pimcore Helm chart
helmforgeVerified publisherScored 14 Sept 2026
Pimcore data and experience management platform with PHP-FPM, Messenger workers, and maintenance automation
Latest 2.0.1 2 days agodeploys tag v0.24.2 0Artifact Hub
pimcore 2.0.1 deploys 6 container images: dunglas/mercure, pimcore/pimcore, library/busybox, library/nginx and 2 more. Across the 5 measured, 321 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-45447 in openssl 3.5.6-r0, fixed in 3.5.7-r0. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| dunglas/ | v0.24.2 | 002076 | 1,098 |
| pimcore/ | php8.5.9-max-v5.2-hardened | — | not yet scanned |
| library/ | 1.37.0 | 0000 | 0 |
| library/ | 1.30.4-alpine3.24 | 0004 | 34 |
| library/ | 12.3.3 | 0018193 | 1,875 |
| library/ | 4.3.5-alpine | 0046 | 149 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Medium findings
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | ALPINE-CVE-2026-45447 | openssl | 3.5.7-r0 |
| Medium | UBUNTU-CVE-2026-49261 | mariadb | no fix listed |
| Medium | ALPINE-CVE-2026-19931 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-9079 | curl | 8.22.0-r0 |
| Medium | UBUNTU-CVE-2016-20013 | glibc | no fix listed |
| Medium | ALPINE-CVE-2026-63073 | openssl | 3.5.8-r0 |
| Medium | ALPINE-CVE-2026-10536 | curl | 8.22.0-r0 |
| Medium | UBUNTU-CVE-2026-48165 | mariadb | no fix listed |
| Medium | ALPINE-CVE-2026-18924 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-11856 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-8925 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-18798 | openssl | 3.5.8-r0 |
| Medium | UBUNTU-CVE-2026-42009 | gnutls28 | 3.8.3-1.1ubuntu3.6+Fips1.2 |
| Medium | ALPINE-CVE-2026-63076 | openssl | 3.5.8-r0 |
| Medium | UBUNTU-CVE-2026-63076 | openssl | 3.0.13-0ubuntu3.15 |
| Medium | UBUNTU-CVE-2026-33846 | gnutls28 | 3.8.3-1.1ubuntu3.6+Fips1.2 |
| Medium | UBUNTU-CVE-2026-32710 | mariadb | no fix listed |
| Medium | ALPINE-CVE-2026-42764 | openssl | 3.5.7-r0 |
| Medium | UBUNTU-CVE-2026-48163 | mariadb | no fix listed |
| Medium | ALPINE-CVE-2026-34182 | openssl | 3.5.7-r0 |
| Medium | UBUNTU-CVE-2026-73193 | libdbi-perl | no fix listed |
| Medium | UBUNTU-CVE-2026-44172 | mariadb | no fix listed |
| Medium | ALPINE-CVE-2026-34183 | openssl | 3.5.7-r0 |
| Medium | ALPINE-CVE-2026-34180 | openssl | 3.5.7-r0 |
| Medium | ALPINE-CVE-2026-7383 | openssl | 3.5.7-r0 |
| Medium | ALPINE-CVE-2026-8924 | curl | 8.22.0-r0 |
| Medium | ALPINE-CVE-2026-14457 | openssl | 3.5.8-r0 |
| Medium | UBUNTU-CVE-2026-5260 | gnutls28 | 3.8.3-1.1ubuntu3.6+Fips1.2 |
| Medium | ALPINE-CVE-2026-80231 | curl | 8.22.0-r0 |
| Medium | UBUNTU-CVE-2026-14739 | libdbi-perl | no fix listed |
| Medium | ALPINE-CVE-2026-80229 | curl | 8.22.0-r0 |
| Medium | UBUNTU-CVE-2026-53791 | rsync | no fix listed |
| Medium | ALPINE-CVE-2026-8927 | curl | 8.22.0-r0 |
| Medium | UBUNTU-CVE-2026-42010 | gnutls28 | 3.8.3-1.1ubuntu3.6+Fips1.2 |
| Medium | UBUNTU-CVE-2026-73194 | libdbi-perl | no fix listed |
| Medium | UBUNTU-CVE-2026-15043 | libdbi-perl | no fix listed |
| Medium | UBUNTU-CVE-2026-14380 | libdbi-perl | no fix listed |
| Medium | UBUNTU-CVE-2026-33845 | gnutls28 | 3.8.3-1.1ubuntu3.6+Fips1.2 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 2.0.1latest | 2 days ago | v0.24.2 | 0042279 | 3,156 |
| 2.0.0 | 5 days ago | v0.24.2 | 0042279 | 3,156 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.