opencloud Helm chart

Name: opencloud Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

jacobcolvin

Scored 14 Sept 2026

OpenCloud Helm community chart

Latest 0.2.3 11 months agoapp version latest 0Artifact Hub

opencloud 0.2.3 deploys 13 container images: library/busybox, opencloudeu/opencloud-rolling, quay.io/keycloak/keycloak, minio/minio and 4 more. Across the 12 measured, 4,110 findings — 19 critical, 11 high — 12 on CISA KEV. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.9.2, fixed in 3.2.2.

Radar Score

45,23919116843,396

4,110 findings over 12 of 13 images measured

KEV ×12 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

13 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox×6	1.36	0000	0
opencloudeu/opencloud-rolling×2	2.1.0	0120178	1,842
quay.io/keycloak/keycloak	26.1.4	1018160	1,885
minio/minio	latest	009109	1,069
onlyoffice/documentserver	8.2.2	—	not yet scanned
opencloudeu/web-extensions	draw-io-1.0.0	2180336	4,755
opencloudeu/web-extensions	external-sites-1.0.0	2180336	4,755
opencloudeu/web-extensions	importer-1.0.0	2180336	4,755
opencloudeu/web-extensions	json-viewer-1.0.0	2180336	4,755
opencloudeu/web-extensions	progress-bars-1.0.0	2180336	4,755
opencloudeu/web-extensions	unzip-1.0.0	2180336	4,755
library/postgres	alpine	00861	634
apache/tika	2.9.2.1-full	64149872	11,279

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,575 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2026-6222	golang.org/x/image@v0.25.0	0.45.0
Low	UBUNTU-CVE-2026-50812	sqlite3@3.45.1-1ubuntu2	3.45.1-1ubuntu2.7
Low	DEBIAN-CVE-2026-18495	tiff@4.5.0-6+deb12u2	no fix listed
Low	GO-2025-4014	stdlib@go1.24.2	1.24.8
Low	UBUNTU-CVE-2026-14663	postgresql-16@16.2-1ubuntu4	16.15-0ubuntu0.24.04.1
Low	ALPINE-CVE-2026-6042	musl@1.2.5-r1	1.2.5-r2
Low	UBUNTU-CVE-2024-21231	mysql-8.0@8.0.36-2ubuntu3	8.0.40-0ubuntu0.24.04.1
Low	UBUNTU-CVE-2026-49337	libde265@1.0.15-1build3	1.0.15-1ubuntu0.1
Low	UBUNTU-CVE-2026-34757	libpng1.6@1.6.43-5build1	1.6.43-5ubuntu0.6
Low	UBUNTU-CVE-2026-12391	ubuntu-advantage-tools@31.2.3	37.2ubuntu~24.04.1
Low	UBUNTU-CVE-2026-18938	p11-kit@0.25.3-4ubuntu2	0.25.3-4ubuntu2.2
Low	UBUNTU-CVE-2026-4897	policykit-1@124-2ubuntu1	124-2ubuntu1.24.04.3
Low	GO-2026-5774	github.com/go-chi/chi/v5@v5.2.1	5.3.0
Low	GHSA-q35r-vvhv-vx5h	keycloak-services@26.1.4	26.5.6
Low	GHSA-q35r-vvhv-vx5h	keycloak-model-jpa@26.1.4	26.5.6
Low	GHSA-q35r-vvhv-vx5h	keycloak-server-spi-private@26.1.4	26.5.6
Low	GO-2026-6107	go.etcd.io/etcd/client/pkg/v3@v3.5.20	3.5.33
Low	UBUNTU-CVE-2026-0989	libxml2@2.9.14+dfsg-1.3ubuntu3	2.9.14+dfsg-1.3ubuntu3.7
Low	UBUNTU-CVE-2026-6472	postgresql-16@16.2-1ubuntu4	16.14-0ubuntu0.24.04.1
Low	GO-2026-4976	stdlib@go1.24.2	1.25.10
Low	UBUNTU-CVE-2026-21925	openjdk-17@17.0.11+9-1	17.0.18+8-1~24.04.1
Low	UBUNTU-CVE-2025-6052	glib2.0@2.80.0-6ubuntu3.1	2.80.0-6ubuntu3.6
Low	GO-2026-5031	golang.org/x/image@v0.25.0	0.41.0
Low	GHSA-27gc-wj6x-9w55	keycloak-admin-ui@26.1.4	26.2.9
Low	GHSA-27gc-wj6x-9w55	keycloak-account-ui@26.1.4	26.2.9
Low	GHSA-2x5j-vhc8-9cwm	github.com/cloudflare/circl@v1.3.7	1.6.1
Low	RHSA-2026:28911	coreutils@8.32-36.el9	0:8.32-41.el9_8
Low	UBUNTU-CVE-2025-5278	coreutils@9.4-3ubuntu6	9.4-3ubuntu6.3
Low	GO-2026-5856	stdlib@go1.24.2	1.25.12
Low	ALPINE-CVE-2026-22795	openssl@3.3.3-r0	3.3.6-r0
Low	UBUNTU-CVE-2026-22795	openssl@3.0.13-0ubuntu3	3.0.13-0ubuntu3.7
Low	UBUNTU-CVE-2026-9494	ubuntu-advantage-tools@31.2.3	37.2ubuntu~24.04.1
Low	UBUNTU-CVE-2026-47714	libheif@1.17.6-1ubuntu4	1.17.6-1ubuntu4.6
Low	GO-2025-4007	stdlib@go1.24.2	1.24.9
Low	GO-2026-6355	golang.org/x/crypto@v0.36.0	0.56.0
Low	UBUNTU-CVE-2025-6966	python-apt@2.7.7ubuntu1	2.7.7ubuntu5.1
Low	UBUNTU-CVE-2026-62289	libheif@1.17.6-1ubuntu4	1.17.6-1ubuntu4.7
Low	UBUNTU-CVE-2025-28162	libpng1.6@1.6.43-5build1	1.6.43-5ubuntu0.4
Low	UBUNTU-CVE-2025-28164	libpng1.6@1.6.43-5build1	1.6.43-5ubuntu0.4
Low	GO-2025-3749	stdlib@go1.24.2	1.24.4
Low	GHSA-wcvj-vpvw-9rr5	keycloak-services@26.1.4	no fix listed
Low	GO-2026-4980	stdlib@go1.24.2	1.25.10
Low	UBUNTU-CVE-2026-42770	openssl@3.0.13-0ubuntu3	3.0.13-0ubuntu3.11
Low	GO-2026-5039	stdlib@go1.24.2	1.25.11
Low	UBUNTU-CVE-2025-3360	glib2.0@2.80.0-6ubuntu3.1	2.80.0-6ubuntu3.6
Low	UBUNTU-CVE-2024-21213	mysql-8.0@8.0.36-2ubuntu3	8.0.40-0ubuntu0.24.04.1
Low	UBUNTU-CVE-2026-41254	lcms2@2.14-2build1	2.14-2ubuntu0.1
Low	UBUNTU-CVE-2026-2003	postgresql-16@16.2-1ubuntu4	16.13-0ubuntu0.24.04.1
Low	GHSA-wh89-7897-x99h	netty-codec-haproxy@4.1.118.Final	4.1.136.Final
Low	UBUNTU-CVE-2025-6075	python3.12@3.12.3-1	3.12.3-1ubuntu0.9

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.3latest	11 months ago	latest	19116843,396	45,239

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/jacobcolvin/opencloud.svg)](https://charts.stackradar.io/charts/jacobcolvin/opencloud)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.