StackRadar

opencloud Helm chart

jacobcolvinVerified publisher

Scored 15 Sept 2026

OpenCloud Helm community chart

Latest 0.2.3 11 months agoapp version latest 0Artifact Hub

opencloud 0.2.3 deploys 13 container images: library/busybox, opencloudeu/opencloud-rolling, quay.io/keycloak/keycloak, minio/minio and 4 more. Across the 12 measured, 4,119 findings — 17 critical, 13 high — 12 on CISA KEV. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.9.2, fixed in 3.2.2.

Radar Score

45,39217136863,403

4,119 findings over 12 of 13 images measured

KEV ×12 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

13 images
ImageTagVulnerabilitiesRadar Score
library/busybox×61.3600000
opencloudeu/opencloud-rolling×22.1.001201781,842
quay.io/keycloak/keycloak26.1.401181601,884
minio/miniolatest0091091,069
onlyoffice/documentserver8.2.2—not yet scanned
opencloudeu/web-extensionsdraw-io-1.0.021803364,767
opencloudeu/web-extensionsexternal-sites-1.0.021803364,767
opencloudeu/web-extensionsimporter-1.0.021803364,767
opencloudeu/web-extensionsjson-viewer-1.0.021803364,767
opencloudeu/web-extensionsprogress-bars-1.0.021803364,767
opencloudeu/web-extensionsunzip-1.0.021803364,767
library/postgresalpine00861634
apache/tika2.9.2.1-full5515187911,361

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

1,326 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowUBUNTU-CVE-2025-50079mysql-8.0@8.0.36-2ubuntu38.0.43-0ubuntu0.24.04.1
LowUBUNTU-CVE-2025-50088mysql-8.0@8.0.36-2ubuntu38.0.42-0ubuntu0.24.04.1
LowUBUNTU-CVE-2025-50091mysql-8.0@8.0.36-2ubuntu38.0.43-0ubuntu0.24.04.1
LowGHSA-fcjp-h8cc-6879github.com/nats-io/nats-server/v2@v2.11.02.11.15
LowGHSA-r7wm-3cxj-wff9jackson-core@2.17.02.18.8
LowUBUNTU-CVE-2026-22693harfbuzz@8.3.0-2build2no fix listed
LowUBUNTU-CVE-2025-50080mysql-8.0@8.0.36-2ubuntu38.0.43-0ubuntu0.24.04.1
LowUBUNTU-CVE-2025-50092mysql-8.0@8.0.36-2ubuntu38.0.43-0ubuntu0.24.04.1
LowUBUNTU-CVE-2025-50093mysql-8.0@8.0.36-2ubuntu38.0.43-0ubuntu0.24.04.1
LowDEBIAN-CVE-2026-3184util-linux@2.38.1-5+deb12u3no fix listed
LowUBUNTU-CVE-2026-84366python3.12@3.12.3-1no fix listed
LowUBUNTU-CVE-2025-30691openjdk-17@17.0.11+9-117.0.15+6~us1-0ubuntu1~24.04
LowGHSA-cp6g-7hqx-qxhpgo.mongodb.org/mongo-driver@v1.17.31.17.7
LowUBUNTU-CVE-2024-21138openjdk-17@17.0.11+9-117.0.12+7-1ubuntu2~24.04
LowUBUNTU-CVE-2025-53040mysql-8.0@8.0.36-2ubuntu38.0.44-0ubuntu0.24.04.1
LowUBUNTU-CVE-2025-53042mysql-8.0@8.0.36-2ubuntu38.0.44-0ubuntu0.24.04.1
LowUBUNTU-CVE-2025-53044mysql-8.0@8.0.36-2ubuntu38.0.44-0ubuntu0.24.04.1
LowUBUNTU-CVE-2025-53045mysql-8.0@8.0.36-2ubuntu38.0.44-0ubuntu0.24.04.1
LowUBUNTU-CVE-2025-53062mysql-8.0@8.0.36-2ubuntu38.0.44-0ubuntu0.24.04.1
LowUBUNTU-CVE-2025-53069mysql-8.0@8.0.36-2ubuntu38.0.44-0ubuntu0.24.04.1
LowDEBIAN-CVE-2026-58055nghttp2@1.52.0-1+deb12u2no fix listed
LowUBUNTU-CVE-2026-21933openjdk-17@17.0.11+9-117.0.18+8-1~24.04.1
LowRHSA-2026:33226glibc@2.34-125.el9_5.30:2.34-272.el9_8
LowUBUNTU-CVE-2026-88050tesseract@5.3.4-1build5no fix listed
LowDEBIAN-CVE-2026-7010perl@5.36.0-7+deb12u1no fix listed
LowGHSA-4mp9-239f-g9hgnetty-codec-http@4.1.118.Final4.1.136.Final
LowUBUNTU-CVE-2026-19487perl@5.38.2-3.2build2no fix listed
LowALPINE-CVE-2026-22801libpng@1.6.44-r01.6.54-r0
LowDEBIAN-CVE-2026-22801libpng1.6@1.6.39-21.6.39-2+deb12u2
LowGHSA-cpf7-j4cf-vqx4keycloak-services@26.1.4no fix listed
LowDEBIAN-CVE-2023-52426expat@2.5.0-1+deb12u1no fix listed
LowRHSA-2026:12441libcap@2.48-9.el9_20:2.48-10.el9_7.1
LowUBUNTU-CVE-2024-21134mysql-8.0@8.0.36-2ubuntu38.0.39-0ubuntu0.24.04.1
LowDEBIAN-CVE-2026-52492tiff@4.5.0-6+deb12u2no fix listed
LowGHSA-m4j5-5x4r-2xp9keycloak-services@26.1.426.2.8
LowUBUNTU-CVE-2025-2153hdf5@1.10.10+repack-3.1ubuntu4no fix listed
LowGHSA-9m57-25v3-79x9golang.org/x/crypto@v0.36.00.52.0
LowUBUNTU-CVE-2025-50084mysql-8.0@8.0.36-2ubuntu38.0.43-0ubuntu0.24.04.1
LowUBUNTU-CVE-2025-50086mysql-8.0@8.0.36-2ubuntu38.0.43-0ubuntu0.24.04.1
LowUBUNTU-CVE-2026-89158pcre2@10.42-4ubuntu2no fix listed
LowDEBIAN-CVE-2011-3374apt@2.6.1no fix listed
LowDEBIAN-CVE-2025-27587openssl@3.0.15-1~deb12u1no fix listed
LowUBUNTU-CVE-2025-2308hdf5@1.10.10+repack-3.1ubuntu4no fix listed
LowUBUNTU-CVE-2026-86095netcdf@1:4.9.2-5ubuntu4no fix listed
LowUBUNTU-CVE-2026-46968openjdk-17@17.0.11+9-117.0.20+8-1~24.04
LowUBUNTU-CVE-2025-2310hdf5@1.10.10+repack-3.1ubuntu4no fix listed
LowRHSA-2025:4244glibc@2.34-125.el9_5.30:2.34-125.el9_5.8
LowGHSA-vffh-x6r8-xx99github.com/prometheus/prometheus@v0.303.00.311.2-0.20260410083055-07c6232d159b
LowUBUNTU-CVE-2025-4373glib2.0@2.80.0-6ubuntu3.12.80.0-6ubuntu3.4
LowDEBIAN-CVE-2013-4392systemd@252.33-1~deb12u1no fix listed

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.2.3latest11 months agolatest17136863,40345,392

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/jacobcolvin/opencloud.svg)](https://charts.stackradar.io/charts/jacobcolvin/opencloud)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 15 Sept 2026 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.