appwrite 1.3.4 Helm chart

Name: appwrite Helm chart 1.3.4: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 14 Sept 2026

Appwrite self-hosted backend-as-a-service platform with MariaDB and Redis

Version 1.3.4 2 days agoapp version 1.9.6 0Artifact Hub

appwrite 1.3.4 deploys 5 container images: library/busybox, appwrite/appwrite, appwrite/console, library/mariadb and 1 more. Across them, 672 findings — 0 critical, 0 high. The highest contribution is GHSA-5cgq-3rg8-m6cv in golang.org/x/crypto v0.38.0, fixed in 0.52.0. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

6,95200101571

672 findings over 5 of 5 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox×36	1.37	0000	0
appwrite/appwrite×18	1.9.6	0044209	2,801
appwrite/console	8.7.38	002784	1,321
library/mariadb	12.3.3	0018193	1,875
library/redis	8.10.1	001285	955

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

537 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-4786	python3@3.12.13-r0	3.12.14-r0
Low	ALPINE-CVE-2025-14524	curl@8.17.0-r1	8.18.0-r0
Low	DEBIAN-CVE-2026-6238	glibc@2.41-12+deb13u3	no fix listed
Low	UBUNTU-CVE-2026-53789	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	UBUNTU-CVE-2026-70454	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	GHSA-g6cj-pr64-35w5	cryptography@46.0.7	50.0.0
Low	ALPINE-CVE-2026-34181	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-70462	rsync@3.4.3-r0	3.5.0-r0
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.38.0	0.52.0
Low	DEBIAN-CVE-2026-5435	glibc@2.41-12+deb13u3	no fix listed
Low	GHSA-h35f-9h28-mq5c	setuptools@80.9.0	83.0.0
Low	DEBIAN-CVE-2026-54369	acl@2.3.2-2+b1	no fix listed
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.40.0	0.55.0
Low	ALPINE-CVE-2026-53788	rsync@3.4.3-r0	3.5.0-r0
Low	UBUNTU-CVE-2026-7017	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
Low	ALPINE-CVE-2026-40200	musl@1.2.5-r21	1.2.5-r23
Low	ALPINE-CVE-2026-32739	libheif@1.21.2-r0	1.23.0-r0
Low	GHSA-jpcc-p29g-p8mq	github.com/containerd/containerd/v2@v2.1.4	2.1.9
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.2-3	no fix listed
Low	UBUNTU-CVE-2026-53786	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	UBUNTU-CVE-2026-53792	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	UBUNTU-CVE-2026-53784	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	UBUNTU-CVE-2026-53802	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.38.0	0.45.0
Low	ALPINE-CVE-2026-70454	rsync@3.4.3-r0	3.5.0-r0
Low	UBUNTU-CVE-2026-34303	mariadb@1:12.3.3+maria~ubu2404	no fix listed
Low	UBUNTU-CVE-2025-1352	elfutils@0.190-1.1ubuntu0.1	no fix listed
Low	ALPINE-CVE-2026-32738	libheif@1.21.2-r0	1.23.0-r0
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.74.2	1.83.1
Low	UBUNTU-CVE-2026-44173	mariadb@1:12.3.3+maria~ubu2404	no fix listed
Low	GHSA-fqw6-gf59-qr4w	github.com/containerd/containerd/v2@v2.1.4	2.2.4
Low	ALPINE-CVE-2026-6429	curl@8.19.0-r0	8.20.0-r0
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.38.0	0.52.0
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.38.0	0.45.0
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.38.0	0.52.0
Low	UBUNTU-CVE-2026-21968	mariadb@1:12.3.3+maria~ubu2404	no fix listed
Low	UBUNTU-CVE-2026-53788	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	UBUNTU-CVE-2026-15392	libdbi-perl@1.643-4ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2026-47064	mariadb@1:12.3.3+maria~ubu2404	no fix listed
Low	ALPINE-CVE-2026-1965	curl@8.17.0-r1	8.19.0-r0
Low	UBUNTU-CVE-2026-70462	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	DEBIAN-CVE-2022-0563	util-linux@2.41.5-0+deb13u1	no fix listed
Low	UBUNTU-CVE-2026-35549	mariadb@1:12.3.3+maria~ubu2404	no fix listed
Low	ALPINE-CVE-2026-7168	curl@8.19.0-r0	8.20.0-r0
Low	UBUNTU-CVE-2026-53785	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.74.2	1.82.1
Low	ALPINE-CVE-2026-3783	curl@8.17.0-r1	8.19.0-r0
Low	ALPINE-CVE-2026-4873	curl@8.19.0-r0	8.20.0-r0
Low	ALPINE-CVE-2026-34743	xz@5.8.2-r0	5.8.3-r0
Low	DEBIAN-CVE-2026-5704	tar@1.35+dfsg-3.1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.3.4latest	2 days ago	1.9.6	00101571	6,952
1.3.3	6 days ago	1.9.6	00101571	6,952

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/appwrite.svg)](https://charts.stackradar.io/charts/helmforge/appwrite)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.