StackRadar

appwrite 1.3.3 Helm chart

helmforgeVerified publisher

Scored 14 Sept 2026

Appwrite self-hosted backend-as-a-service platform with MariaDB and Redis

Version 1.3.3 6 days agoapp version 1.9.6 0Artifact Hub

appwrite 1.3.3 deploys 5 container images: library/busybox, appwrite/appwrite, appwrite/console, library/mariadb and 1 more. Across them, 672 findings — 0 critical, 0 high. The highest contribution is GHSA-5cgq-3rg8-m6cv in golang.org/x/crypto v0.38.0, fixed in 0.52.0. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

6,95200101571

672 findings over 5 of 5 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images
ImageTagVulnerabilitiesRadar Score
library/busybox×361.3700000
appwrite/appwrite×181.9.600442092,801
appwrite/console8.7.380027841,321
library/mariadb12.3.200181931,875
library/redis8.10.1001285955

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

537 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowALPINE-CVE-2026-4367libxpm@3.5.17-r03.5.19-r0
LowALPINE-CVE-2026-56131expat@2.7.5-r02.8.2-r0
LowUBUNTU-CVE-2025-15649perl@5.38.2-3.2ubuntu0.35.38.2-3.2ubuntu0.4
LowGO-2026-4603stdlib@go1.24.61.25.8
LowALPINE-CVE-2026-0864python3@3.12.13-r03.12.14-r0
LowDEBIAN-CVE-2010-4756glibc@2.41-12+deb13u3no fix listed
LowGO-2026-6303golang.org/x/crypto@v0.38.00.55.0
LowDEBIAN-CVE-2025-6141ncurses@6.5+20250216-2no fix listed
LowGO-2026-6354golang.org/x/crypto@v0.38.00.56.0
LowGO-2026-4982stdlib@go1.24.61.25.10
LowGO-2026-6091stdlib@go1.25.101.25.13
LowDEBIAN-CVE-2026-15059systemd@257.13-1~deb13u1no fix listed
LowUBUNTU-CVE-2024-56433shadow@1:4.13+dfsg1-4ubuntu3.2no fix listed
LowDEBIAN-CVE-2026-41991gzip@1.13-11.13-1+deb13u1
LowUBUNTU-CVE-2026-5419gnutls28@3.8.3-1.1ubuntu3.63.8.3-1.1ubuntu3.6+Fips1.2
LowDEBIAN-CVE-2026-89157pcre2@10.46-1~deb13u110.46-1~deb13u2
LowUBUNTU-CVE-2026-44169mariadb@1:12.3.2+maria~ubu2404no fix listed
LowGO-2026-4864stdlib@go1.24.61.25.9
LowGO-2026-4865stdlib@go1.24.61.25.9
LowGO-2026-4869stdlib@go1.24.61.25.9
LowGO-2026-4340stdlib@go1.24.61.24.12
LowGO-2025-4175stdlib@go1.24.61.24.11
LowDEBIAN-CVE-2026-89092glibc@2.41-12+deb13u3no fix listed
LowUBUNTU-CVE-2026-18374glibc@2.39-0ubuntu8.8no fix listed
LowDEBIAN-CVE-2026-16742systemd@257.13-1~deb13u1no fix listed
LowUBUNTU-CVE-2026-19499glibc@2.39-0ubuntu8.82.39-0ubuntu8.9
LowUBUNTU-CVE-2026-19542glibc@2.39-0ubuntu8.82.39-0ubuntu8.9
LowUBUNTU-CVE-2026-53612util-linux@2.39.3-9ubuntu6.52.39.3-9ubuntu6.6
LowUBUNTU-CVE-2026-53613util-linux@2.39.3-9ubuntu6.52.39.3-9ubuntu6.6
LowUBUNTU-CVE-2026-53614util-linux@2.39.3-9ubuntu6.52.39.3-9ubuntu6.6
LowUBUNTU-CVE-2026-53615util-linux@2.39.3-9ubuntu6.52.39.3-9ubuntu6.6
LowUBUNTU-CVE-2026-77117glibc@2.39-0ubuntu8.82.39-0ubuntu8.9
LowUBUNTU-CVE-2026-80489glibc@2.39-0ubuntu8.82.39-0ubuntu8.9
LowALPINE-CVE-2026-34757libpng@1.6.55-r01.6.57-r0
LowALPINE-CVE-2026-14678postgresql18@18.4-r018.5-r0
LowALPINE-CVE-2026-18024postgresql18@18.4-r018.5-r0
LowALPINE-CVE-2026-6470postgresql18@18.4-r018.5-r0
LowGO-2026-5025golang.org/x/net@v0.40.00.55.0
LowGO-2026-4970stdlib@go1.25.101.25.12
LowUBUNTU-CVE-2026-53797rsync@3.2.7-1ubuntu1.5no fix listed
LowUBUNTU-CVE-2026-53800rsync@3.2.7-1ubuntu1.5no fix listed
LowGO-2026-5027golang.org/x/net@v0.40.00.55.0
LowGO-2026-5029golang.org/x/net@v0.40.00.55.0
LowGO-2026-5030golang.org/x/net@v0.40.00.55.0
LowUBUNTU-CVE-2026-42250bzip2@1.0.8-5.1build0.11.0.8-5.1ubuntu0.1
LowUBUNTU-CVE-2026-39113sqlite3@3.45.1-1ubuntu2.7no fix listed
LowALPINE-CVE-2026-14666postgresql18@18.4-r018.5-r0
LowGO-2026-4602stdlib@go1.24.61.25.8
LowUBUNTU-CVE-2026-60191mariadb@1:12.3.2+maria~ubu2404no fix listed
LowALPINE-CVE-2026-27456util-linux@2.41.2-r02.41.4-r0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.3.4latest2 days ago1.9.6001015716,952
1.3.36 days ago1.9.6001015716,952

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/helmforge/appwrite.svg)](https://charts.stackradar.io/charts/helmforge/appwrite)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.