stash 3.4.2 Helm chart

Name: stash Helm chart 3.4.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

geek-cookbook

Scored 14 Sept 2026

An organizer for your porn, written in Go

Version 3.4.2 4 years agoapp version latest 1Artifact Hub

stash 3.4.2 deploys 1 container image: stashapp/stash. Across them, 1,102 findings — 8 critical, 24 high — 4 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.3, fixed in 1.1.1f-1ubuntu2.15. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

15,856824330740

1,102 findings over 1 of 1 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
stashapp/stash	latest	824330740	15,856

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,102 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2023-1569	stdlib@go1.13.15	1.19.6
Low	UBUNTU-CVE-2025-12781	python3.8@3.8.5-1~20.04.2	no fix listed
Low	UBUNTU-CVE-2025-15366	python3.8@3.8.5-1~20.04.2	3.8.10-0ubuntu1~20.04.18+esm6
Low	UBUNTU-CVE-2021-0561	flac@1.3.3-1build1	1.3.3-1ubuntu0.1
Low	GO-2023-2382	stdlib@go1.13.15	1.20.12
Low	UBUNTU-CVE-2023-6602	ffmpeg@7:4.2.4-1ubuntu0.1	no fix listed
Low	GO-2022-1143	stdlib@go1.13.15	1.18.9
Low	UBUNTU-CVE-2023-43786	libx11@2:1.6.9-2ubuntu1.1	2:1.6.9-2ubuntu1.6
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
Low	UBUNTU-CVE-2024-22365	pam@1.3.1-5ubuntu4.1	1.3.1-5ubuntu4.7
Low	UBUNTU-CVE-2026-22796	openssl@1.1.1f-1ubuntu2.3	1.1.1f-1ubuntu2.24+esm2
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0
Low	UBUNTU-CVE-2026-64833	ffmpeg@7:4.2.4-1ubuntu0.1	7:4.2.7-0ubuntu0.1+esm16
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
Low	GO-2024-2599	stdlib@go1.13.15	1.21.8
Low	UBUNTU-CVE-2022-48281	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.9
Low	GO-2022-1038	stdlib@go1.13.15	1.18.7
Low	UBUNTU-CVE-2023-39929	libva@2.7.0-2	no fix listed
Low	GO-2024-3106	stdlib@go1.13.15	1.22.7
Low	UBUNTU-CVE-2025-50952	openjpeg2@2.3.1-1ubuntu4.20.04.1	2.3.1-1ubuntu4.20.04.4+esm1
Low	UBUNTU-CVE-2023-0800	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.8
Low	UBUNTU-CVE-2023-0801	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.8
Low	UBUNTU-CVE-2023-0802	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.8
Low	UBUNTU-CVE-2023-0803	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.8
Low	UBUNTU-CVE-2023-0804	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.8
Low	GO-2023-1570	stdlib@go1.13.15	1.19.6
Low	UBUNTU-CVE-2025-3576	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.11
Low	UBUNTU-CVE-2022-4645	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.6
Low	UBUNTU-CVE-2023-0799	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.8
Low	UBUNTU-CVE-2025-68973	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1
Low	UBUNTU-CVE-2026-11979	libxml2@2.9.10+dfsg-5	no fix listed
Low	UBUNTU-CVE-2023-2908	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.9
Low	UBUNTU-CVE-2023-0795	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.8
Low	UBUNTU-CVE-2023-0796	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.8
Low	UBUNTU-CVE-2023-0797	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.8
Low	UBUNTU-CVE-2023-0798	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.8
Low	UBUNTU-CVE-2023-25433	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.9
Low	UBUNTU-CVE-2022-3821	systemd@245.4-4ubuntu3.5	245.4-4ubuntu3.20
Low	UBUNTU-CVE-2026-86140	libxml2@2.9.10+dfsg-5	no fix listed
Low	UBUNTU-CVE-2023-26966	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.9
Low	GO-2022-0531	stdlib@go1.13.15	1.17.11
Low	GO-2024-2600	stdlib@go1.13.15	1.21.8
Low	UBUNTU-CVE-2026-70628	ffmpeg@7:4.2.4-1ubuntu0.1	7:4.2.7-0ubuntu0.1+esm15
Low	UBUNTU-CVE-2025-15367	python3.8@3.8.5-1~20.04.2	3.8.10-0ubuntu1~20.04.18+esm6
Low	UBUNTU-CVE-2026-59847	libssh@0.9.3-2ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2023-39804	tar@1.30+dfsg-7ubuntu0.20.04.1	1.30+dfsg-7ubuntu0.20.04.4
Low	UBUNTU-CVE-2026-12706	ffmpeg@7:4.2.4-1ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2026-38343	ffmpeg@7:4.2.4-1ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2026-38345	ffmpeg@7:4.2.4-1ubuntu0.1	no fix listed
Low	GO-2024-2609	stdlib@go1.13.15	1.21.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.4.2latest	4 years ago	latest	824330740	15,856

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/geek-cookbook/stash.svg)](https://charts.stackradar.io/charts/geek-cookbook/stash)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.