StackRadar

xbackbone Helm chart

geek-cookbookVerified publisher

Scored 14 Sept 2026

XBackBone is a simple, self-hosted, lightweight PHP file manager that support the instant sharing tool ShareX and *NIX systems. It supports uploading and displaying images, GIF, video, code, formatted text, and file downloading and uploading. Also have a web UI with multi user management, past uploads history and search support.

Latest 5.4.2 4 years agoapp version 3.3.3 0Artifact Hub

xbackbone 5.4.2 deploys 1 container image: pe46dro/xbackbone-docker. Across them, 88 findings1 critical, 5 high 1 on CISA KEV. The highest contribution is ALPINE-CVE-2020-15999 in freetype 2.9.1-r2, fixed in 2.9.1-r3. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

1,655154042

88 findings over 1 of 1 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
pe46dro/xbackbone-docker3.3.31540421,655

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

88 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowALPINE-CVE-2020-3898cups@2.2.12-r02.2.12-r1
LowALPINE-CVE-2019-13133imagemagick@7.0.8.68-r06.9.10.53-r0
LowALPINE-CVE-2019-13134imagemagick@7.0.8.68-r06.9.10.53-r0
LowGHSA-wxmh-65f7-jcvwguzzlehttp/psr7@1.7.01.9.1
LowGHSA-2xf4-cg6j-vhgqsymfony/polyfill-intl-idn@v1.20.01.38.1
LowGHSA-pr2w-4gpj-cpq4twig/twig@v2.13.13.26.0
LowALPINE-CVE-2021-23839openssl@1.1.1d-r21.1.1j-r0
LowPYSEC-2019-126supervisor@3.3.44.0.3
LowALPINE-CVE-2020-14344libx11@1.6.7-r01.6.10-r0
LowALPINE-CVE-2020-28928musl@1.1.20-r51.1.20-r6
LowALPINE-CVE-2020-12049dbus@1.10.28-r01.12.28-r1
LowGHSA-7fxw-r6jv-74c8twig/twig@v2.13.13.26.0
LowGHSA-h35f-9h28-mq5csetuptools@40.6.3.post2019011683.0.0
LowGHSA-v5mv-p594-2x33guzzlehttp/guzzle@6.5.57.15.2
LowALPINE-CVE-2019-8842cups@2.2.12-r02.2.12-r1
LowGHSA-5v5v-ww74-355vtwig/twig@v2.13.13.27.0
LowGHSA-h8vq-8gpg-mhcgtwig/twig@v2.13.13.27.0
LowGHSA-8x9c-rmqh-456ctwig/twig@v2.13.13.27.0
LowGHSA-h95v-h523-3mw8guzzlehttp/guzzle@6.5.57.15.1
LowGHSA-wm3w-8rrp-j577guzzlehttp/guzzle@6.5.57.15.1
LowGHSA-27qh-8cxx-2cr5aws/aws-sdk-php@3.161.03.371.4
LowGHSA-4j38-f5cw-54h7twig/twig@v2.13.13.26.0
LowGHSA-cwxw-98qj-8qjxguzzlehttp/guzzle@6.5.57.12.1
LowGHSA-2x45-7fc3-mxwqfirebase/php-jwt@v5.2.07.0.0
LowGHSA-f7vp-7xgx-4w4rguzzlehttp/guzzle@6.5.57.15.2
LowGHSA-f283-ghqc-fg79guzzlehttp/guzzle@6.5.57.15.1
LowGHSA-94pj-82f3-465wguzzlehttp/guzzle@6.5.57.14.2
LowGHSA-x8cp-jf6f-r4xhaws/aws-sdk-php@3.161.03.368.0
LowGHSA-wpwq-4j6v-78m3guzzlehttp/guzzle@6.5.57.12.1
LowGHSA-34xg-wgjx-8xphguzzlehttp/psr7@1.7.02.10.2
LowGHSA-hq7v-mx3g-29hwguzzlehttp/psr7@1.7.02.10.2
LowGHSA-vm85-hxw5-5432guzzlehttp/psr7@1.7.02.12.1
LowGHSA-c2w2-prh8-qm98guzzlehttp/psr7@1.7.02.12.3
LowGHSA-g446-98w2-8p5wguzzlehttp/guzzle@6.5.57.12.3
LowGHSA-6377-hfv9-hqf6twig/twig@v2.13.13.11.2
LowGHSA-jjxq-ff2g-95vhtwig/twig@v2.13.13.11.2
LowGHSA-p42q-9prx-q5wqtwig/twig@v2.13.13.27.0
LowGHSA-vcc8-phrv-43wjtwig/twig@v2.13.13.26.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
5.4.2latest4 years ago3.3.31540421,655

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/geek-cookbook/xbackbone.svg)](https://charts.stackradar.io/charts/geek-cookbook/xbackbone)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.