StackRadar

guacamole 0.2.1 Helm chart

halkeye

Scored 14 Sept 2026

Apache Guacamole is a clientless remote desktop gateway. It supports standard protocols like VNC, RDP, and SSH.

Version 0.2.1 3 years agoapp version 1.1.0 3Artifact Hub

guacamole 0.2.1 deploys 3 container images: guacamole/guacamole, bitnami/postgresql and guacamole/guacd. Across the 2 measured, 301 findings2 critical, 11 high 5 on CISA KEV. The highest contribution is GHSA-3p2h-wqq4-wf4h in tomcat-coyote 8.5.41, with no fix listed.

Radar Score

4,83921192196

301 findings over 2 of 3 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
guacamole/guacamole×21.1.02863972,980
bitnami/postgresql11.7.0-debian-10-r9unmeasured
guacamole/guacd1.1.00329991,859

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

277 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGHSA-jgvc-jfgh-rjvvjose4j@0.5.50.9.3
LowDLA-3579-1elfutils@0.176-1.10.176-1.1+deb10u1
LowDLA-2412-2openjdk-8@8u212-b01-1~deb9u18u275-b01-1~deb9u1
LowDLA-2424-1tzdata@2019a-0+deb9u12020d-0+deb9u1
LowDLA-2509-1tzdata@2019a-0+deb9u12020e-0+deb9u1
LowDLA-2542-1tzdata@2019a-0+deb9u12021a-0+deb9u1
LowDLA-2593-1ca-certificates@20161130+nmu1+deb9u120200601~deb9u2
LowDLA-2759-1gnutls28@3.5.8-5+deb9u43.5.8-5+deb9u6
LowDLA-2761-1openssl1.0@1.0.2r-1~deb9u11.0.2u-1~deb9u5
LowDLA-2797-1tzdata@2019a-0+deb9u12021a-0+deb9u2
LowDLA-2836-2nss@2:3.26.2-1.1+deb9u12:3.26.2-1.1+deb9u4
LowDLA-2948-1debian-archive-keyring@2017.52017.5+deb9u2
LowDLA-2963-1tzdata@2019a-0+deb9u12021a-0+deb9u3
LowDLA-3051-1tzdata@2019a-0+deb9u12021a-0+deb9u4
LowDLA-3112-1bzip2@1.0.6-9.2~deb10u11.0.6-9.2~deb10u2
LowDLA-3134-1tzdata@2019c-0+deb10u12021a-0+deb10u7
LowDLA-3161-1tzdata@2019c-0+deb10u12021a-0+deb10u8
LowDLA-3178-1ffmpeg@7:4.1.4-1~deb10u17:4.1.10-0+deb10u1
LowDLA-3366-1tzdata@2019c-0+deb10u12021a-0+deb10u10
LowDLA-3412-1tzdata@2019c-0+deb10u12021a-0+deb10u11
LowDLA-3482-1debian-archive-keyring@2019.12019.1+deb10u2
LowDLA-3684-1tzdata@2019c-0+deb10u12021a-0+deb10u12
LowDLA-3788-1tzdata@2019c-0+deb10u12024a-0+deb10u1
LowDSA-5085-2expat@2.2.6-2+deb10u12.2.6-2+deb10u4
LowGHSA-p47f-322f-whfhlogback-core@1.1.21.5.33
LowGHSA-6v67-2wr5-gvf4logback-core@1.1.21.3.15
LowGHSA-qqpg-mvqg-649vlogback-core@1.1.21.5.25

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.2.1latest3 years ago1.1.0211921964,839

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/halkeye/guacamole.svg)](https://charts.stackradar.io/charts/halkeye/guacamole)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.