StackRadar

tdarr Helm chart

geek-cookbookVerified publisher

Scored 15 Sept 2026

Tdarr is a self hosted web-app for automating media library transcode/remux management and making sure your files are exactly how you need them to be in terms of codecs/streams/containers etc.

Latest 4.6.2 4 years agoapp version 2.00.18 1Artifact Hub

tdarr 4.6.2 deploys 2 container images: haveagitgat/tdarr and haveagitgat/tdarr_node. Across them, 2,139 findings25 critical, 60 high 9 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.1, fixed in 1.1.1f-1ubuntu2.15.

Radar Score

31,17825605911,462

2,139 findings over 2 of 2 images measured

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
haveagitgat/tdarr2.00.18132627377415,022
haveagitgat/tdarr_node2.00.10123431868816,156

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

887 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowUBUNTU-CVE-2025-9301cmake@3.16.3-1ubuntu1no fix listed
LowUBUNTU-CVE-2025-55132nodejs@14.15.3-deb-1nodesource1no fix listed
LowUBUNTU-CVE-2025-66382expat@2.2.9-1build1no fix listed
LowUBUNTU-CVE-2026-48936nodejs@14.15.3-deb-1nodesource1no fix listed
LowUBUNTU-CVE-2025-1376elfutils@0.176-1.1build1no fix listed
LowUBUNTU-CVE-2025-6170libxml2@2.9.10+dfsg-52.9.10+dfsg-5ubuntu0.20.04.10+esm1
LowUBUNTU-CVE-2025-5917libarchive@3.4.0-2ubuntu13.4.0-2ubuntu1.5+esm1
LowUBUNTU-CVE-2026-24515expat@2.2.9-1build12.2.9-1ubuntu0.8+esm1
LowUBUNTU-CVE-2026-40228systemd@245.4-4ubuntu3.3no fix listed
LowUBUNTU-CVE-2026-32778expat@2.2.9-1build1no fix listed
LowUBUNTU-CVE-2026-6192openjpeg2@2.3.1-1ubuntu4no fix listed
LowUBUNTU-CVE-2023-4016procps@2:3.3.16-1ubuntu22:3.3.16-1ubuntu2.4
LowUBUNTU-CVE-2025-30258gnupg2@2.2.19-3ubuntu22.2.19-3ubuntu2.4
LowUBUNTU-CVE-2025-9165tiff@4.1.0+git191117-2build14.1.0+git191117-2ubuntu0.20.04.14+esm2
LowUBUNTU-CVE-2026-15310python3.8@3.8.5-1~20.04no fix listed
LowUBUNTU-CVE-2026-15310python2.7@2.7.18-1~20.04.1no fix listed
LowUBUNTU-CVE-2026-1485glib2.0@2.64.3-1~ubuntu20.04.1no fix listed
LowUBUNTU-CVE-2026-53910diffutils@1:3.7-31:3.7-3ubuntu0.1~esm1
LowUBUNTU-CVE-2026-6879python2.7@2.7.18-1~20.04.1no fix listed
LowUBUNTU-CVE-2026-6879python3.8@3.8.5-1~20.04no fix listed
LowUBUNTU-CVE-2025-8534tiff@4.1.0+git191117-2build14.1.0+git191117-2ubuntu0.20.04.14+esm1
LowUBUNTU-CVE-2026-86137libxml2@2.9.10+dfsg-5no fix listed
LowUBUNTU-CVE-2026-86141libxml2@2.9.10+dfsg-5no fix listed
LowUBUNTU-CVE-2026-89162pcre2@10.34-7no fix listed
LowUBUNTU-CVE-2026-89156pcre2@10.34-7no fix listed
LowUBUNTU-CVE-2026-0967libssh@0.9.3-2ubuntu2.10.9.3-2ubuntu2.5+esm3
LowUBUNTU-CVE-2025-66861binutils@2.34-6ubuntu1.3no fix listed
LowUBUNTU-CVE-2026-35388openssh@1:8.2p1-4ubuntu0.4no fix listed
LowUBUNTU-CVE-2026-16517libarchive@3.4.0-2ubuntu1no fix listed
LowUBUNTU-CVE-2026-48617nodejs@14.15.3-deb-1nodesource1no fix listed
LowUBUNTU-CVE-2026-18503python3.8@3.8.5-1~20.04no fix listed
LowUBUNTU-CVE-2026-18503python2.7@2.7.18-1~20.04.1no fix listed
LowUBUNTU-CVE-2026-73283openssh@1:8.2p1-4ubuntu0.4no fix listed
LowUBUNTU-CVE-2026-5958sed@4.7-14.7-1ubuntu0.1~esm1
LowUBUNTU-CVE-2026-6368glibc@2.31-0ubuntu9.1no fix listed
LowUBUNTU-CVE-2023-24593glib2.0@2.64.3-1~ubuntu20.04.12.64.6-1~ubuntu20.04.6
LowUBUNTU-CVE-2023-25180glib2.0@2.64.3-1~ubuntu20.04.12.64.6-1~ubuntu20.04.6

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
4.6.2latest4 years ago2.00.1825605911,46231,178

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/geek-cookbook/tdarr.svg)](https://charts.stackradar.io/charts/geek-cookbook/tdarr)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 15 Sept 2026 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.