librephotos 1.1.7 Helm chart

Name: librephotos Helm chart 1.1.7: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

k8sonlab

Scored 6 Oct 2026

Helmchart used to install Librephotos in a microservice manner

Version 1.1.7 2 days agoapp version 1.2.1 0Artifact Hub

librephotos 1.1.7 deploys 7 container images: library/postgres, reallibrephotos/librephotos, reallibrephotos/librephotos-frontend, reallibrephotos/librephotos-proxy and 3 more. Across them, 1,291 findings — 11 critical, 20 high — 3 on CISA KEV. The highest contribution is DSA-4110-1 in exim4 4.84.2-2+deb8u4, fixed in 4.84.2-2+deb8u5. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

17,4701120335925

1,291 findings over 7 of 7 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres	9.6.5	243227	1,446
reallibrephotos/librephotos	1.2.1	001499	1,082
reallibrephotos/librephotos-frontend	1.2.1	00326	340
reallibrephotos/librephotos-proxy	1.2.1	0027153	1,855
bitnamilegacy/postgresql	latest	1159228	3,385
bitnamilegacy/redis	latest	2052194	3,009
alpine/k8s	1.22.6	615148198	6,353

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

569 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-4977	stdlib@go1.24.13	1.25.10
Low	DEBIAN-CVE-2026-57433	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u4
Low	GO-2025-4097	github.com/opencontainers/runc@v1.0.2	1.2.8
Low	DEBIAN-CVE-2026-8926	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-6653	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	UBUNTU-CVE-2026-19445	python3.12@3.12.3-1ubuntu0.17	no fix listed
Low	GO-2026-4986	stdlib@go1.24.13	1.25.10
Low	ALPINE-CVE-2023-27535	curl@7.80.0-r0	8.0.1-r0
Low	GO-2026-4918	stdlib@go1.24.13	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d	0.53.0
Low	GHSA-9493-h29p-rfm2	github.com/opencontainers/runc@v1.0.2	1.2.8
Low	ALPINE-CVE-2022-27774	curl@7.80.0-r0	7.80.0-r1
Low	DEBIAN-CVE-2026-13221	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u4
Low	DEBIAN-CVE-2026-42496	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u4
Low	ALPINE-CVE-2023-27536	curl@7.80.0-r0	8.0.1-r0
Low	DLA-1891-1	openldap@2.4.40+dfsg-1+deb8u3	2.4.40+dfsg-1+deb8u5
Low	GO-2024-2599	stdlib@go1.17.6	1.21.8
Low	BIT-postgresql-2026-15741	postgresql@17.5.0-14	14.24.0
Low	BIT-postgresql-2026-14662	postgresql@17.5.0-14	14.24.0
Low	UBUNTU-CVE-2026-42013	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	GHSA-mh63-6h87-95cp	github.com/golang-jwt/jwt/v4@v4.0.0	4.5.2
Low	DLA-2156-1	e2fsprogs@1.42.12-2+b1	1.42.12-2+deb8u2
Low	BIT-postgresql-2026-6478	postgresql@17.5.0-14	14.23.0
Low	DEBIAN-CVE-2026-31789	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2
Low	DLA-1586-1	openssl@1.0.1t-1+deb8u7	1.0.1t-1+deb8u10
Low	GHSA-8gwj-m6vh-2g6j	k8s.io/kops@v1.21.2	1.25.4
Low	ALPINE-CVE-2023-38546	curl@7.80.0-r0	8.4.0-r0
Low	GO-2022-0532	stdlib@go1.17.6	1.17.11
Low	BIT-postgresql-2026-14664	postgresql@17.5.0-14	14.24.0
Low	BIT-postgresql-2026-14670	postgresql@17.5.0-14	14.24.0
Low	DEBIAN-CVE-2026-45445	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2
Low	BIT-postgresql-2025-8715	postgresql@17.5.0-14	13.22.0
Low	BIT-postgresql-2026-19385	postgresql@17.5.0-14	14.24.0
Low	BIT-postgresql-2026-14671	postgresql@17.5.0-14	14.24.0
Low	BIT-postgresql-2026-14677	postgresql@17.5.0-14	14.24.0
Low	BIT-postgresql-2026-14680	postgresql@17.5.0-14	14.24.0
Low	UBUNTU-CVE-2025-66418	python-pip@24.0+dfsg-1ubuntu1.3	24.0+dfsg-1ubuntu1.3+esm1
Low	GHSA-7hfp-qfw3-5jxh	helm.sh/helm/v3@v3.7.1	3.9.4
Low	BIT-redis-2025-46818	redis@8.0.3-1	6.2.20
Low	DEBIAN-CVE-2026-12087	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u4
Low	DEBIAN-CVE-2025-4802	glibc@2.36-9+deb12u10	2.36-9+deb12u11
Low	DEBIAN-CVE-2026-4046	glibc@2.36-9+deb12u10	2.36-9+deb12u14
Low	GO-2025-4009	stdlib@go1.17.6	1.24.8
Low	DEBIAN-CVE-2026-54411	pam@1.7.0-5	no fix listed
Low	DLA-1524-1	libxml2@2.9.1+dfsg1-5+deb8u5	2.9.1+dfsg1-5+deb8u7
Low	GO-2025-4006	stdlib@go1.17.6	1.24.8
Low	GHSA-557j-xg8c-q2mm	helm.sh/helm/v3@v3.7.1	3.17.4
Low	BIT-postgresql-2026-6477	postgresql@17.5.0-14	14.23.0
Low	GO-2024-2961	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.0.0-20220525230936-793ad666bf5e
Low	DEBIAN-CVE-2026-74860	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.7latest	2 days ago	1.2.1	1120335925	17,470
1.1.6	1 month ago	1.0.3	1120335938	17,731

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/k8sonlab/librephotos.svg)](https://charts.stackradar.io/charts/k8sonlab/librephotos)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.