StackRadar

opencloud Helm chart

jacobcolvinVerified publisher

Scored 14 Sept 2026

OpenCloud Helm community chart

Latest 0.2.3 11 months agoapp version latest 0Artifact Hub

opencloud 0.2.3 deploys 13 container images: library/busybox, opencloudeu/opencloud-rolling, quay.io/keycloak/keycloak, minio/minio and 4 more. Across the 12 measured, 4,110 findings — 19 critical, 11 high — 12 on CISA KEV. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.9.2, fixed in 3.2.2.

Radar Score

45,23919116843,396

4,110 findings over 12 of 13 images measured

KEV ×12 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

13 images
ImageTagVulnerabilitiesRadar Score
library/busybox×61.3600000
opencloudeu/opencloud-rolling×22.1.001201781,842
quay.io/keycloak/keycloak26.1.410181601,885
minio/miniolatest0091091,069
onlyoffice/documentserver8.2.2—not yet scanned
opencloudeu/web-extensionsdraw-io-1.0.021803364,755
opencloudeu/web-extensionsexternal-sites-1.0.021803364,755
opencloudeu/web-extensionsimporter-1.0.021803364,755
opencloudeu/web-extensionsjson-viewer-1.0.021803364,755
opencloudeu/web-extensionsprogress-bars-1.0.021803364,755
opencloudeu/web-extensionsunzip-1.0.021803364,755
library/postgresalpine00861634
apache/tika2.9.2.1-full6414987211,279

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,575 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumGHSA-f6hv-jmp6-3vwvnetty-codec-http2@4.1.118.Final4.1.133.Final
MediumGHSA-f6hv-jmp6-3vwvnetty-codec-http@4.1.118.Final4.1.133.Final
MediumUBUNTU-CVE-2026-8376perl@5.38.2-3.2build25.38.2-3.2ubuntu0.3
MediumALPINE-CVE-2026-14457openssl@3.5.7-r03.5.8-r0
MediumALPINE-CVE-2025-9232openssl@3.3.3-r03.3.5-r0
MediumDEBIAN-CVE-2025-9232openssl@3.0.15-1~deb12u13.0.17-1~deb12u3
MediumUBUNTU-CVE-2018-18064cairo@1.18.0-3build1no fix listed
MediumGHSA-jppx-w49h-x2qqnetty-codec-http@4.1.118.Final4.1.136.Final
MediumGHSA-q6cq-mhr2-jmr5netty-codec-haproxy@4.1.118.Final4.1.136.Final
MediumUBUNTU-CVE-2026-5260gnutls28@3.8.3-1.1ubuntu3.13.8.3-1.1ubuntu3.6
MediumUBUNTU-CVE-2025-4330python3.12@3.12.3-13.12.3-1ubuntu0.7
MediumGHSA-rm3j-f69w-wqmqgolang.org/x/crypto@v0.36.00.52.0
MediumALPINE-CVE-2026-80231curl@8.21.0-r08.22.0-r0
MediumDEBIAN-CVE-2026-60005nginx@1.27.4-1~bookwormno fix listed
MediumUBUNTU-CVE-2025-0938python3.12@3.12.3-13.12.3-1ubuntu0.5
MediumDEBIAN-CVE-2026-66046expat@2.5.0-1+deb12u1no fix listed
MediumUBUNTU-CVE-2026-11386ubuntu-advantage-tools@31.2.337.2ubuntu~24.04.1
MediumDEBIAN-CVE-2026-52490tiff@4.5.0-6+deb12u2no fix listed
MediumALPINE-CVE-2026-80229curl@8.21.0-r08.22.0-r0
MediumUBUNTU-CVE-2026-8927curl@8.5.0-2ubuntu10.18.5.0-2ubuntu10.10
MediumUBUNTU-CVE-2023-27043python3.12@3.12.3-13.12.3-1ubuntu0.2
MediumUBUNTU-CVE-2026-9669python3.12@3.12.3-13.12.3-1ubuntu0.15
MediumALPINE-CVE-2026-28388openssl@3.3.3-r03.3.7-r0
MediumUBUNTU-CVE-2026-28388openssl@3.0.13-0ubuntu33.0.13-0ubuntu3.9
MediumRHSA-2026:0928java-21-openjdk@1:21.0.6.0.7-1.el91:21.0.10.0.7-1.el9
MediumUBUNTU-CVE-2026-21945openjdk-17@17.0.11+9-117.0.18+8-1~24.04.1
MediumUBUNTU-CVE-2019-8396hdf5@1.10.10+repack-3.1ubuntu4no fix listed
MediumALPINE-CVE-2025-69421openssl@3.3.3-r03.3.6-r0
MediumUBUNTU-CVE-2025-69421openssl@3.0.13-0ubuntu33.0.13-0ubuntu3.7
MediumGHSA-m494-w24q-6f7wmssql-jdbc@12.8.112.8.2.jre11
MediumGHSA-x4gw-5cx5-pgmhnetty-handler@4.1.118.Final4.1.135.Final
MediumUBUNTU-CVE-2018-17432hdf5@1.10.10+repack-3.1ubuntu4no fix listed
MediumUBUNTU-CVE-2026-16239postgresql-16@16.2-1ubuntu416.15-0ubuntu0.24.04.1
MediumALPINE-CVE-2026-28387openssl@3.3.3-r03.3.7-r0
MediumUBUNTU-CVE-2026-28387openssl@3.0.13-0ubuntu33.0.13-0ubuntu3.9
MediumDEBIAN-CVE-2015-9019libxslt@1.1.35-1no fix listed
MediumUBUNTU-CVE-2026-11940python3.12@3.12.3-1no fix listed
MediumUBUNTU-CVE-2018-17439hdf5@1.10.10+repack-3.1ubuntu4no fix listed
MediumGHSA-6vqw-3v5j-54x4cryptography@41.0.742.0.4
MediumUBUNTU-CVE-2024-26130python-cryptography@41.0.7-4build341.0.7-4ubuntu0.1
MediumDEBIAN-CVE-2026-32740libheif@1.15.1-1+deb12u1no fix listed
MediumGHSA-8rm2-7qqf-34qmgithub.com/prometheus/prometheus@v0.303.00.305.2
MediumUBUNTU-CVE-2026-26740giflib@5.2.2-1ubuntu15.2.2-1ubuntu1.2
MediumALPINE-CVE-2026-28389openssl@3.3.3-r03.3.7-r0
MediumALPINE-CVE-2026-28390openssl@3.3.3-r03.3.7-r0
MediumUBUNTU-CVE-2026-28389openssl@3.0.13-0ubuntu33.0.13-0ubuntu3.9
MediumUBUNTU-CVE-2026-28390openssl@3.0.13-0ubuntu33.0.13-0ubuntu3.9
MediumUBUNTU-CVE-2026-2781nss@2:3.98-1build12:3.98-1ubuntu0.1
MediumDEBIAN-CVE-2019-1010025glibc@2.36-9+deb12u9no fix listed
LowALPINE-CVE-2025-69420openssl@3.3.3-r03.3.6-r0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.2.3latest11 months agolatest19116843,39645,239

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/jacobcolvin/opencloud.svg)](https://charts.stackradar.io/charts/jacobcolvin/opencloud)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.