guacamole 1.6.3 Helm chart

Name: guacamole Helm chart 1.6.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 20 Oct 2026

Apache Guacamole clientless remote desktop gateway with guacd, PostgreSQL or MySQL, OIDC/SAML SSO, and S3 backup

Version 1.6.3 todayapp version 1.6.0 1Artifact Hub

guacamole 1.6.3 deploys 5 container images: library/busybox, guacamole/guacamole, guacamole/guacd and library/postgres. Across them, 979 findings — 3 critical, 2 high. The highest contribution is UBUNTU-CVE-2025-6965 in sqlite3 3.45.1-1ubuntu2.3, fixed in 3.45.1-1ubuntu2.4. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

10,75932169804

979 findings over 5 of 5 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox×2	1.37	0000	0
guacamole/guacamole×2	1.6.0	2056371	4,276
guacamole/guacd	1.6.0	0010	23
library/postgres	18.6-trixie	0020155	1,815
library/postgres	17.5-bookworm	2188284	4,581

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

626 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-0965	libssh@0.10.6-2build2	0.10.6-2ubuntu0.3
Low	GHSA-p47f-322f-whfh	logback-core@1.3.15	1.5.33
Low	DEBIAN-CVE-2025-6170	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u3
Low	DEBIAN-CVE-2026-40228	systemd@252.38-1~deb12u1	no fix listed
Low	UBUNTU-CVE-2025-66382	expat@2.6.1-2ubuntu0.3	no fix listed
Low	UBUNTU-CVE-2026-24515	expat@2.6.1-2ubuntu0.3	2.6.1-2ubuntu0.4
Low	UBUNTU-CVE-2026-32778	expat@2.6.1-2ubuntu0.3	2.6.1-2ubuntu0.5
Low	DEBIAN-CVE-2026-57062	gnupg2@2.2.40-1.1	no fix listed
Low	DEBIAN-CVE-2026-53910	diffutils@1:3.8-4	no fix listed
Low	UBUNTU-CVE-2026-0967	libssh@0.10.6-2build2	0.10.6-2ubuntu0.3
Low	UBUNTU-CVE-2025-66861	binutils@2.42-4ubuntu2.5	no fix listed
Low	GO-2026-4602	stdlib@go1.18.2	1.25.8
Low	DEBIAN-CVE-2026-5958	sed@4.9-1	4.9-1+deb12u1
Low	DEBIAN-CVE-2026-6368	glibc@2.36-9+deb12u10	no fix listed
Low	GHSA-qqpg-mvqg-649v	logback-core@1.3.15	1.5.25
Low	UBUNTU-CVE-2026-86409	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.16
Low	UBUNTU-CVE-2026-86414	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.16
Low	UBUNTU-CVE-2026-87862	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.16
Low	UBUNTU-CVE-2026-87863	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.16
Low	UBUNTU-CVE-2026-87864	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.16
Low	UBUNTU-CVE-2026-92388	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.16
Low	UBUNTU-CVE-2026-92389	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.16
Low	UBUNTU-CVE-2026-92391	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.16
Low	UBUNTU-CVE-2026-94266	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.16
Low	GHSA-v6cf-mv9h-c8mc	bc-fips@2.1.0	2.1.1
None	GHSA-g6rx-6wfx-gj74	bc-fips@2.1.0	2.1.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.6.3latest	today	1.6.0	32169804	10,759
1.5.3	2 days ago	1.6.0	32169804	10,759
1.5.2	24 days ago	1.6.0	32167812	10,697

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/guacamole.svg)](https://charts.stackradar.io/charts/helmforge/guacamole)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.