opencloud Helm chart

Name: opencloud Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

jacobcolvin

Scored 14 Sept 2026

OpenCloud Helm community chart

Latest 0.2.3 11 months agoapp version latest 0Artifact Hub

opencloud 0.2.3 deploys 13 container images: library/busybox, opencloudeu/opencloud-rolling, quay.io/keycloak/keycloak, minio/minio and 4 more. Across the 12 measured, 4,110 findings — 19 critical, 11 high — 12 on CISA KEV. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.9.2, fixed in 3.2.2.

Radar Score

45,23919116843,396

4,110 findings over 12 of 13 images measured

KEV ×12 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

13 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox×6	1.36	0000	0
opencloudeu/opencloud-rolling×2	2.1.0	0120178	1,842
quay.io/keycloak/keycloak	26.1.4	1018160	1,885
minio/minio	latest	009109	1,069
onlyoffice/documentserver	8.2.2	—	not yet scanned
opencloudeu/web-extensions	draw-io-1.0.0	2180336	4,755
opencloudeu/web-extensions	external-sites-1.0.0	2180336	4,755
opencloudeu/web-extensions	importer-1.0.0	2180336	4,755
opencloudeu/web-extensions	json-viewer-1.0.0	2180336	4,755
opencloudeu/web-extensions	progress-bars-1.0.0	2180336	4,755
opencloudeu/web-extensions	unzip-1.0.0	2180336	4,755
library/postgres	alpine	00861	634
apache/tika	2.9.2.1-full	64149872	11,279

