StackRadar

librechat Helm chart

hajowielandVerified publisher

Scored 14 Sept 2026

Helm Chart for LibreChat

Latest 1.1.0 7 months agoapp version v0.7.8 0Artifact Hub

librechat 1.1.0 deploys 1 container image: ghcr.io/danny-avila/librechat. Across them, 258 findings — 1 critical, 2 high. The highest contribution is ALPINE-CVE-2025-6965 in sqlite 3.48.0-r2, fixed in 3.48.0-r3.

Radar Score

2,9501246209

258 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
ghcr.io/danny-avila/librechatv0.7.812462092,950

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

46 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-2w6w-674q-4c4qhandlebars@4.7.84.7.9
MediumGHSA-fjxv-7rqg-78g4form-data@4.0.04.0.4
MediumGHSA-jc85-fpwf-qm7xexpr-eval@2.0.2no fix listed
MediumGHSA-5j98-mcp5-4vw2glob@10.3.1010.5.0
MediumALPINE-CVE-2025-4517python3@3.12.10-r03.12.11-r0
MediumGHSA-43fc-jf86-j433axios@1.8.21.13.5
MediumPYSEC-2025-49setuptools@70.3.078.1.1
MediumGHSA-xq3m-2v4x-88ggprotobufjs@7.4.07.5.5
MediumGHSA-35jp-ww65-95whaxios@1.8.21.16.0
MediumALPINE-CVE-2025-9230openssl@3.3.3-r03.3.5-r0
MediumALPINE-CVE-2025-9231openssl@3.3.3-r03.3.5-r0
MediumALPINE-CVE-2025-4138python3@3.12.10-r03.12.11-r0
MediumALPINE-CVE-2025-59375expat@2.7.0-r02.7.2-r0
MediumGHSA-r399-636x-v7f6langchain@0.3.190.3.37
MediumGHSA-r399-636x-v7f6@langchain/core@0.3.510.3.80
MediumGHSA-4hjh-wcwx-xvwjaxios@1.8.21.12.0
MediumGHSA-5528-5vmv-3xc2multer@1.4.5-lts.12.1.1
MediumGHSA-2w69-qvjg-hvjx@remix-run/router@1.15.01.23.2
MediumGHSA-f23m-r3pf-42rhlodash@4.17.214.18.0
MediumGHSA-xxjr-mmjv-4gpglodash@4.17.214.17.23
MediumGHSA-v52c-386h-88mcmulter@1.4.5-lts.12.1.0
MediumGHSA-xf7r-hgr6-v32pmulter@1.4.5-lts.12.1.0
MediumALPINE-CVE-2026-6100python3@3.12.10-r03.12.14-r0
MediumALPINE-CVE-2026-31790openssl@3.3.3-r03.3.7-r0
MediumALPINE-CVE-2025-9232openssl@3.3.3-r03.3.5-r0
MediumALPINE-CVE-2025-4330python3@3.12.10-r03.12.11-r0
MediumGHSA-37ch-88jc-xwx2path-to-regexp@0.1.120.1.13
MediumGHSA-qjx8-664m-686jjs-cookie@3.0.53.0.7
MediumALPINE-CVE-2026-66046expat@2.7.0-r02.8.4-r0
MediumGHSA-3mfm-83xf-c92rhandlebars@4.7.84.7.9
MediumGHSA-xhpv-hc6g-r9c6handlebars@4.7.84.7.9
MediumALPINE-CVE-2026-28388openssl@3.3.3-r03.3.7-r0
MediumGHSA-99f4-grh7-6pcq@grpc/grpc-js@1.9.151.9.16
MediumGHSA-m7jm-9gc2-mpf2fast-xml-parser@5.0.95.3.5
MediumALPINE-CVE-2025-69421openssl@3.3.3-r03.3.6-r0
MediumGHSA-3xgq-45jj-v275cross-spawn@7.0.37.0.5
MediumGHSA-p92q-9vqr-4j8vaxios@1.8.21.16.0
MediumALPINE-CVE-2026-28387openssl@3.3.3-r03.3.7-r0
MediumALPINE-CVE-2026-11940python3@3.12.10-r03.12.14-r0
MediumGHSA-jmr7-xgp7-cmfjfast-xml-parser@5.0.95.3.6
MediumGHSA-96hv-2xvq-fx4pws@8.18.08.21.0
MediumGHSA-3ppc-4f35-3m26minimatch@9.0.39.0.6
MediumALPINE-CVE-2026-28389openssl@3.3.3-r03.3.7-r0
MediumALPINE-CVE-2026-28390openssl@3.3.3-r03.3.7-r0
MediumGHSA-pf86-5x62-jrwfaxios@1.8.21.15.1
MediumGHSA-4pg4-qvpc-4q3hmulter@1.4.5-lts.12.0.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.1.0latest7 months agov0.7.812462092,950

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/hajowieland/librechat.svg)](https://charts.stackradar.io/charts/hajowieland/librechat)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.