qbittorrent Helm chart

Name: qbittorrent Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

k8s-charts

Scored 14 Sept 2026

A Helm chart for deploying a QBittorrent client that uses a wireguard VPN tunnel.

Latest 3.1.0 3 months agoapp version release-5.2.0 1Artifact Hub

qbittorrent 3.1.0 deploys 2 container images: library/busybox and ghcr.io/hotio/qbittorrent. Across them, 109 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-45447 in openssl 3.5.6-r0, fixed in 3.5.7-r0. Chart.yaml declares kubeVersion >=1.19.0-0; rendered for Kubernetes 1.19.0.

Radar Score

1,270002386

109 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.36	0000	0
ghcr.io/hotio/qbittorrent	release-5.2.0	002386	1,270

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

109 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-8932	curl@8.19.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-8286	curl@8.19.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-75803	openssl@3.5.6-r0	3.5.8-r0
Low	ALPINE-CVE-2026-40164	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-39979	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-8458	curl@8.19.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-6253	curl@8.19.0-r0	8.20.0-r0
Low	ALPINE-CVE-2026-9547	curl@8.19.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-6276	curl@8.19.0-r0	8.20.0-r0
Low	ALPINE-CVE-2026-76956	expat@2.7.5-r0	2.8.4-r0
Low	ALPINE-CVE-2026-9080	curl@8.19.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-42767	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-5545	curl@8.19.0-r0	8.20.0-r0
Low	ALPINE-CVE-2026-9545	curl@8.19.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-11822	sqlite@3.51.2-r0	3.53.4-r0
Low	ALPINE-CVE-2026-11824	sqlite@3.51.2-r0	3.53.4-r0
Low	ALPINE-CVE-2026-1502	python3@3.12.13-r0	3.12.14-r0
Low	ALPINE-CVE-2026-63074	openssl@3.5.6-r0	3.5.8-r0
Low	ALPINE-CVE-2026-4786	python3@3.12.13-r0	3.12.14-r0
Low	ALPINE-CVE-2026-34181	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-6429	curl@8.19.0-r0	8.20.0-r0
Low	ALPINE-CVE-2026-7168	curl@8.19.0-r0	8.20.0-r0
Low	ALPINE-CVE-2026-4873	curl@8.19.0-r0	8.20.0-r0
Low	ALPINE-CVE-2026-42769	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-49839	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-76957	expat@2.7.5-r0	2.8.4-r0
Low	ALPINE-CVE-2026-56403	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56404	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56405	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56408	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56406	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56407	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56410	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56411	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-45446	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-4360	python3@3.12.13-r0	3.12.14-r0
Low	ALPINE-CVE-2026-7009	curl@8.19.0-r0	8.20.0-r0
Low	ALPINE-CVE-2026-2297	python3@3.12.13-r0	3.12.14-r0
Low	ALPINE-CVE-2026-33947	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-56412	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-33948	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-50219	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56409	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56132	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-42768	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-40612	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-44777	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-41256	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-43894	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-43896	jq@1.8.1-r0	1.8.2-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.1.0latest	3 months ago	release-5.2.0	002386	1,270

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/k8s-charts/qbittorrent.svg)](https://charts.stackradar.io/charts/k8s-charts/qbittorrent)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.