xbackbone Helm chart

Name: xbackbone Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

geek-cookbook

Scored 14 Sept 2026

XBackBone is a simple, self-hosted, lightweight PHP file manager that support the instant sharing tool ShareX and *NIX systems. It supports uploading and displaying images, GIF, video, code, formatted text, and file downloading and uploading. Also have a web UI with multi user management, past uploads history and search support.

Latest 5.4.2 4 years agoapp version 3.3.3 0Artifact Hub

xbackbone 5.4.2 deploys 1 container image: pe46dro/xbackbone-docker. Across them, 88 findings — 1 critical, 5 high — 1 on CISA KEV. The highest contribution is ALPINE-CVE-2020-15999 in freetype 2.9.1-r2, fixed in 2.9.1-r3. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

1,655154042

88 findings over 1 of 1 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
pe46dro/xbackbone-docker	3.3.3	154042	1,655

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

88 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	ALPINE-CVE-2020-15999KEV	freetype@2.9.1-r2	2.9.1-r3
High	ALPINE-CVE-2020-25695	postgresql@11.7-r0	11.10-r0
High	ALPINE-CVE-2020-1967	openssl@1.1.1d-r2	1.1.1g-r0
High	ALPINE-CVE-2021-23840	openssl@1.1.1d-r2	1.1.1j-r0
High	ALPINE-CVE-2021-3449	openssl@1.1.1d-r2	1.1.1k-r0
High	ALPINE-CVE-2020-13777	gnutls@3.6.7-r1	3.6.14-r0
Medium	GHSA-5mv2-rx3q-4w2v	twig/twig@v2.13.1	2.14.11
Medium	GHSA-9f46-5r25-5wfm	league/flysystem@1.0.70	1.1.4
Medium	ALPINE-CVE-2019-15903	python2@2.7.16-r2	2.7.17-r0
Medium	ALPINE-CVE-2020-12268	jbig2dec@0.15-r0	0.15-r1
Medium	ALPINE-CVE-2020-11080	nghttp2@1.35.1-r1	1.35.1-r2
Medium	ALPINE-CVE-2019-13135	imagemagick@7.0.8.68-r0	6.9.10.53-r0
Medium	ALPINE-CVE-2020-12243	openldap@2.4.48-r0	2.4.48-r1
Medium	ALPINE-CVE-2020-11655	sqlite@3.28.0-r2	3.28.0-r3
Medium	ALPINE-CVE-2020-11008	git@2.20.2-r0	2.20.4-r0
Medium	ALPINE-CVE-2020-8231	curl@7.64.0-r3	7.66.0-r5
Medium	ALPINE-CVE-2020-24659	gnutls@3.6.7-r1	3.6.15-r0
Medium	ALPINE-CVE-2021-23841	openssl@1.1.1d-r2	1.1.1j-r0
Medium	ALPINE-CVE-2020-8169	curl@7.64.0-r3	7.64.0-r4
Medium	ALPINE-CVE-2020-1971	openssl@1.1.1d-r2	1.1.1i-r0
Medium	GHSA-cx63-2mw6-8hw5	setuptools@40.6.3.post20190116	70.0.0
Medium	ALPINE-CVE-2020-25709	openldap@2.4.48-r0	2.4.48-r2
Medium	ALPINE-CVE-2019-13454	imagemagick@7.0.8.68-r0	6.9.10.56-r0
Medium	ALPINE-CVE-2020-25696	postgresql@11.7-r0	11.10-r0
Medium	ALPINE-CVE-2020-25710	openldap@2.4.48-r0	2.4.48-r2
Medium	GHSA-r9hx-vwmv-q579	setuptools@40.6.3.post20190116	65.5.1
Medium	GHSA-52m2-vc4m-jj33	twig/twig@v2.13.1	2.15.3
Medium	ALPINE-CVE-2020-24977	libxml2@2.9.9-r2	2.9.9-r3
Medium	PYSEC-2025-49	setuptools@40.6.3.post20190116	78.1.1
Medium	ALPINE-CVE-2020-25692	openldap@2.4.48-r0	2.4.48-r2
Medium	GHSA-25mq-v84q-4j7r	guzzlehttp/guzzle@6.5.5	6.5.8
Medium	ALPINE-CVE-2020-25694	postgresql@11.7-r0	11.10-r0
Medium	GHSA-f2wf-25xc-69c9	guzzlehttp/guzzle@6.5.5	6.5.7
Medium	GHSA-w248-ffj2-4v5q	guzzlehttp/guzzle@6.5.5	6.5.7
Medium	ALPINE-CVE-2020-14349	postgresql@11.7-r0	11.9-r0
Medium	ALPINE-CVE-2019-18348	python2@2.7.16-r2	2.7.18-r0
Medium	GHSA-q559-8m2m-g699	guzzlehttp/guzzle@6.5.5	6.5.8
Medium	GHSA-cwmx-hcrq-mhc3	guzzlehttp/guzzle@6.5.5	6.5.6
Medium	ALPINE-CVE-2020-14155	pcre@8.42-r1	8.42-r2
Medium	GHSA-8xf4-w7qw-pjjw	firebase/php-jwt@v5.2.0	6.0.0
Medium	ALPINE-CVE-2020-8177	curl@7.64.0-r3	7.64.0-r4
Medium	GHSA-7p85-w9px-jpjp	twig/twig@v2.13.1	3.26.0
Medium	ALPINE-CVE-2019-13137	imagemagick@7.0.8.68-r0	6.9.10.53-r0
Medium	GHSA-6j75-5wfj-gh66	twig/twig@v2.13.1	2.16.1
Medium	GHSA-pcw8-m77r-2528	mtdowling/jmespath.php@2.6.0	2.9.1
Medium	GHSA-q7rv-6hp3-vh96	guzzlehttp/psr7@1.7.0	1.8.4
Low	ALPINE-CVE-2020-14363	libx11@1.6.7-r0	1.6.12-r0
Low	GHSA-529h-vh3j-85hq	twig/twig@v2.13.1	3.27.0
Low	ALPINE-CVE-2020-14350	postgresql@11.7-r0	11.9-r0
Low	GHSA-557v-xcg6-rm5m	aws/aws-sdk-php@3.161.0	3.288.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
5.4.2latest	4 years ago	3.3.3	154042	1,655

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/geek-cookbook/xbackbone.svg)](https://charts.stackradar.io/charts/geek-cookbook/xbackbone)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.