StackRadar

netbird 1.0.10 Helm chart

helmforgeVerified publisher

Scored 14 Sept 2026

Self-hosted NetBird control plane for WireGuard overlay networks, identity-aware access, and device management

Version 1.0.10 2 days agoapp version 0.78.1 2Artifact Hub

netbird 1.0.10 deploys 4 container images: library/busybox, netbirdio/netbird-server, netbirdio/dashboard and library/postgres. Across them, 311 findings — 0 critical, 1 high. The highest contribution is GHSA-x4qr-2fvf-3mr5 in cryptography 3.3.2, fixed in 39.0.1.

Radar Score

2,9620141269

311 findings over 4 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
library/busybox1.37.000000
netbirdio/netbird-server0.78.100781751
netbirdio/dashboardv2.90.10011529585
library/postgres18.6-trixie00191591,626

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

270 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGHSA-4xh5-x5gv-qwphpip@20.3.425.3
LowDEBIAN-CVE-2026-5435glibc@2.41-12+deb13u3no fix listed
LowGHSA-h35f-9h28-mq5csetuptools@52.0.083.0.0
LowDEBIAN-CVE-2026-54369acl@2.3.2-2+b1no fix listed
LowUBUNTU-CVE-2026-7017perl@5.38.2-3.2ubuntu0.35.38.2-3.2ubuntu0.4
LowDEBIAN-CVE-2026-54371attr@1:2.5.2-3no fix listed
LowPYSEC-2026-3721pip@20.3.426.2
LowGHSA-mq26-g339-26xfpip@20.3.423.3
LowGHSA-qc2q-p7wx-3px3google.golang.org/grpc@v1.80.01.83.1
LowDEBIAN-CVE-2022-0563util-linux@2.41.5-0+deb13u1no fix listed
LowDEBIAN-CVE-2026-11979libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3no fix listed
LowDEBIAN-CVE-2026-86140libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3no fix listed
LowGHSA-hrxh-6v49-42gfgoogle.golang.org/grpc@v1.80.01.82.1
LowDEBIAN-CVE-2026-5704tar@1.35+dfsg-3.1no fix listed
LowGHSA-pq67-6m6q-mj2vurllib3@1.26.52.5.0
LowDEBIAN-CVE-2026-3184util-linux@2.41.5-0+deb13u1no fix listed
LowGHSA-c33w-24p9-8m24configobj@5.0.65.0.9
LowDEBIAN-CVE-2026-7010perl@5.40.1-65.40.1-6+deb13u1
LowUBUNTU-CVE-2026-19487perl@5.38.2-3.2ubuntu0.3no fix listed
LowGHSA-65pc-fj4g-8rjxidna@3.23.15
LowDEBIAN-CVE-2026-89158pcre2@10.46-1~deb13u110.46-1~deb13u2
LowGHSA-vp96-hxj8-p424pyopenssl@20.0.126.0.0
LowGHSA-x86f-5xw2-fm2rgithub.com/docker/docker@v28.0.1+incompatibleno fix listed
LowGHSA-9wx4-h78v-vm56requests@2.25.12.32.0
LowDEBIAN-CVE-2013-4392systemd@257.13-1~deb13u1no fix listed
LowUBUNTU-CVE-2026-78408util-linux@2.39.3-9ubuntu6.5no fix listed
LowGHSA-34rh-wp3j-6cxcgithub.com/pion/stun/v3@v3.1.03.1.5
LowUBUNTU-CVE-2026-41989libgcrypt20@1.10.3-2ubuntu0.11.12.0-2ubuntu0.1~Fips1~rc11
LowUBUNTU-CVE-2026-13595util-linux@2.39.3-9ubuntu6.52.39.3-9ubuntu6.6
LowGO-2026-4981stdlib@go1.24.61.25.10
LowDEBIAN-CVE-2023-31439systemd@257.13-1~deb13u1no fix listed
LowGO-2026-4977stdlib@go1.24.61.25.10
LowDEBIAN-CVE-2023-31437systemd@257.13-1~deb13u1no fix listed
LowGO-2026-4986stdlib@go1.24.61.25.10
LowGO-2026-4918stdlib@go1.24.61.25.10
LowGO-2026-4337stdlib@go1.24.61.24.13
LowGHSA-qccp-gfcp-xxvcurllib3@1.26.52.7.0
LowDEBIAN-CVE-2023-31438systemd@257.13-1~deb13u1no fix listed
LowGO-2026-4601stdlib@go1.24.61.25.8
LowUBUNTU-CVE-2026-78410util-linux@2.39.3-9ubuntu6.5no fix listed
LowDEBIAN-CVE-2026-89161pcre2@10.46-1~deb13u110.46-1~deb13u2
LowGO-2026-5026stdlib@go1.24.61.25.13
LowDEBIAN-CVE-2026-86142libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3no fix listed
LowUBUNTU-CVE-2026-42014gnutls28@3.8.3-1.1ubuntu3.63.8.3-1.1ubuntu3.6+Fips1.2
LowGO-2026-4342stdlib@go1.24.61.24.12
LowUBUNTU-CVE-2026-78409util-linux@2.39.3-9ubuntu6.5no fix listed
LowGHSA-2v4p-qf9q-27wjgoogle.golang.org/grpc@v1.80.01.82.2
LowGHSA-537c-gmf6-5ccfcryptography@3.3.248.0.1
LowGHSA-g4mx-q9vg-27p4urllib3@1.26.51.26.18
LowGO-2026-4870stdlib@go1.24.61.25.9

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.10latest2 days ago0.78.101412692,962
1.0.94 days ago0.77.101442813,116

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/helmforge/netbird.svg)](https://charts.stackradar.io/charts/helmforge/netbird)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 11 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.