drupal Helm chart

Name: drupal Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 14 Sept 2026

Production-ready Drupal CMS with seeded sites persistence, S3 backups, and safe horizontal scaling controls

Latest 1.2.13 2 days agoapp version 11.4.6 0Artifact Hub

drupal 1.2.13 deploys 2 container images: library/drupal and library/mysql. Across them, 386 findings — 1 critical, 0 high — 1 on CISA KEV. The highest contribution is GHSA-ghwc-95x2-682j in drupal/core 9.8.0, fixed in 10.4.10. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

3,8021044340

386 findings over 2 of 2 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
library/drupal×2	11.4.6-php8.5-apache-bookworm	1042280	3,339
library/mysql	9.7.2	00260	463

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

386 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2023-39616	aom@3.6.0-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-82209	curl@7.88.1-10+deb12u15	no fix listed
Low	DEBIAN-CVE-2026-66032	libssh2@1.10.0-3+b1	1.10.0-3+deb12u1
Low	GHSA-mf9v-mfxr-j63j	urllib3@2.6.3	2.7.0
Low	DEBIAN-CVE-2026-12087	perl@5.36.0-7+deb12u3	no fix listed
Low	DEBIAN-CVE-2025-1153	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2018-20673	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2023-50495	ncurses@6.4-4	no fix listed
Low	DEBIAN-CVE-2026-13608	curl@7.88.1-10+deb12u15	no fix listed
Low	DEBIAN-CVE-2026-63072	openssl@3.0.20-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2026-85091	zlib@1:1.2.13.dfsg-1	no fix listed
Low	DEBIAN-CVE-2023-1972	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-1179	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-80230	curl@7.88.1-10+deb12u15	no fix listed
Low	DEBIAN-CVE-2018-21232	re2c@3.0-2	no fix listed
Low	DEBIAN-CVE-2017-13716	binutils@2.40-2	no fix listed
Low	GHSA-2qph-q8xw-gv7q	drupal/core@9.8.0	10.3.13
Low	DEBIAN-CVE-2024-2236	libgcrypt20@1.10.1-3+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-54874	openssl@3.0.20-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2026-74860	libxml2@2.9.14+dfsg-1.3~deb12u6	no fix listed
Low	DEBIAN-CVE-2018-9996	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-69720	ncurses@6.4-4	no fix listed
Low	DEBIAN-CVE-2025-69650	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2021-32256	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-86145	pcre2@10.42-1	10.42-1+deb12u1
Low	DEBIAN-CVE-2025-1178	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-45186	expat@2.5.0-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-9538	perl@5.36.0-7+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-58050	libssh2@1.10.0-3+b1	1.10.0-3+deb12u1
Low	DEBIAN-CVE-2020-15719	openldap@2.5.13+dfsg-5	no fix listed
Low	DEBIAN-CVE-2026-56208	aom@3.6.0-1+deb12u2	3.6.0-1+deb12u3
Low	DEBIAN-CVE-2026-66034	libssh2@1.10.0-3+b1	1.10.0-3+deb12u1
Low	DEBIAN-CVE-2025-7458	sqlite3@3.40.1-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2025-15661	libssh2@1.10.0-3+b1	1.10.0-3+deb12u1
Low	DEBIAN-CVE-2026-54411	pam@1.5.2-6+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-42497	perl@5.36.0-7+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-41992	gzip@1.12-1	no fix listed
Low	DEBIAN-CVE-2026-56211	aom@3.6.0-1+deb12u2	3.6.0-1+deb12u3
Low	DEBIAN-CVE-2026-12064	curl@7.88.1-10+deb12u15	no fix listed
Low	DEBIAN-CVE-2026-8932	curl@7.88.1-10+deb12u15	no fix listed
Low	GHSA-jwv3-5hgf-82ww	cryptography@46.0.5	49.0.0
Low	DEBIAN-CVE-2026-8286	curl@7.88.1-10+deb12u15	no fix listed
Low	GHSA-wf93-45jw-7689	pip@25.3	26.1.2
Low	DEBIAN-CVE-2026-75803	openssl@3.0.20-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2024-53589	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-58051	libssh2@1.10.0-3+b1	1.10.0-3+deb12u1
Low	DEBIAN-CVE-2026-48959	perl@5.36.0-7+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-5928	glibc@2.36-9+deb12u14	no fix listed
Low	DEBIAN-CVE-2025-66863	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-66865	binutils@2.40-2	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.2.13latest	2 days ago	11.4.6	1044340	3,802
1.2.12	4 days ago	11.4.5	111541,988	17,854

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/drupal.svg)](https://charts.stackradar.io/charts/helmforge/drupal)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.