matomo 2.3.3 Helm chart

Name: matomo Helm chart 2.3.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 16 Oct 2026

Privacy-focused web analytics platform with MySQL and production archiving support

Version 2.3.3 todayapp version 5.14.0 1Artifact Hub

matomo 2.3.3 deploys 3 container images: library/busybox, library/matomo and library/mysql. Across them, 336 findings — 0 critical, 0 high. The highest contribution is DEBIAN-CVE-2018-6951 in patch 2.8-2, with no fix listed. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

3,2990033302

336 findings over 3 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.37	0000	0
library/matomo×3	5.14.0-apache	0026237	2,495
library/mysql	26.7.0	00765	804

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

336 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2026-4947	stdlib@go1.24.6	1.25.9
Low	DEBIAN-CVE-2026-56449	apache2@2.4.68-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-48005	apache2@2.4.68-1~deb13u1	no fix listed
Low	GO-2026-5037	stdlib@go1.24.6	1.25.11
Low	DEBIAN-CVE-2018-21232	re2c@4.1-1	no fix listed
Low	GO-2026-6603	stdlib@go1.24.6	1.26.9
Low	GO-2026-5972	stdlib@go1.24.6	1.25.13
Low	GO-2026-6088	stdlib@go1.24.6	1.25.13
Low	GO-2026-6089	stdlib@go1.24.6	1.25.13
Low	GO-2026-6090	stdlib@go1.24.6	1.25.13
Low	GO-2026-6611	stdlib@go1.24.6	1.26.9
Low	GHSA-wf93-45jw-7689	pip@25.3	26.1.2
Low	DEBIAN-CVE-2026-80229	curl@8.14.1-2+deb13u5	no fix listed
Low	GO-2026-5038	stdlib@go1.24.6	1.25.11
Low	GHSA-vxq7-64xx-v4gw	urllib3@2.7.0	2.8.0
Low	DEBIAN-CVE-2017-13716	binutils@2.44-3	no fix listed
Low	GO-2026-6218	stdlib@go1.24.6	1.25.13
Low	DEBIAN-CVE-2025-69650	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-73636	apache2@2.4.68-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2025-69720	ncurses@6.5+20250216-2	no fix listed
Low	DEBIAN-CVE-2026-63718	apache2@2.4.68-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-56153	apache2@2.4.68-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-59685	apache2@2.4.68-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2018-9996	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2021-32256	binutils@2.44-3	no fix listed
Low	GO-2026-4342	stdlib@go1.24.6	1.24.12
Low	DEBIAN-CVE-2026-82209	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-85091	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed
Low	DEBIAN-CVE-2026-63686	apache2@2.4.68-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-80255	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2025-1178	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-63045	apache2@2.4.68-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-46729	apache2@2.4.68-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-13608	curl@8.14.1-2+deb13u5	no fix listed
Low	GO-2025-4155	stdlib@go1.24.6	1.24.11
Low	DEBIAN-CVE-2026-9080	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-9538	perl@5.40.1-6+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-73637	apache2@2.4.68-1~deb13u1	no fix listed
Low	GO-2025-4014	stdlib@go1.24.6	1.24.8
Low	DEBIAN-CVE-2020-15719	openldap@2.6.10+dfsg-1	no fix listed
Low	GHSA-m2h6-j472-rp4c	cryptography@46.0.7	49.0.0
Low	DEBIAN-CVE-2026-9545	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-95210	gnutls28@3.8.9-3+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-82208	curl@8.14.1-2+deb13u5	no fix listed
Low	GO-2025-4007	stdlib@go1.24.6	1.24.9
Low	DEBIAN-CVE-2026-107708	krb5@1.21.3-5+deb13u1	no fix listed
Low	GO-2026-6608	stdlib@go1.24.6	1.26.9
Low	DEBIAN-CVE-2026-12064	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-8932	curl@8.14.1-2+deb13u5	no fix listed
Low	GO-2026-6607	stdlib@go1.24.6	1.26.9

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.3.3latest	today	5.14.0	0033302	3,299
2.3.2	2 days ago	5.14.0	0033302	3,299
2.3.0	19 days ago	5.13.0	0031243	2,791
2.2.0	1 month ago	5.13.0	0030271	2,826

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/matomo.svg)](https://charts.stackradar.io/charts/helmforge/matomo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.