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,575 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-88049	tesseract@5.3.4-1build5	no fix listed
Low	UBUNTU-CVE-2026-88050	tesseract@5.3.4-1build5	no fix listed
Low	ALPINE-CVE-2025-64506	libpng@1.6.44-r0	1.6.53-r0
Low	UBUNTU-CVE-2025-64506	libpng1.6@1.6.43-5build1	1.6.43-5ubuntu0.1
Low	DEBIAN-CVE-2025-10966	curl@7.88.1-10+deb12u8	no fix listed
Low	GHSA-g8vr-x4qh-25qg	keycloak-services@26.1.4	26.6.3
Low	UBUNTU-CVE-2025-45582	tar@1.35+dfsg-3build1	1.35+dfsg-3ubuntu0.2
Low	UBUNTU-CVE-2026-15534	perl@5.38.2-3.2build2	no fix listed
Low	GHSA-r5m4-5vww-w9f5	gdal@3.8.4	3.13.0RC1
Low	UBUNTU-CVE-2026-8212	gdal@3.8.4+dfsg-3ubuntu3	no fix listed
Low	GO-2026-5970	golang.org/x/text@v0.23.0	0.39.0
Low	UBUNTU-CVE-2026-47012	mysql-8.0@8.0.36-2ubuntu3	8.0.46-0ubuntu0.24.04.4
Low	UBUNTU-CVE-2026-60177	mysql-8.0@8.0.36-2ubuntu3	8.0.46-0ubuntu0.24.04.4
Low	UBUNTU-CVE-2026-60182	mysql-8.0@8.0.36-2ubuntu3	8.0.46-0ubuntu0.24.04.4
Low	UBUNTU-CVE-2026-60184	mysql-8.0@8.0.36-2ubuntu3	8.0.46-0ubuntu0.24.04.4
Low	UBUNTU-CVE-2026-60185	mysql-8.0@8.0.36-2ubuntu3	8.0.46-0ubuntu0.24.04.4
Low	UBUNTU-CVE-2026-60186	mysql-8.0@8.0.36-2ubuntu3	8.0.46-0ubuntu0.24.04.4
Low	UBUNTU-CVE-2026-60187	mysql-8.0@8.0.36-2ubuntu3	8.0.46-0ubuntu0.24.04.4
Low	UBUNTU-CVE-2025-8291	python3.12@3.12.3-1	3.12.3-1ubuntu0.9
Low	DEBIAN-CVE-2026-56391	coreutils@9.1-1	no fix listed
Low	GHSA-933f-rg6j-f46p	keycloak-services@26.1.4	26.4.12
Low	GO-2025-4155	stdlib@go1.24.2	1.24.11
Low	UBUNTU-CVE-2026-88054	tesseract@5.3.4-1build5	no fix listed
Low	UBUNTU-CVE-2025-14017	curl@8.5.0-2ubuntu10.1	8.5.0-2ubuntu10.7
Low	DEBIAN-CVE-2025-10911	libxslt@1.1.35-1	no fix listed
Low	UBUNTU-CVE-2026-35236	mysql-8.0@8.0.36-2ubuntu3	8.0.46-0ubuntu0.24.04.2
Low	UBUNTU-CVE-2026-35237	mysql-8.0@8.0.36-2ubuntu3	8.0.46-0ubuntu0.24.04.2
Low	UBUNTU-CVE-2026-35238	mysql-8.0@8.0.36-2ubuntu3	8.0.46-0ubuntu0.24.04.2
Low	UBUNTU-CVE-2026-35239	mysql-8.0@8.0.36-2ubuntu3	8.0.46-0ubuntu0.24.04.2
Low	UBUNTU-CVE-2026-35240	mysql-8.0@8.0.36-2ubuntu3	8.0.46-0ubuntu0.24.04.2
Low	ALPINE-CVE-2026-32778	expat@2.7.0-r0	2.7.5-r0
Low	DEBIAN-CVE-2026-32778	expat@2.5.0-1+deb12u1	no fix listed
Low	UBUNTU-CVE-2026-86144	libxml2@2.9.14+dfsg-1.3ubuntu3	no fix listed
Low	UBUNTU-CVE-2026-56288	patch@2.7.6-7build3	no fix listed
Low	UBUNTU-CVE-2026-56289	patch@2.7.6-7build3	no fix listed
Low	GO-2025-4008	stdlib@go1.24.2	1.24.8
Low	GO-2025-4010	stdlib@go1.24.2	1.24.8
Low	UBUNTU-CVE-2026-60189	mysql-8.0@8.0.36-2ubuntu3	8.0.46-0ubuntu0.24.04.4
Low	GHSA-q6h7-xxp7-7429	keycloak-services@26.1.4	no fix listed
Low	UBUNTU-CVE-2024-10041	pam@1.5.3-5ubuntu5	no fix listed
Low	UBUNTU-CVE-2026-59850	libssh@0.10.6-2build2	0.10.6-2ubuntu0.5
Low	GHSA-w5pp-99ch-qj29	github.com/go-git/go-git/v5@v5.13.2	5.19.1
Low	ALPINE-CVE-2026-32776	expat@2.7.0-r0	2.7.5-r0
Low	DEBIAN-CVE-2026-32776	expat@2.5.0-1+deb12u1	no fix listed
Low	UBUNTU-CVE-2026-5745	libarchive@3.7.2-2	3.7.2-2ubuntu0.8
Low	UBUNTU-CVE-2025-0167	curl@8.5.0-2ubuntu10.1	8.5.0-2ubuntu10.8
Low	GHSA-3xc5-wrhm-f963	github.com/go-git/go-git/v5@v5.13.2	5.18.0
Low	UBUNTU-CVE-2025-8851	tiff@4.5.1+git230720-4ubuntu2	4.5.1+git230720-4ubuntu2.3
Low	UBUNTU-CVE-2025-60753	libarchive@3.7.2-2	3.7.2-2ubuntu0.6
Low	DSA-6076-1	libpng1.6@1.6.39-2	1.6.39-2+deb12u1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.3latest	11 months ago	latest	19116843,396	45,239

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/jacobcolvin/opencloud.svg)](https://charts.stackradar.io/charts/jacobcolvin/opencloud)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.