librephotos 1.1.6 Helm chart

Name: librephotos Helm chart 1.1.6: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

k8sonlab

Scored 14 Sept 2026

Helmchart used to install Librephotos in a microservice manner

Version 1.1.6 25 days agoapp version 1.0.3 0Artifact Hub

librephotos 1.1.6 deploys 7 container images: library/postgres, reallibrephotos/librephotos, reallibrephotos/librephotos-frontend, reallibrephotos/librephotos-proxy and 3 more. Across the 6 measured, 1,241 findings — 6 critical, 18 high — 3 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 8.0.3-1, fixed in 6.2.20. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

14,801618249968

1,241 findings over 6 of 7 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres	9.6.5	012440	916
reallibrephotos/librephotos	1.0.3	—	not yet scanned
reallibrephotos/librephotos-frontend	1.0.3	00029	195
reallibrephotos/librephotos-proxy	1.0.3	0039228	2,735
bitnamilegacy/postgresql	latest	1152221	3,109
bitnamilegacy/redis	latest	1142188	2,531
alpine/k8s	1.22.6	41592262	5,315

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

865 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	BIT-gdal-2026-8084	gdal@3.11.3	3.13.0
Low	DEBIAN-CVE-2025-14104	util-linux@2.41-5	2.41.3-1
Low	DEBIAN-CVE-2026-86142	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	no fix listed
Low	DEBIAN-CVE-2026-42014	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7
Low	GO-2025-3420	stdlib@go1.17.6	1.22.11
Low	GO-2026-4342	stdlib@go1.17.6	1.24.12
Low	DEBIAN-CVE-2026-4105	systemd@252.38-1~deb12u1	252.39-1~deb12u2
Low	GO-2024-2598	stdlib@go1.17.6	1.21.8
Low	GO-2025-3751	stdlib@go1.17.6	1.23.10
Low	DEBIAN-CVE-2026-78409	util-linux@2.41-5	no fix listed
Low	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.30.0	1.82.2
Low	GHSA-m425-mq94-257g	google.golang.org/grpc@v1.30.0	1.56.3
Low	DEBIAN-CVE-2026-45446	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2
Low	BIT-gdal-2026-49014	gdal@3.11.3	3.13.1
Low	BIT-gdal-2026-8088	gdal@3.11.3	3.13.0
Low	GO-2024-2961	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.0.0-20220525230936-793ad666bf5e
Low	GHSA-g4mx-q9vg-27p4	urllib3@1.26.9	1.26.18
Low	GO-2025-4116	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.43.0
Low	GO-2026-4870	stdlib@go1.24.13	1.25.9
Low	GO-2022-0532	stdlib@go1.17.6	1.17.11
Low	GO-2025-4009	stdlib@go1.17.6	1.24.8
Low	DEBIAN-CVE-2026-86138	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	no fix listed
Low	GO-2026-4947	stdlib@go1.24.13	1.25.9
Low	DEBIAN-CVE-2026-86143	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	no fix listed
Low	GHSA-rg2x-37c3-w2rh	github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	no fix listed
Low	GO-2025-4006	stdlib@go1.17.6	1.24.8
Low	BIT-gdal-2026-8213	gdal@3.11.3	3.13.0
Low	DEBIAN-CVE-2026-56412	expat@2.7.1-2	2.8.2-1~deb13u1
Low	DEBIAN-CVE-2025-61147	libde265@1.0.15-1+b3	1.0.15-1+deb13u1
Low	GO-2026-5037	stdlib@go1.24.13	1.25.11
Low	DEBIAN-CVE-2026-40225	systemd@252.38-1~deb12u1	252.39-1~deb12u2
Low	GO-2026-4971	stdlib@go1.24.13	1.25.10
Low	BIT-postgresql-2026-14672	postgresql@17.5.0-14	16.15.0
Low	DEBIAN-CVE-2026-50219	expat@2.7.1-2	2.8.2-1~deb13u1
Low	DEBIAN-CVE-2026-56409	expat@2.7.1-2	2.8.2-1~deb13u1
Low	GO-2026-5972	stdlib@go1.24.13	1.25.13
Low	GO-2026-6088	stdlib@go1.24.13	1.25.13
Low	GO-2026-6089	stdlib@go1.24.13	1.25.13
Low	GO-2026-6090	stdlib@go1.24.13	1.25.13
Low	DEBIAN-CVE-2026-27171	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed
Low	DEBIAN-CVE-2017-14159	openldap@2.6.10+dfsg-1	no fix listed
Low	DEBIAN-CVE-2025-29088	sqlite3@3.40.1-2+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-50813	sqlite3@3.46.1-7+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-32777	expat@2.7.1-2	2.8.2-1~deb13u1
Low	GO-2026-5038	stdlib@go1.24.13	1.25.11
Low	DEBIAN-CVE-2017-18018	coreutils@9.7-3	no fix listed
Low	DEBIAN-CVE-2026-86139	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	no fix listed
Low	DEBIAN-CVE-2026-13757	p11-kit@0.25.5-3	no fix listed
Low	DEBIAN-CVE-2026-47709	libheif@1.19.8-1	1.19.8-1+deb13u1
Low	DLA-1723-1	cron@3.0pl1-127+deb8u1	3.0pl1-127+deb8u2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.6latest	25 days ago	1.0.3	618249968	14,801

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/k8sonlab/librephotos.svg)](https://charts.stackradar.io/charts/k8sonlab/librephotos)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.