pimcore 2.0.2 Helm chart

Name: pimcore Helm chart 2.0.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 27 Sept 2026

Pimcore data and experience management platform with PHP-FPM, Messenger workers, and maintenance automation

Version 2.0.2 todaydeploys tag v0.24.2 0Artifact Hub

pimcore 2.0.2 deploys 6 container images: dunglas/mercure, pimcore/pimcore, library/busybox, library/nginx and 2 more. Across the 5 measured, 306 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-45447 in openssl 3.5.6-r0, fixed in 3.5.7-r0. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

3,1190053253

306 findings over 5 of 6 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
dunglas/mercure	v0.24.2	002577	1,154
pimcore/pimcore×2	php8.5.9-max-v5.2-hardened	—	not yet scanned
library/busybox	1.37.0	0000	0
library/nginx	1.30.4-alpine3.24	0005	51
library/mariadb	12.3.3	0022167	1,752
library/rabbitmq	4.3.5-alpine	0064	162

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

237 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-88815	libdbi-perl@1.643-4ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2026-88816	libdbi-perl@1.643-4ubuntu0.1	no fix listed
Low	ALPINE-CVE-2026-42768	openssl@3.5.6-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-89160	pcre2@10.42-4ubuntu2.1	no fix listed
Low	ALPINE-CVE-2026-42770	openssl@3.5.6-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-53797	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	UBUNTU-CVE-2026-53800	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	UBUNTU-CVE-2026-39113	sqlite3@3.45.1-1ubuntu2.7	3.45.1-1ubuntu2.8
Low	UBUNTU-CVE-2026-18508	tar@1.35+dfsg-3ubuntu0.4	no fix listed
Low	GO-2026-4869	stdlib@go1.24.6	1.25.9
Low	GO-2026-4970	stdlib@go1.24.6	1.25.12
Low	UBUNTU-CVE-2026-41990	libgcrypt20@1.10.3-2ubuntu0.2	1.12.0-2ubuntu0.1~Fips1~rc11
Low	GO-2026-4864	stdlib@go1.24.6	1.25.9
Low	UBUNTU-CVE-2022-3219	gnupg2@2.4.4-2ubuntu17.6	no fix listed
Low	GO-2026-5024	golang.org/x/sys@v0.1.0	0.44.0
Low	UBUNTU-CVE-2026-60191	mariadb@1:12.3.3+maria~ubu2404	no fix listed
Low	GO-2026-4602	stdlib@go1.24.6	1.25.8
Low	UBUNTU-CVE-2026-89156	pcre2@10.42-4ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2026-18477	tar@1.35+dfsg-3ubuntu0.4	no fix listed
Low	GO-2026-5841	github.com/klauspost/compress@v1.18.6	1.18.7
Low	GO-2026-5932	golang.org/x/crypto@v0.52.0	no fix listed
Low	GO-2026-6061	google.golang.org/grpc@v1.81.1	1.82.1
Low	GO-2026-6094	github.com/google/cel-go@v0.28.1	0.30.0
Low	UBUNTU-CVE-2026-61081	mariadb@1:12.3.3+maria~ubu2404	no fix listed
Low	UBUNTU-CVE-2026-95818	glibc@2.39-0ubuntu8.9	no fix listed
Low	UBUNTU-CVE-2025-1376	elfutils@0.190-1.1ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2026-89162	pcre2@10.42-4ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2026-40228	systemd@255.4-1ubuntu8.17	no fix listed
Low	UBUNTU-CVE-2026-61096	mariadb@1:12.3.3+maria~ubu2404	no fix listed
Low	UBUNTU-CVE-2026-60190	mariadb@1:12.3.3+maria~ubu2404	no fix listed
Low	UBUNTU-CVE-2026-18743	popt@1.19+dfsg-1build1	no fix listed
Low	UBUNTU-CVE-2026-18739	popt@1.19+dfsg-1build1	no fix listed
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0	1.45.0
Low	UBUNTU-CVE-2026-18839	popt@1.19+dfsg-1build1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.0.2latest	today	v0.24.2	0053253	3,119
2.0.1	2 days ago	v0.24.2	0053253	3,119
2.0.0	19 days ago	v0.24.2	0057285	3,451

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/pimcore.svg)](https://charts.stackradar.io/charts/helmforge/pimcore)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.