StackRadar

netbird 1.0.12 Helm chart

helmforgeVerified publisher

Scored 17 Oct 2026

Self-hosted NetBird control plane for WireGuard overlay networks, identity-aware access, and device management

Version 1.0.12 todayapp version 0.80.0 2Artifact Hub

netbird 1.0.12 deploys 4 container images: library/busybox, netbirdio/netbird-server, netbirdio/dashboard and library/postgres. Across them, 317 findings — 0 critical, 1 high. The highest contribution is GHSA-x4qr-2fvf-3mr5 in cryptography 3.3.2, fixed in 39.0.1.

Radar Score

3,3820146270

317 findings over 4 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
library/busybox1.37.000000
netbirdio/netbird-server0.80.0001184946
netbirdio/dashboardv2.90.10011531620
library/postgres18.6-trixie00201551,816

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

274 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowDEBIAN-CVE-2026-95619gcc-14@14.2.0-19no fix listed
LowGHSA-pxq6-2prw-chj9github.com/docker/docker@v28.0.1+incompatibleno fix listed
LowGO-2025-4013stdlib@go1.24.61.24.8
LowDEBIAN-CVE-2026-6791glibc@2.41-12+deb13u4no fix listed
LowGO-2026-6609stdlib@go1.26.71.26.9
LowUBUNTU-CVE-2026-88647gnutls28@3.8.3-1.1ubuntu3.6no fix listed
LowGHSA-9f3f-wv7r-qc8rgithub.com/pion/dtls/v3@v3.0.93.0.11
LowGHSA-c5q2-7r4c-mv6ggopkg.in/square/go-jose.v2@v2.6.0no fix listed
LowDEBIAN-CVE-2026-5435glibc@2.41-12+deb13u4no fix listed
LowDEBIAN-CVE-2026-107778krb5@1.21.3-5+deb13u1no fix listed
LowGO-2026-4946stdlib@go1.24.61.25.9
LowGHSA-9hjg-9r4m-mvj7requests@2.25.12.32.4
LowDEBIAN-CVE-2025-70873sqlite3@3.46.1-7+deb13u2no fix listed
LowUBUNTU-CVE-2026-42015gnutls28@3.8.3-1.1ubuntu3.63.8.3-1.1ubuntu3.6+Fips1.2
LowDEBIAN-CVE-2026-19499glibc@2.41-12+deb13u4no fix listed
LowGHSA-wg4g-wm44-ch5jgithub.com/pion/dtls/v3@v3.0.93.1.4
LowGO-2026-6613stdlib@go1.26.71.26.9
LowDEBIAN-CVE-2026-76642util-linux@2.41.5-0+deb13u1no fix listed
LowDEBIAN-CVE-2025-8941pam@1.7.0-5no fix listed
LowGO-2026-6605stdlib@go1.26.71.26.9
LowDEBIAN-CVE-2021-45346sqlite3@3.46.1-7+deb13u2no fix listed
LowGO-2026-6610golang.org/x/net@v0.58.00.60.0
LowGO-2026-6610stdlib@go1.26.71.26.9
LowGO-2026-6180golang.org/x/mod@v0.39.00.40.0
LowDEBIAN-CVE-2026-6238glibc@2.41-12+deb13u4no fix listed
LowDEBIAN-CVE-2024-26458krb5@1.21.3-5+deb13u1no fix listed
LowUBUNTU-CVE-2026-95209gnutls28@3.8.3-1.1ubuntu3.6no fix listed
LowUBUNTU-CVE-2016-2781coreutils@9.4-3ubuntu6.3no fix listed
LowDEBIAN-CVE-2026-107161cyrus-sasl2@2.1.28+dfsg1-9no fix listed
LowGO-2026-4887github.com/docker/docker@v28.0.1+incompatibleno fix listed
LowGO-2026-4970stdlib@go1.24.61.25.12
LowGHSA-vp96-hxj8-p424pyopenssl@20.0.126.0.0
LowGHSA-34jh-p97f-mpxfurllib3@1.26.51.26.19
LowGHSA-4xh5-x5gv-qwphpip@20.3.425.3
LowGHSA-34rh-wp3j-6cxcgithub.com/pion/stun/v3@v3.1.03.1.5
LowUBUNTU-CVE-2026-95184gnutls28@3.8.3-1.1ubuntu3.6no fix listed
LowGO-2025-4012stdlib@go1.24.61.24.8
LowUBUNTU-CVE-2026-103111pcre2@10.42-4ubuntu2.1no fix listed
LowGHSA-h35f-9h28-mq5csetuptools@52.0.083.0.0
LowUBUNTU-CVE-2026-78408util-linux@2.39.3-9ubuntu6.6no fix listed
LowDEBIAN-CVE-2026-54369acl@2.3.2-2+b1no fix listed
LowGHSA-8988-9cw3-xx77urllib3@1.26.52.8.0
LowGO-2026-4980stdlib@go1.24.61.25.10
LowDEBIAN-CVE-2026-86144libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3no fix listed
LowDEBIAN-CVE-2026-54371attr@1:2.5.2-3no fix listed
LowDEBIAN-CVE-2026-102010gcc-14@14.2.0-19no fix listed
LowGO-2025-4011stdlib@go1.24.61.24.8
LowGO-2025-4015stdlib@go1.24.61.24.8
LowUBUNTU-CVE-2026-67693gnutls28@3.8.3-1.1ubuntu3.6no fix listed
LowPYSEC-2026-3721pip@20.3.426.2

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.12latesttoday0.80.001462703,382
1.0.11yesterday0.79.001462773,426
1.0.1021 days ago0.78.101442923,442
1.0.91 month ago0.77.101493043,440

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/helmforge/netbird.svg)](https://charts.stackradar.io/charts/helmforge/netbird)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 17 Oct 2026 · scanned 17 Oct 2026 · advisories as of 17 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.