matomo 2.3.3 Helm chart

Name: matomo Helm chart 2.3.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 16 Oct 2026

Privacy-focused web analytics platform with MySQL and production archiving support

Version 2.3.3 todayapp version 5.14.0 1Artifact Hub

matomo 2.3.3 deploys 3 container images: library/busybox, library/matomo and library/mysql. Across them, 336 findings — 0 critical, 0 high. The highest contribution is DEBIAN-CVE-2018-6951 in patch 2.8-2, with no fix listed. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

3,2990033302

336 findings over 3 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.37	0000	0
library/matomo×3	5.14.0-apache	0026237	2,495
library/mysql	26.7.0	00765	804

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

336 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-jwv3-5hgf-82ww	cryptography@46.0.7	49.0.0
Low	DEBIAN-CVE-2026-95619	gcc-14@14.2.0-19	no fix listed
Low	DEBIAN-CVE-2026-8286	curl@8.14.1-2+deb13u5	8.14.1-2+deb13u7
Low	DEBIAN-CVE-2026-47360	apache2@2.4.68-1~deb13u1	no fix listed
Low	GO-2025-4013	stdlib@go1.24.6	1.24.8
Low	DEBIAN-CVE-2026-6791	glibc@2.41-12+deb13u4	no fix listed
Low	GO-2026-6609	stdlib@go1.24.6	1.26.9
Low	DEBIAN-CVE-2026-88647	gnutls28@3.8.9-3+deb13u4	no fix listed
Low	DEBIAN-CVE-2025-66863	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-66865	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-80230	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2025-66862	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-5435	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2008-0456	apache2@2.4.68-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-107778	krb5@1.21.3-5+deb13u1	no fix listed
Low	GHSA-g6cj-pr64-35w5	cryptography@46.0.7	50.0.0
Low	GO-2026-4946	stdlib@go1.24.6	1.25.9
Low	DEBIAN-CVE-2025-7545	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-70873	sqlite3@3.46.1-7+deb13u2	no fix listed
Low	DEBIAN-CVE-2025-5245	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-19499	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2025-5244	binutils@2.44-3	no fix listed
Low	GO-2026-6613	stdlib@go1.24.6	1.26.9
Low	DEBIAN-CVE-2026-76642	util-linux@2.41.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-9547	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2025-8941	pam@1.7.0-5	no fix listed
Low	DEBIAN-CVE-2025-66866	binutils@2.44-3	no fix listed
Low	GO-2026-6605	stdlib@go1.24.6	1.26.9
Low	DEBIAN-CVE-2021-45346	sqlite3@3.46.1-7+deb13u2	no fix listed
Low	GO-2026-6610	stdlib@go1.24.6	1.26.9
Low	DEBIAN-CVE-2021-45261	patch@2.8-2	no fix listed
Low	DEBIAN-CVE-2026-6238	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2024-26458	krb5@1.21.3-5+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-76956	expat@2.8.3-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2025-11083	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-11082	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-92392	curl@8.14.1-2+deb13u5	8.14.1-2+deb13u7
Low	DEBIAN-CVE-2026-95209	gnutls28@3.8.9-3+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-107161	cyrus-sasl2@2.1.28+dfsg1-9	no fix listed
Low	DEBIAN-CVE-2025-69649	binutils@2.44-3	no fix listed
Low	GO-2026-4970	stdlib@go1.24.6	1.25.12
Low	DEBIAN-CVE-2025-66864	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-8458	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2025-1147	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-7546	binutils@2.44-3	no fix listed
Low	GHSA-gh4c-6fx4-qh6g	urllib3@2.7.0	2.8.0
Low	DEBIAN-CVE-2026-95184	gnutls28@3.8.9-3+deb13u4	no fix listed
Low	GO-2025-4012	stdlib@go1.24.6	1.24.8
Low	DEBIAN-CVE-2026-6846	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-78408	util-linux@2.41.5-0+deb13u1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.3.3latest	today	5.14.0	0033302	3,299
2.3.2	2 days ago	5.14.0	0033302	3,299
2.3.0	19 days ago	5.13.0	0031243	2,791
2.2.0	1 month ago	5.13.0	0030271	2,826

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/matomo.svg)](https://charts.stackradar.io/charts/helmforge/matomo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.