stash 3.4.2 Helm chart
geek-cookbookVerified publisherScored 14 Sept 2026
An organizer for your porn, written in Go
Version 3.4.2 4 years agoapp version latest 1Artifact Hub
stash 3.4.2 deploys 1 container image: stashapp/stash. Across them, 1,102 findings — 8 critical, 24 high — 4 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.3, fixed in 1.1.1f-1ubuntu2.15. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
1 image
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| stashapp/ | latest | 824330740 | 15,856 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
1,102 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GO-2022-1095 | stdlib | 1.18.8 |
| Low | UBUNTU-CVE-2023-3164 | tiff | 4.1.0+git191117-2ubuntu0.20.04.13 |
| Low | UBUNTU-CVE-2026-13595 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2022-2867 | tiff | 4.1.0+git191117-2ubuntu0.20.04.6 |
| Low | UBUNTU-CVE-2022-2868 | tiff | 4.1.0+git191117-2ubuntu0.20.04.6 |
| Low | UBUNTU-CVE-2022-2869 | tiff | 4.1.0+git191117-2ubuntu0.20.04.6 |
| Low | GO-2023-1621 | stdlib | 1.19.7 |
| Low | UBUNTU-CVE-2026-54371 | attr | 1:2.4.48-5ubuntu0.1~esm1 |
| Low | UBUNTU-CVE-2026-1489 | glib2.0 | no fix listed |
| Low | UBUNTU-CVE-2025-7700 | ffmpeg | 7:4.2.7-0ubuntu0.1+esm11 |
| Low | GO-2026-4981 | stdlib | 1.25.10 |
| Low | UBUNTU-CVE-2026-6019 | python3.8 | 3.8.10-0ubuntu1~20.04.18+esm7 |
| Low | GO-2025-3563 | stdlib | 1.23.8 |
| Low | UBUNTU-CVE-2024-50612 | libsndfile | 1.0.28-7ubuntu0.3 |
| Low | GO-2026-4977 | stdlib | 1.25.10 |
| Low | UBUNTU-CVE-2026-0964 | libssh | 0.9.3-2ubuntu2.5+esm3 |
| Low | GHSA-qgc7-mgm3-q253 | golang.org/ | 0.5.0 |
| Low | UBUNTU-CVE-2023-30086 | tiff | 4.1.0+git191117-2ubuntu0.20.04.6 |
| Low | GO-2024-2610 | stdlib | 1.21.8 |
| Low | UBUNTU-CVE-2026-59848 | libssh | no fix listed |
| Low | GO-2026-4986 | stdlib | 1.25.10 |
| Low | UBUNTU-CVE-2026-5704 | tar | 1.30+dfsg-7ubuntu0.20.04.4+esm3 |
| Low | GO-2026-4918 | stdlib | 1.25.10 |
| Low | GO-2026-4918 | golang.org/ | 0.53.0 |
| Low | GO-2026-4337 | stdlib | 1.24.13 |
| Low | UBUNTU-CVE-2023-6004 | libssh | 0.9.3-2ubuntu2.5 |
| Low | GHSA-qccp-gfcp-xxvc | urllib3 | 2.7.0 |
| Low | UBUNTU-CVE-2026-44431 | python-urllib3 | no fix listed |
| Low | UBUNTU-CVE-2023-30775 | tiff | 4.1.0+git191117-2ubuntu0.20.04.6 |
| Low | GHSA-44p7-9xx4-hf2g | golang.org/ | 0.38.0 |
| Low | UBUNTU-CVE-2021-33294 | elfutils | 0.176-1.1ubuntu0.1 |
| Low | UBUNTU-CVE-2025-2175 | zvbi | 0.2.35-17ubuntu0.1~esm1 |
| Low | UBUNTU-CVE-2020-35538 | libjpeg-turbo | 2.0.3-0ubuntu1.20.04.3 |
| Low | GO-2026-4601 | stdlib | 1.25.8 |
| Low | UBUNTU-CVE-2026-72522 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-22695 | libpng1.6 | 1.6.37-2ubuntu0.1~esm2 |
| Low | UBUNTU-CVE-2024-56827 | openjpeg2 | 2.3.1-1ubuntu4.20.04.4 |
| Low | UBUNTU-CVE-2026-56403 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56404 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56405 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56408 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56406 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56407 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56410 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56411 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-78410 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2025-10256 | ffmpeg | 7:4.2.7-0ubuntu0.1+esm11 |
| Low | UBUNTU-CVE-2025-4516 | python3.8 | 3.8.10-0ubuntu1~20.04.18+esm1 |
| Low | GO-2026-5026 | stdlib | 1.25.13 |
| Low | GO-2026-5026 | golang.org/ | 0.55.0 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/geek-cookbook/stash)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.