umami 2.3.4 Helm chart

Name: umami Helm chart 2.3.4: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 27 Sept 2026

Umami privacy-first web analytics with PostgreSQL, Gateway API, External Secrets, backups, and production controls

Version 2.3.4 todayapp version 3.4.0 3Artifact Hub

umami 2.3.4 deploys 3 container images: library/busybox, ghcr.io/umami-software/umami and library/postgres. Across them, 160 findings — 0 critical, 0 high. The highest contribution is DEBIAN-CVE-2019-1010022 in glibc 2.41-12+deb13u4, with no fix listed. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

1,5070020140

160 findings over 3 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.37	0000	0
ghcr.io/umami-software/umami	3.4.0	0067	191
library/postgres	18.6-trixie	0014133	1,316

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

160 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	DEBIAN-CVE-2019-1010022	glibc@2.41-12+deb13u4	no fix listed
Medium	DEBIAN-CVE-2017-17740	openldap@2.6.10+dfsg-1	no fix listed
Medium	DEBIAN-CVE-2018-20796	glibc@2.41-12+deb13u4	no fix listed
Medium	DEBIAN-CVE-2015-3276	openldap@2.6.10+dfsg-1	no fix listed
Medium	DEBIAN-CVE-2019-1010023	glibc@2.41-12+deb13u4	no fix listed
Medium	ALPINE-CVE-2026-63073	openssl@3.5.7-r0	3.5.8-r0
Medium	DEBIAN-CVE-2019-9192	glibc@2.41-12+deb13u4	no fix listed
Medium	DEBIAN-CVE-2018-5709	krb5@1.21.3-5+deb13u1	no fix listed
Medium	ALPINE-CVE-2026-63076	openssl@3.5.7-r0	3.5.8-r0
Medium	DEBIAN-CVE-2018-6829	libgcrypt20@1.11.0-7+deb13u1	no fix listed
Medium	ALPINE-CVE-2026-18798	openssl@3.5.7-r0	3.5.8-r0
Medium	DEBIAN-CVE-2011-3389	gnutls28@3.8.9-3+deb13u4	no fix listed
Medium	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Medium	DEBIAN-CVE-2024-26461	krb5@1.21.3-5+deb13u1	no fix listed
Medium	DEBIAN-CVE-2019-1010024	glibc@2.41-12+deb13u4	no fix listed
Medium	ALPINE-CVE-2026-14457	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-63072	openssl@3.5.7-r0	3.5.8-r0
Medium	DEBIAN-CVE-2015-9019	libxslt@1.1.35-1.2+deb13u3	no fix listed
Medium	DEBIAN-CVE-2026-85091	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed
Medium	DEBIAN-CVE-2019-1010025	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-6653	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-ggr8-5vv4-36mx	deepmerge-ts@7.1.5	8.0.0
Low	DEBIAN-CVE-2026-54411	pam@1.7.0-5	no fix listed
Low	DEBIAN-CVE-2026-82560	perl@5.40.1-6+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-6791	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-9538	perl@5.40.1-6+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-74860	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	DEBIAN-CVE-2024-2236	libgcrypt20@1.11.0-7+deb13u1	no fix listed
Low	DEBIAN-CVE-2025-69720	ncurses@6.5+20250216-2	no fix listed
Low	DEBIAN-CVE-2026-24882	gnupg2@2.4.7-21+deb13u1+b5	no fix listed
Low	DEBIAN-CVE-2020-15719	openldap@2.6.10+dfsg-1	no fix listed
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0
Low	DEBIAN-CVE-2026-5435	glibc@2.41-12+deb13u4	no fix listed
Low	GO-2026-4341	stdlib@go1.24.6	1.24.12
Low	DEBIAN-CVE-2026-19499	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-76642	util-linux@2.41.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2021-45346	sqlite3@3.46.1-7+deb13u2	no fix listed
Low	DEBIAN-CVE-2025-8941	pam@1.7.0-5	no fix listed
Low	DEBIAN-CVE-2025-70873	sqlite3@3.46.1-7+deb13u2	no fix listed
Low	DEBIAN-CVE-2026-6238	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2024-26458	krb5@1.21.3-5+deb13u1	no fix listed
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r0	3.5.8-r0
Low	DEBIAN-CVE-2026-54369	acl@2.3.2-2+b1	no fix listed
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.2-3	no fix listed
Low	DEBIAN-CVE-2026-3184	util-linux@2.41.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-78408	util-linux@2.41.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-86144	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-77117	glibc@2.41-12+deb13u4	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.3.4latest	today	3.4.0	0020140	1,507
2.3.3	yesterday	3.3.1	0025151	1,730

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/umami.svg)](https://charts.stackradar.io/charts/helmforge/umami)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.