opencloud Helm chart

Name: opencloud Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

jacobcolvin

Scored 14 Sept 2026

OpenCloud Helm community chart

Latest 0.2.3 11 months agoapp version latest 0Artifact Hub

opencloud 0.2.3 deploys 13 container images: library/busybox, opencloudeu/opencloud-rolling, quay.io/keycloak/keycloak, minio/minio and 4 more. Across the 12 measured, 4,110 findings — 19 critical, 11 high — 12 on CISA KEV. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.9.2, fixed in 3.2.2.

Radar Score

45,23919116843,396

4,110 findings over 12 of 13 images measured

KEV ×12 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

13 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox×6	1.36	0000	0
opencloudeu/opencloud-rolling×2	2.1.0	0120178	1,842
quay.io/keycloak/keycloak	26.1.4	1018160	1,885
minio/minio	latest	009109	1,069
onlyoffice/documentserver	8.2.2	—	not yet scanned
opencloudeu/web-extensions	draw-io-1.0.0	2180336	4,755
opencloudeu/web-extensions	external-sites-1.0.0	2180336	4,755
opencloudeu/web-extensions	importer-1.0.0	2180336	4,755
opencloudeu/web-extensions	json-viewer-1.0.0	2180336	4,755
opencloudeu/web-extensions	progress-bars-1.0.0	2180336	4,755
opencloudeu/web-extensions	unzip-1.0.0	2180336	4,755
library/postgres	alpine	00861	634
apache/tika	2.9.2.1-full	64149872	11,279

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,575 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2024-56378	poppler@24.02.0-1ubuntu9	24.02.0-1ubuntu9.2
Low	UBUNTU-CVE-2026-16599	wget@1.21.4-1ubuntu4	no fix listed
Low	GO-2026-4986	stdlib@go1.24.2	1.25.10
Low	GO-2026-4918	stdlib@go1.24.2	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.38.0	0.53.0
Low	UBUNTU-CVE-2024-21096	mysql-8.0@8.0.36-2ubuntu3	8.0.37-0ubuntu0.24.04.1
Low	UBUNTU-CVE-2025-50087	mysql-8.0@8.0.36-2ubuntu3	8.0.43-0ubuntu0.24.04.1
Low	GO-2026-4337	stdlib@go1.24.2	1.24.13
Low	UBUNTU-CVE-2026-4438	glibc@2.39-0ubuntu8.1	2.39-0ubuntu8.8
Low	GHSA-mfg7-5gfp-c4w3	netty-codec-dns@4.1.118.Final	4.1.136.Final
Low	GHSA-fqjh-8322-vgrv	keycloak-services@26.1.4	no fix listed
Low	GHSA-qh8g-58pp-2wxh	jetty-http@9.4.54.v20240208	12.0.12
Low	GHSA-44p7-9xx4-hf2g	golang.org/x/image@v0.25.0	0.38.0
Low	PYSEC-2026-193	gdal@3.8.4	3.13.1
Low	DEBIAN-CVE-2023-31438	systemd@252.33-1~deb12u1	no fix listed
Low	UBUNTU-CVE-2026-60145	mysql-8.0@8.0.36-2ubuntu3	8.0.46-0ubuntu0.24.04.4
Low	DEBIAN-CVE-2026-1757	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6
Low	GHSA-fm6w-rrp3-2x4w	keycloak-services@26.1.4	26.2.13
Low	GHSA-rrv7-3mqf-hxfr	keycloak-services@26.1.4	26.6.2
Low	GHSA-rp8m-h266-53jh	python-apt@2.7.7+ubuntu1	0.9.3.5ubuntu3
Low	GHSA-crhj-59gh-8x96	github.com/go-git/go-git/v5@v5.13.2	5.19.1
Low	GO-2026-4601	stdlib@go1.24.2	1.25.8
Low	GHSA-fw8g-cg8f-9j28	github.com/prometheus/prometheus@v0.303.0	0.311.3
Low	UBUNTU-CVE-2026-60747	mysql-8.0@8.0.36-2ubuntu3	8.0.46-0ubuntu0.24.04.4
Low	UBUNTU-CVE-2026-72522	expat@2.6.1-2build1	no fix listed
Low	GHSA-q82r-2j7m-9rv4	github.com/go-acme/lego/v4@v4.4.0	4.25.2
Low	GHSA-7p3p-8qv8-m2vh	jetty-server@9.4.54.v20240208	no fix listed
Low	UBUNTU-CVE-2024-56827	openjpeg2@2.5.0-2build3	2.5.0-2ubuntu0.3
Low	UBUNTU-CVE-2026-56403	expat@2.6.1-2build1	no fix listed
Low	UBUNTU-CVE-2026-56404	expat@2.6.1-2build1	no fix listed
Low	UBUNTU-CVE-2026-56405	expat@2.6.1-2build1	no fix listed
Low	UBUNTU-CVE-2026-56408	expat@2.6.1-2build1	no fix listed
Low	GHSA-gcjf-9mgh-3p7g	netty-codec-http@4.1.118.Final	4.1.136.Final
Low	GHSA-v8h7-rr48-vmmv	netty-codec-http@4.1.118.Final	4.1.133.Final
Low	UBUNTU-CVE-2026-56406	expat@2.6.1-2build1	no fix listed
Low	UBUNTU-CVE-2026-56407	expat@2.6.1-2build1	no fix listed
Low	UBUNTU-CVE-2026-56410	expat@2.6.1-2build1	no fix listed
Low	UBUNTU-CVE-2026-56411	expat@2.6.1-2build1	no fix listed
Low	GHSA-g9jj-cgmh-9f38	mariadb-java-client@3.4.1	3.4.3
Low	ALPINE-CVE-2026-78410	util-linux@2.42.1-r0	2.42.3-r0
Low	UBUNTU-CVE-2026-78410	util-linux@2.39.3-9ubuntu6	no fix listed
Low	UBUNTU-CVE-2026-22021	openjdk-17@17.0.11+9-1	17.0.19+10-1~24.04.2
Low	UBUNTU-CVE-2026-47021	openjdk-17@17.0.11+9-1	17.0.20+8-1~24.04
Low	UBUNTU-CVE-2026-58471	wget@1.21.4-1ubuntu4	1.21.4-1ubuntu4.3
Low	UBUNTU-CVE-2026-58472	wget@1.21.4-1ubuntu4	1.21.4-1ubuntu4.3
Low	GHSA-563q-j3cm-6jxm	netty-codec-http2@4.1.118.Final	4.1.135.Final
Low	DEBIAN-CVE-2026-89161	pcre2@10.42-1	10.42-1+deb12u1
Low	GHSA-3rh2-v3gr-35p9	github.com/minio/minio@v0.0.0-20250907161309-07c3a429bfed+dirty	no fix listed
Low	UBUNTU-CVE-2025-4516	python3.12@3.12.3-1	3.12.3-1ubuntu0.6
Low	GO-2026-5026	golang.org/x/net@v0.38.0	0.55.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.3latest	11 months ago	latest	19116843,396	45,239

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/jacobcolvin/opencloud.svg)](https://charts.stackradar.io/charts/jacobcolvin/opencloud)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.