.2 |
| Low | UBUNTU-CVE-2026-75466 | libjpeg-turbo | no fix listed |
| Low | UBUNTU-CVE-2024-41957 | vim | 2:8.2.3995-1ubuntu2.18 |
| Low | UBUNTU-CVE-2024-11053 | curl | 7.81.0-1ubuntu1.20 |
| Low | UBUNTU-CVE-2025-5372 | libssh | 0.9.6-2ubuntu0.22.04.4 |
| Low | GO-2024-3105 | stdlib | 1.22.7 |
| Low | GO-2022-1095 | stdlib | 1.18.8 |
| Low | UBUNTU-CVE-2023-48231 | vim | 2:8.2.3995-1ubuntu2.15 |
| Low | UBUNTU-CVE-2023-3164 | tiff | 4.3.0-6ubuntu0.9 |
| Low | UBUNTU-CVE-2026-49839 | jq | no fix listed |
| Low | UBUNTU-CVE-2026-13595 | util-linux | 2.37.2-4ubuntu3.6 |
| Low | UBUNTU-CVE-2022-2867 | tiff | 4.3.0-6ubuntu0.2 |
| Low | UBUNTU-CVE-2022-2868 | tiff | 4.3.0-6ubuntu0.2 |
| Low | UBUNTU-CVE-2022-2869 | tiff | 4.3.0-6ubuntu0.2 |
| Low | UBUNTU-CVE-2026-73073 | vim | 2:8.2.3995-1ubuntu2.36 |
| Low | UBUNTU-CVE-2025-66866 | binutils | no fix listed |
| Low | GO-2023-1621 | stdlib | 1.19.7 |
| Low | UBUNTU-CVE-2026-54371 | attr | 1:2.5.1-1ubuntu0.1 |
| Low | UBUNTU-CVE-2026-1489 | glib2.0 | 2.72.4-0ubuntu2.9 |
| Low | GO-2026-4981 | stdlib | 1.25.10 |
| Low | GO-2025-3563 | stdlib | 1.23.8 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 16.3.2latest | 4 years ago | v3.0.8.1507 | 1021233726 | 13,071 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.