umami 2.3.4 Helm chart
helmforgeVerified publisherScored 27 Sept 2026
Umami privacy-first web analytics with PostgreSQL, Gateway API, External Secrets, backups, and production controls
Version 2.3.4 todayapp version 3.4.0 3Artifact Hub
umami 2.3.4 deploys 3 container images: library/busybox, ghcr.io/umami-software/umami and library/postgres. Across them, 160 findings — 0 critical, 0 high. The highest contribution is DEBIAN-CVE-2019-1010022 in glibc 2.41-12+deb13u4, with no fix listed. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| library/ | 1.37 | 0000 | 0 |
| ghcr.io/ | 3.4.0 | 0067 | 191 |
| library/ | 18.6-trixie | 0014133 | 1,316 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2025-11731 | libxslt | no fix listed |
| Low | DEBIAN-CVE-2007-5686 | shadow | no fix listed |
| Low | GO-2026-4602 | stdlib | 1.25.8 |
| Low | DEBIAN-CVE-2026-18477 | tar | no fix listed |
| Low | DEBIAN-CVE-2026-95818 | glibc | no fix listed |
| Low | DEBIAN-CVE-2026-86141 | libxml2 | no fix listed |
| Low | DEBIAN-CVE-2026-40228 | systemd | no fix listed |
| Low | DEBIAN-CVE-2026-57062 | gnupg2 | no fix listed |
| Low | DEBIAN-CVE-2026-53910 | diffutils | no fix listed |
| Low | DEBIAN-CVE-2026-6368 | glibc | no fix listed |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 2.3.4latest | today | 3.4.0 | 0020140 | 1,507 |
| 2.3.3 | yesterday | 3.3.1 | 0025151 | 1,730 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.