pimcore 2.0.2 Helm chart

Name: pimcore Helm chart 2.0.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 27 Sept 2026

Pimcore data and experience management platform with PHP-FPM, Messenger workers, and maintenance automation

Version 2.0.2 todaydeploys tag v0.24.2 0Artifact Hub

pimcore 2.0.2 deploys 6 container images: dunglas/mercure, pimcore/pimcore, library/busybox, library/nginx and 2 more. Across the 5 measured, 306 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-45447 in openssl 3.5.6-r0, fixed in 3.5.7-r0. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

3,1190053253

306 findings over 5 of 6 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
dunglas/mercure	v0.24.2	002577	1,154
pimcore/pimcore×2	php8.5.9-max-v5.2-hardened	—	not yet scanned
library/busybox	1.37.0	0000	0
library/nginx	1.30.4-alpine3.24	0005	51
library/mariadb	12.3.3	0022167	1,752
library/rabbitmq	4.3.5-alpine	0064	162

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

284 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2026-45447	openssl@3.5.6-r0	3.5.7-r0
Medium	UBUNTU-CVE-2026-49261	mariadb@1:12.3.3+maria~ubu2404	no fix listed
Medium	ALPINE-CVE-2026-63073	openssl@3.5.6-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-8925	curl@8.17.0-r1	8.22.0-r0
Medium	UBUNTU-CVE-2016-20013	glibc@2.39-0ubuntu8.9	no fix listed
Medium	UBUNTU-CVE-2026-48165	mariadb@1:12.3.3+maria~ubu2404	no fix listed
Medium	ALPINE-CVE-2026-34182	openssl@3.5.6-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-63076	openssl@3.5.6-r0	3.5.8-r0
Medium	UBUNTU-CVE-2026-44172	mariadb@1:12.3.3+maria~ubu2404	no fix listed
Medium	ALPINE-CVE-2026-19931	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-18798	openssl@3.5.6-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-11856	curl@8.17.0-r1	8.22.0-r0
Medium	UBUNTU-CVE-2026-73193	libdbi-perl@1.643-4ubuntu0.1	no fix listed
Medium	UBUNTU-CVE-2026-48163	mariadb@1:12.3.3+maria~ubu2404	no fix listed
Medium	ALPINE-CVE-2026-10536	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-34180	openssl@3.5.6-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-54874	openssl@3.5.6-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-9079	curl@8.17.0-r1	8.22.0-r0
Medium	UBUNTU-CVE-2026-53791	rsync@3.2.7-1ubuntu1.5	no fix listed
Medium	UBUNTU-CVE-2026-5260	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Medium	ALPINE-CVE-2026-8924	curl@8.17.0-r1	8.22.0-r0
Medium	UBUNTU-CVE-2026-44168	mariadb@1:12.3.3+maria~ubu2404	no fix listed
Medium	UBUNTU-CVE-2026-32710	mariadb@1:12.3.3+maria~ubu2404	no fix listed
Medium	UBUNTU-CVE-2026-60082	libdbi-perl@1.643-4ubuntu0.1	no fix listed
Medium	UBUNTU-CVE-2026-42009	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Medium	UBUNTU-CVE-2026-33846	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Medium	ALPINE-CVE-2026-34183	openssl@3.5.6-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-18924	curl@8.17.0-r1	8.22.0-r0
Medium	UBUNTU-CVE-2026-70461	rsync@3.2.7-1ubuntu1.5	no fix listed
Medium	ALPINE-CVE-2026-14457	openssl@3.5.6-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-63072	openssl@3.5.6-r0	3.5.8-r0
Medium	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.81.1	1.82.2
Medium	ALPINE-CVE-2026-9076	openssl@3.5.6-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-3805	curl@8.17.0-r1	8.19.0-r0
Medium	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.81.1	1.83.1
Medium	UBUNTU-CVE-2026-78030	libdbi-perl@1.643-4ubuntu0.1	no fix listed
Medium	UBUNTU-CVE-2026-14739	libdbi-perl@1.643-4ubuntu0.1	no fix listed
Medium	ALPINE-CVE-2026-80231	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-8927	curl@8.17.0-r1	8.22.0-r0
Medium	UBUNTU-CVE-2026-33845	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Medium	ALPINE-CVE-2026-7383	openssl@3.5.6-r0	3.5.7-r0
Medium	UBUNTU-CVE-2026-53790	rsync@3.2.7-1ubuntu1.5	no fix listed
Medium	UBUNTU-CVE-2026-73194	libdbi-perl@1.643-4ubuntu0.1	no fix listed
Medium	UBUNTU-CVE-2026-15043	libdbi-perl@1.643-4ubuntu0.1	no fix listed
Medium	ALPINE-CVE-2026-33630	c-ares@1.34.6-r0	1.34.8-r0
Medium	UBUNTU-CVE-2026-14380	libdbi-perl@1.643-4ubuntu0.1	no fix listed
Medium	UBUNTU-CVE-2026-42010	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	ALPINE-CVE-2026-8926	curl@8.17.0-r1	8.22.0-r0
Low	UBUNTU-CVE-2026-70464	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	UBUNTU-CVE-2026-70455	rsync@3.2.7-1ubuntu1.5	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.0.2latest	today	v0.24.2	0053253	3,119
2.0.1	2 days ago	v0.24.2	0053253	3,119
2.0.0	19 days ago	v0.24.2	0057285	3,451

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/pimcore.svg)](https://charts.stackradar.io/charts/helmforge/pimcore)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.