immich 0.5.1 Helm chart

Name: immich Helm chart 0.5.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

immich-helm

Scored 21 Oct 2026

A chart to power Immich (immich.app) running on kubernetes

Version 0.5.1 yesterdayapp version v3.3.4 1Artifact Hub

immich 0.5.1 deploys 4 container images: valkey/valkey, ghcr.io/immich-app/immich-machine-learning, ghcr.io/immich-app/immich-server and ghcr.io/immich-app/postgres. Across them, 907 findings — 2 critical, 2 high — 1 on CISA KEV. The highest contribution is GO-2024-2687 in stdlib go1.18.2, fixed in 1.21.9.

Radar Score

9,72322139763

907 findings over 4 of 4 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
valkey/valkey×2	9.1.2	00578	721
ghcr.io/immich-app/immich-machine-learning	v3.3.4	0110130	1,423
ghcr.io/immich-app/immich-server	v3.3.4	0039273	3,074
ghcr.io/immich-app/postgres	14-vectorchord0.4.3-pgvectors0.2.0	2185282	4,505

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

501 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2025-68972	gnupg2@2.2.40-1.1	no fix listed
Low	DEBIAN-CVE-2026-112282	libbluray@1:1.3.4-1+b2	no fix listed
Low	DEBIAN-CVE-2026-112060	rtmpdump@2.4+20151223.gitfa8646d.1-2+b5	no fix listed
Low	DEBIAN-CVE-2026-0992	libxml2@2.9.14+dfsg-1.3~deb12u4	2.9.14+dfsg-1.3~deb12u6
Low	DEBIAN-CVE-2023-40403	libxslt@1.1.35-1+deb12u1	1.1.35-1+deb12u2
Low	DEBIAN-CVE-2022-3219	gnupg2@2.2.40-1.1	no fix listed
Low	DEBIAN-CVE-2026-102474	dash@0.5.12-12	no fix listed
Low	DEBIAN-CVE-2025-11731	libxslt@1.1.35-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-69418	openssl@3.0.17-1~deb12u2	3.0.18-1~deb12u2
Low	DEBIAN-CVE-2026-112283	libbluray@1:1.3.4-1+b2	no fix listed
Low	DEBIAN-CVE-2007-5686	shadow@1:4.17.4-2	no fix listed
Low	DEBIAN-CVE-2026-18477	tar@1.35+dfsg-3.1	no fix listed
Low	DSA-5979-2	libxslt@1.1.35-1+deb12u1	1.1.35-1+deb12u3
Low	GO-2026-6809	stdlib@go1.18.2	1.26.10
Low	DEBIAN-CVE-2026-95818	glibc@2.41-12+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-86141	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	GHSA-5239-wwwm-4pmq	pygments@2.17.2	2.20.0
Low	DEBIAN-CVE-2026-105712	gnupg2@2.2.40-1.1	no fix listed
Low	GO-2026-5024	golang.org/x/sys@v0.13.0	0.44.0
Low	DEBIAN-CVE-2026-89162	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	DEBIAN-CVE-2025-50422	cairo@1.18.4-1+b1	no fix listed
Low	DEBIAN-CVE-2026-40228	systemd@257.13-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2023-37769	pixman@0.44.0-3	no fix listed
Low	DEBIAN-CVE-2026-57062	gnupg2@2.2.40-1.1	no fix listed
Low	DEBIAN-CVE-2026-53910	diffutils@1:3.10-4	no fix listed
Low	DEBIAN-CVE-2023-31439	systemd@257.13-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2023-31437	systemd@257.13-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2023-31438	systemd@257.13-1~deb13u1	no fix listed
Low	GO-2026-4602	stdlib@go1.18.2	1.25.8
Low	DEBIAN-CVE-2026-88648	gnutls28@3.8.9-3+deb13u4	no fix listed
Low	GHSA-g7r4-m6w7-qqqr	esbuild@0.27.4	0.28.1
Low	DEBIAN-CVE-2025-8534	tiff@4.7.0-3+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-5958	sed@4.9-1	4.9-1+deb12u1
Low	DEBIAN-CVE-2026-6368	glibc@2.41-12+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-107928	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-107929	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-86409	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-86410	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-86414	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-87862	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-87863	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-87864	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-87865	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-87866	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-92386	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-92387	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-92388	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-92389	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-92390	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-92391	curl@8.14.1-2+deb13u5	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.5.1latest	yesterday	v3.3.4	22139763	9,723
0.3.0	10 months ago	v2.3.1	532971,332	18,495

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/immich-helm/immich.svg)](https://charts.stackradar.io/charts/immich-helm/immich)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.