stash 3.4.2 Helm chart
geek-cookbookVerified publisherScored 14 Sept 2026
An organizer for your porn, written in Go
Version 3.4.2 4 years agoapp version latest 1Artifact Hub
stash 3.4.2 deploys 1 container image: stashapp/stash. Across them, 1,102 findings — 8 critical, 24 high — 4 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.3, fixed in 1.1.1f-1ubuntu2.15. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
1 image
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| stashapp/ | latest | 824330740 | 15,856 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
1,102 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2025-69534 | python3.8 | no fix listed |
| Low | UBUNTU-CVE-2026-30754 | ffmpeg | no fix listed |
| Low | GO-2022-0236 | stdlib | 1.15.12 |
| Low | UBUNTU-CVE-2023-0465 | openssl | 1.1.1f-1ubuntu2.18 |
| Low | UBUNTU-CVE-2023-6603 | ffmpeg | 7:4.2.7-0ubuntu0.1+esm11 |
| Low | GO-2021-0226 | stdlib | 1.14.8 |
| Low | UBUNTU-CVE-2026-42013 | gnutls28 | 3.6.13-2ubuntu1.12+esm3 |
| Low | UBUNTU-CVE-2026-64830 | ffmpeg | 7:4.2.7-0ubuntu0.1+esm16 |
| Low | UBUNTU-CVE-2026-0861 | glibc | 2.31-0ubuntu9.18+esm1 |
| Low | UBUNTU-CVE-2026-58016 | glib2.0 | no fix listed |
| Low | UBUNTU-CVE-2024-2236 | libgcrypt20 | no fix listed |
| Low | UBUNTU-CVE-2025-69419 | openssl | 1.1.1f-1ubuntu2.24+esm2 |
| Low | UBUNTU-CVE-2023-50010 | ffmpeg | 7:4.2.7-0ubuntu0.1+esm5 |
| Low | UBUNTU-CVE-2026-40393 | mesa | no fix listed |
| Low | UBUNTU-CVE-2022-23491 | ca-certificates | 20211016ubuntu0.20.04.1 |
| Low | UBUNTU-CVE-2022-22844 | tiff | 4.1.0+git191117-2ubuntu0.20.04.4 |
| Low | GO-2021-0240 | stdlib | 1.15.13 |
| Low | UBUNTU-CVE-2022-0909 | tiff | 4.1.0+git191117-2ubuntu0.20.04.4 |
| Low | UBUNTU-CVE-2022-0924 | tiff | 4.1.0+git191117-2ubuntu0.20.04.4 |
| Low | UBUNTU-CVE-2026-54874 | openssl | 1.1.1f-1ubuntu2.24+esm5 |
| Low | GHSA-65xw-vw82-r86x | github.com/ | 1.3.6 |
| Low | UBUNTU-CVE-2026-42766 | openssl | 1.1.1f-1ubuntu2.24+esm4 |
| Low | GO-2021-0242 | stdlib | 1.15.13 |
| Low | UBUNTU-CVE-2026-74860 | libxml2 | no fix listed |
| Low | UBUNTU-CVE-2025-32990 | gnutls28 | 3.6.13-2ubuntu1.12+esm1 |
| Low | UBUNTU-CVE-2024-36600 | libcdio | 2.0.0-2ubuntu0.2 |
| Low | UBUNTU-CVE-2026-37555 | libsndfile | no fix listed |
| Low | UBUNTU-CVE-2026-64834 | ffmpeg | 7:4.2.7-0ubuntu0.1+esm16 |
| Low | UBUNTU-CVE-2024-50602 | expat | 2.2.9-1ubuntu0.8 |
| Low | UBUNTU-CVE-2022-0907 | tiff | 4.1.0+git191117-2ubuntu0.20.04.4 |
| Low | GO-2021-0264 | stdlib | 1.16.10 |
| Low | UBUNTU-CVE-2023-6918 | libssh | 0.9.3-2ubuntu2.5 |
| Low | GO-2022-0969 | stdlib | 1.18.6 |
| Low | UBUNTU-CVE-2026-66039 | ffmpeg | 7:4.2.7-0ubuntu0.1+esm14 |
| Low | UBUNTU-CVE-2025-6020 | pam | no fix listed |
| Low | UBUNTU-CVE-2022-0561 | tiff | 4.1.0+git191117-2ubuntu0.20.04.3 |
| Low | UBUNTU-CVE-2022-0562 | tiff | 4.1.0+git191117-2ubuntu0.20.04.3 |
| Low | UBUNTU-CVE-2022-0908 | tiff | 4.1.0+git191117-2ubuntu0.20.04.4 |
| Low | UBUNTU-CVE-2023-7104 | sqlite3 | 3.31.1-4ubuntu0.6 |
| Low | GO-2021-0239 | stdlib | 1.15.13 |
| Low | UBUNTU-CVE-2026-86145 | pcre2 | no fix listed |
| Low | UBUNTU-CVE-2020-35521 | tiff | 4.1.0+git191117-2ubuntu0.20.04.3 |
| Low | UBUNTU-CVE-2024-31852 | llvm-toolchain-11 | no fix listed |
| Low | UBUNTU-CVE-2016-3709 | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.4 |
| Low | GO-2021-0347 | stdlib | 1.16.15 |
| Low | UBUNTU-CVE-2023-43787 | libx11 | 2:1.6.9-2ubuntu1.6 |
| Low | UBUNTU-CVE-2026-3644 | python3.8 | 3.8.10-0ubuntu1~20.04.18+esm7 |
| Low | GO-2021-0245 | stdlib | 1.15.15 |
| Low | GHSA-q4h4-gmj2-qvw2 | golang.org/ | 0.52.0 |
| Low | GO-2021-0319 | stdlib | 1.16.14 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/geek-cookbook/stash)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.