StackRadar

guacamole Helm chart

halkeye

Scored 14 Sept 2026

Apache Guacamole is a clientless remote desktop gateway. It supports standard protocols like VNC, RDP, and SSH.

Latest 0.2.1 3 years agoapp version 1.1.0 3Artifact Hub

guacamole 0.2.1 deploys 3 container images: guacamole/guacamole, bitnami/postgresql and guacamole/guacd. Across the 2 measured, 301 findings2 critical, 11 high 5 on CISA KEV. The highest contribution is GHSA-3p2h-wqq4-wf4h in tomcat-coyote 8.5.41, with no fix listed.

Radar Score

4,83921192196

301 findings over 2 of 3 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
guacamole/guacamole×21.1.02863972,980
bitnami/postgresql11.7.0-debian-10-r9unmeasured
guacamole/guacd1.1.00329991,859

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

85 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumDSA-5169-1openssl@1.1.1d-0+deb10u21.1.1n-0+deb10u3
MediumDLA-3807-1glibc@2.28-102.28-10+deb10u3
MediumDSA-4963-1openssl@1.1.1d-0+deb10u21.1.1d-0+deb10u7
MediumDLA-2544-1openldap@2.4.44+dfsg-5+deb9u22.4.44+dfsg-5+deb9u7
MediumDSA-4845-1openldap@2.4.47+dfsg-3+deb10u12.4.47+dfsg-3+deb10u5
MediumDSA-5139-1openssl@1.1.1d-0+deb10u21.1.1n-0+deb10u2
MediumDSA-4511-1nghttp2@1.18.1-11.18.1-1+deb9u1
MediumDLA-3449-1openssl@1.1.1d-0+deb10u21.1.1n-0+deb10u5
MediumDLA-2952-1openssl@1.1.0j-1~deb9u11.1.0l-1~deb9u5
MediumDLA-2953-1openssl1.0@1.0.2r-1~deb9u11.0.2u-1~deb9u7
MediumDSA-5103-1openssl@1.1.1d-0+deb10u21.1.1d-0+deb10u8
MediumGHSA-f268-65qc-98vgtomcat-coyote@8.5.418.5.58
MediumDSA-5140-1openldap@2.4.47+dfsg-3+deb10u12.4.47+dfsg-3+deb10u7
MediumDSA-4860-1openldap@2.4.47+dfsg-3+deb10u12.4.47+dfsg-3+deb10u6
MediumDSA-4875-1openssl@1.1.1d-0+deb10u21.1.1d-0+deb10u6
MediumDLA-3325-1openssl@1.1.1d-0+deb10u21.1.1n-0+deb10u4
MediumDSA-4661-1openssl@1.1.1d-0+deb10u21.1.1d-0+deb10u3
MediumDSA-5111-1zlib@1:1.2.11.dfsg-11:1.2.11.dfsg-1+deb10u1
MediumDLA-2563-1openssl@1.1.0j-1~deb9u11.1.0l-1~deb9u3
MediumDLA-2565-1openssl1.0@1.0.2r-1~deb9u11.0.2u-1~deb9u4
MediumDSA-4855-1openssl@1.1.1d-0+deb10u21.1.1d-0+deb10u5
MediumDLA-2766-1openssl@1.1.0j-1~deb9u11.1.0l-1~deb9u4
MediumDLA-2774-1openssl1.0@1.0.2r-1~deb9u11.0.2u-1~deb9u6
MediumDLA-2388-1nss@2:3.26.2-1.1+deb9u12:3.26.2-1.1+deb9u2
MediumDSA-4453-1openjdk-8@8u212-b01-1~deb9u18u212-b03-2~deb9u1
MediumDLA-2935-1expat@2.2.0-2+deb9u12.2.0-2+deb9u5
MediumDSA-5085-1expat@2.2.6-2+deb10u12.2.6-2+deb10u3
MediumGHSA-f4qf-m5gf-8jm8tomcat-coyote@8.5.418.5.64
MediumGHSA-wm9w-rjj3-j356tomcat-coyote@8.5.41no fix listed
MediumDSA-4670-1tiff@4.0.8-2+deb9u44.0.8-2+deb9u5
MediumDSA-4936-1libuv1@1.24.1-11.24.1-1+deb10u1
MediumGHSA-r29c-68gh-xp6xtomcat-coyote@8.5.419.0.118
MediumDLA-3172-1libxml2@2.9.4+dfsg1-7+b32.9.4+dfsg1-7+deb10u5
MediumGHSA-6mcm-j9cj-3vc3mina-core@2.1.32.1.5
MediumGHSA-668q-qrv7-99fmlogback-core@1.1.21.2.9
MediumDSA-4633-1curl@7.52.1-5+deb9u97.52.1-5+deb9u10
MediumDLA-3103-1zlib@1:1.2.11.dfsg-11:1.2.11.dfsg-1+deb10u2
MediumDLA-2836-1nss@2:3.26.2-1.1+deb9u12:3.26.2-1.1+deb9u3
MediumDSA-4697-1gnutls28@3.6.7-43.6.7-4+deb10u4
MediumGHSA-7jqf-v358-p8g7tomcat-coyote@8.5.41no fix listed
MediumGHSA-mvr2-9pj6-7w5jguava@19.024.1.1-android
MediumDLA-2814-1openjdk-8@8u212-b01-1~deb9u18u312-b07-1~deb9u1
MediumGHSA-qq48-m4jx-xqh8mybatis@3.4.63.5.6
MediumDSA-4594-1openssl1.0@1.0.2r-1~deb9u11.0.2u-1~deb9u1
MediumGHSA-r6j3-px5g-cq3xtomcat-coyote@8.5.418.5.94
MediumGHSA-vf5j-865m-mq7cmina-core@2.1.32.1.12
MediumGHSA-25xr-qj8w-c4vftomcat-coyote@8.5.41no fix listed
MediumGHSA-4j3c-42xv-3f84tomcat-coyote@8.5.41no fix listed
MediumDLA-2848-1libssh2@1.7.0-1+deb9u11.7.0-1+deb9u2
MediumDLA-3559-1libssh2@1.8.0-2.11.8.0-2.1+deb10u1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.2.1latest3 years ago1.1.0211921964,839

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/halkeye/guacamole.svg)](https://charts.stackradar.io/charts/halkeye/guacamole)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.