librephotos 1.1.6 Helm chart

Name: librephotos Helm chart 1.1.6: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

k8sonlab

Scored 14 Sept 2026

Helmchart used to install Librephotos in a microservice manner

Version 1.1.6 24 days agoapp version 1.0.3 0Artifact Hub

librephotos 1.1.6 deploys 7 container images: library/postgres, reallibrephotos/librephotos, reallibrephotos/librephotos-frontend, reallibrephotos/librephotos-proxy and 3 more. Across the 6 measured, 1,241 findings — 6 critical, 18 high — 3 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 8.0.3-1, fixed in 6.2.20. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

14,801618249968

1,241 findings over 6 of 7 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres	9.6.5	012440	916
reallibrephotos/librephotos	1.0.3	—	not yet scanned
reallibrephotos/librephotos-frontend	1.0.3	00029	195
reallibrephotos/librephotos-proxy	1.0.3	0039228	2,735
bitnamilegacy/postgresql	latest	1152221	3,109
bitnamilegacy/redis	latest	1142188	2,531
alpine/k8s	1.22.6	41592262	5,315

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

641 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2025-69420	openssl@3.0.16-1~deb12u1	3.0.18-1~deb12u2
Low	DEBIAN-CVE-2026-57433	perl@5.40.1-6	5.40.1-6+deb13u1
Low	DLA-1756-1	libxslt@1.1.28-2+deb8u3	1.1.28-2+deb8u4
Low	DEBIAN-CVE-2026-8926	curl@8.14.1-2+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-6653	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	no fix listed
Low	ALPINE-CVE-2023-27535	curl@7.80.0-r0	8.0.1-r0
Low	GHSA-9493-h29p-rfm2	github.com/opencontainers/runc@v1.0.2	1.2.8
Low	ALPINE-CVE-2022-27774	curl@7.80.0-r0	7.80.0-r1
Low	DEBIAN-CVE-2026-13221	perl@5.40.1-6	5.40.1-6+deb13u1
Low	DEBIAN-CVE-2026-42496	perl@5.40.1-6	5.40.1-6+deb13u1
Low	ALPINE-CVE-2023-27536	curl@7.80.0-r0	8.0.1-r0
Low	DLA-1891-1	openldap@2.4.40+dfsg-1+deb8u3	2.4.40+dfsg-1+deb8u5
Low	DLA-2255-1	libtasn1-6@4.2-3+deb8u3	4.2-3+deb8u4
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.52.0
Low	ALPINE-CVE-2023-38546	curl@7.80.0-r0	8.4.0-r0
Low	DEBIAN-CVE-2026-3805	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4
Low	BIT-postgresql-2026-14662	postgresql@17.5.0-14	14.24.0
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.52.0
Low	BIT-postgresql-2026-6478	postgresql@17.5.0-14	14.23.0
Low	DEBIAN-CVE-2026-14456	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
Low	GHSA-mh63-6h87-95cp	github.com/golang-jwt/jwt/v4@v4.0.0	4.5.2
Low	DLA-1586-1	openssl@1.0.1t-1+deb8u7	1.0.1t-1+deb8u10
Low	GO-2021-0263	stdlib@go1.16.9	1.16.10
Low	DEBIAN-CVE-2023-40403	libxslt@1.1.35-1+deb12u1	1.1.35-1+deb12u2
Low	GHSA-8gwj-m6vh-2g6j	k8s.io/kops@v1.21.2	1.25.4
Low	DEBIAN-CVE-2026-9076	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2
Low	DEBIAN-CVE-2026-82209	curl@8.14.1-2+deb13u3	no fix listed
Low	BIT-postgresql-2026-14664	postgresql@17.5.0-14	14.24.0
Low	BIT-postgresql-2026-14670	postgresql@17.5.0-14	14.24.0
Low	BIT-postgresql-2026-15742	postgresql@17.5.0-14	14.24.0
Low	DEBIAN-CVE-2026-62292	libheif@1.19.8-1	1.19.8-1+deb13u1
Low	DEBIAN-CVE-2026-66032	libssh2@1.11.1-1	1.11.1-1+deb13u2
Low	GO-2023-1571	stdlib@go1.17.6	1.19.6
Low	DLA-2213-1	exim4@4.84.2-2+deb8u4	4.84.2-2+deb8u7
Low	BIT-postgresql-2026-19385	postgresql@17.5.0-14	14.24.0
Low	DEBIAN-CVE-2026-80255	curl@8.14.1-2+deb13u3	no fix listed
Low	BIT-postgresql-2026-14671	postgresql@17.5.0-14	14.24.0
Low	BIT-postgresql-2026-14677	postgresql@17.5.0-14	14.24.0
Low	BIT-postgresql-2026-14680	postgresql@17.5.0-14	14.24.0
Low	GHSA-7hfp-qfw3-5jxh	helm.sh/helm/v3@v3.7.1	3.9.4
Low	DLA-2199-1	openldap@2.4.40+dfsg-1+deb8u3	2.4.40+dfsg-1+deb8u6
Low	BIT-redis-2025-46818	redis@8.0.3-1	6.2.20
Low	DEBIAN-CVE-2026-12087	perl@5.40.1-6	5.40.1-6+deb13u1
Low	BIT-postgresql-2025-8715	postgresql@17.5.0-14	13.22.0
Low	DLA-1973-1	libxslt@1.1.28-2+deb8u3	1.1.28-2+deb8u6
Low	DLA-2203-1	sqlite3@3.8.7.1-1+deb8u2	3.8.7.1-1+deb8u5
Low	DLA-1524-1	libxml2@2.9.1+dfsg1-5+deb8u5	2.9.1+dfsg1-5+deb8u7
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.30.0	1.83.1
Low	BIT-postgresql-2026-6477	postgresql@17.5.0-14	14.23.0
Low	DEBIAN-CVE-2026-0915	glibc@2.36-9+deb12u10	2.36-9+deb12u14

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.6latest	24 days ago	1.0.3	618249968	14,801

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/k8sonlab/librephotos.svg)](https://charts.stackradar.io/charts/k8sonlab/librephotos)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.