librephotos 1.1.6 Helm chart

Name: librephotos Helm chart 1.1.6: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

k8sonlab

Scored 15 Sept 2026

Helmchart used to install Librephotos in a microservice manner

Version 1.1.6 25 days agoapp version 1.0.3 0Artifact Hub

librephotos 1.1.6 deploys 7 container images: library/postgres, reallibrephotos/librephotos, reallibrephotos/librephotos-frontend, reallibrephotos/librephotos-proxy and 3 more. Across the 6 measured, 1,240 findings — 5 critical, 19 high — 3 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 8.0.3-1, fixed in 6.2.20. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

14,833519249967

1,240 findings over 6 of 7 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres	9.6.5	012440	916
reallibrephotos/librephotos	1.0.3	—	not yet scanned
reallibrephotos/librephotos-frontend	1.0.3	00029	195
reallibrephotos/librephotos-proxy	1.0.3	0039228	2,748
bitnamilegacy/postgresql	latest	0252220	3,115
bitnamilegacy/redis	latest	1142188	2,543
alpine/k8s	1.22.6	41592262	5,316

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

865 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	BIT-postgresql-2026-6469	postgresql@17.5.0-14	14.24.0
Low	ALPINE-CVE-2023-25815	git@2.34.1-r0	2.34.8-r0
Low	DEBIAN-CVE-2026-41080	expat@2.7.1-2	2.8.2-1~deb13u1
Low	DEBIAN-CVE-2023-4016	procps@2:4.0.2-3	no fix listed
Low	DEBIAN-CVE-2025-11731	libxslt@1.1.35-1.2+deb13u3	no fix listed
Low	DEBIAN-CVE-2025-69418	openssl@3.0.16-1~deb12u1	3.0.18-1~deb12u2
Low	DEBIAN-CVE-2007-5686	shadow@1:4.17.4-2	no fix listed
Low	GO-2026-5024	golang.org/x/sys@v0.0.0-20211101204403-39c9dd37992c	0.44.0
Low	DEBIAN-CVE-2026-18477	tar@1.35+dfsg-3.1	no fix listed
Low	BIT-postgresql-2025-12817	postgresql@17.5.0-14	13.23.0
Low	BIT-postgresql-2025-8713	postgresql@17.5.0-14	13.22.0
Low	GHSA-xjvp-4fhw-gc47	github.com/opencontainers/runc@v1.0.2	1.3.6
Low	DEBIAN-CVE-2026-36849	tiff@4.7.0-3+deb13u2	no fix listed
Low	DEBIAN-CVE-2026-53612	util-linux@2.41-5	2.41.5-0+deb13u1
Low	DEBIAN-CVE-2026-53613	util-linux@2.41-5	2.41.5-0+deb13u1
Low	DEBIAN-CVE-2026-53614	util-linux@2.41-5	2.41.5-0+deb13u1
Low	DEBIAN-CVE-2026-53615	util-linux@2.41-5	2.41.5-0+deb13u1
Low	DEBIAN-CVE-2026-77117	glibc@2.41-12+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-80489	glibc@2.41-12+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-84450	libheif@1.19.8-1	no fix listed
Low	DEBIAN-CVE-2026-84451	libheif@1.19.8-1	no fix listed
Low	DLA-1563-1	tzdata@2017b-0+deb8u1	2018g-0+deb8u1
Low	DLA-1606-1	gcc-4.9@4.9.2-10	4.9.2-10+deb8u2
Low	DLA-1625-1	tzdata@2017b-0+deb8u1	2018i-0+deb8u1
Low	DLA-1698-2	file@1:5.22+15-2+deb8u3	1:5.22+15-2+deb8u7
Low	DLA-1744-1	tzdata@2017b-0+deb8u1	2019a-0+deb8u1
Low	DLA-1762-2	systemd@215-17+deb8u7	215-17+deb8u13
Low	DLA-1833-2	bzip2@1.0.6-7+b3	1.0.6-7+deb8u2
Low	DLA-1957-1	tzdata@2017b-0+deb8u1	2019c-0+deb8u1
Low	DSA-4117-1	gcc-4.9@4.9.2-10	4.9.2-10+deb8u1
Low	DSA-5979-2	libxslt@1.1.35-1+deb12u1	1.1.35-1+deb12u3
Low	GO-2022-0360	github.com/containerd/containerd@v1.5.7	1.4.12
Low	GO-2022-0379	github.com/docker/distribution@v2.7.1+incompatible	2.8.0+incompatible
Low	GO-2022-1107	github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	20.10.20+incompatible
Low	GO-2023-2048	github.com/cyphar/filepath-securejoin@v0.2.2	0.2.4
Low	GO-2023-2153	google.golang.org/grpc@v1.30.0	1.56.3
Low	GO-2023-2412	github.com/containerd/containerd@v1.5.9	1.6.26
Low	GO-2024-2846	github.com/containerd/containerd@v1.5.9	1.5.11
Low	GO-2024-2914	github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	20.10.11+incompatible
Low	GO-2026-5932	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	no fix listed
Low	GO-2026-6061	google.golang.org/grpc@v1.30.0	1.82.1
Low	GHSA-v994-f8vw-g7j4	github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	20.10.9
Low	DEBIAN-CVE-2026-40228	systemd@257.13-1~deb13u1	no fix listed
Low	GHSA-4vq8-7jfc-9cvp	github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	25.0.13
Low	GHSA-m8cg-xc2p-r3fc	github.com/opencontainers/runc@v1.0.2	1.1.5
Low	BIT-postgresql-2026-14681	postgresql@17.5.0-14	17.11.0
Low	DEBIAN-CVE-2025-6170	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u3
Low	DEBIAN-CVE-2026-57062	gnupg2@2.2.40-1.1	no fix listed
Low	GHSA-6vgw-5pg2-w6jp	pip@22.0.4	26.0
Low	DEBIAN-CVE-2026-53910	diffutils@1:3.10-4	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.6latest	25 days ago	1.0.3	519249967	14,833

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/k8sonlab/librephotos.svg)](https://charts.stackradar.io/charts/k8sonlab/librephotos)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.