librephotos 1.1.7 Helm chart

Name: librephotos Helm chart 1.1.7: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

k8sonlab

Scored 6 Oct 2026

Helmchart used to install Librephotos in a microservice manner

Version 1.1.7 2 days agoapp version 1.2.1 0Artifact Hub

librephotos 1.1.7 deploys 7 container images: library/postgres, reallibrephotos/librephotos, reallibrephotos/librephotos-frontend, reallibrephotos/librephotos-proxy and 3 more. Across them, 1,291 findings — 11 critical, 20 high — 3 on CISA KEV. The highest contribution is DSA-4110-1 in exim4 4.84.2-2+deb8u4, fixed in 4.84.2-2+deb8u5. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

17,4701120335925

1,291 findings over 7 of 7 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres	9.6.5	243227	1,446
reallibrephotos/librephotos	1.2.1	001499	1,082
reallibrephotos/librephotos-frontend	1.2.1	00326	340
reallibrephotos/librephotos-proxy	1.2.1	0027153	1,855
bitnamilegacy/postgresql	latest	1159228	3,385
bitnamilegacy/redis	latest	2052194	3,009
alpine/k8s	1.22.6	615148198	6,353

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

869 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	DLA-1912-1	expat@2.1.0-6+deb8u4	2.1.0-6+deb8u6
Medium	ALPINE-CVE-2022-40304	libxml2@2.9.13-r0	2.9.14-r2
Medium	DEBIAN-CVE-2026-45447	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2
Medium	BIT-redis-2025-46817	redis@8.0.3-1	6.2.20
Medium	ALPINE-CVE-2022-1586	pcre2@10.39-r0	10.40-r0
Medium	GHSA-cg3q-j54f-5p7p	github.com/prometheus/client_golang@v1.11.0	1.11.1
Medium	DEBIAN-CVE-2018-20796	glibc@2.41-12+deb13u4	no fix listed
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.31.0
Medium	DEBIAN-CVE-2017-16232	tiff@4.7.0-3+deb13u3	no fix listed
Medium	DLA-2048-1	libxml2@2.9.1+dfsg1-5+deb8u5	2.9.1+dfsg1-5+deb8u8
Medium	GO-2021-0319	stdlib@go1.17.6	1.16.14
Medium	DLA-1925-1	python2.7@2.7.9-2+deb8u1	2.7.9-2+deb8u5
Medium	ALPINE-CVE-2022-39260	git@2.34.1-r0	2.34.5-r0
Medium	DEBIAN-CVE-2015-3276	openldap@2.6.10+dfsg-1	no fix listed
Medium	ALPINE-CVE-2022-32205	curl@7.80.0-r0	7.80.0-r2
Medium	GO-2023-1703	stdlib@go1.17.6	1.19.8
Medium	DLA-2255-1	libtasn1-6@4.2-3+deb8u3	4.2-3+deb8u4
Medium	ALPINE-CVE-2022-1587	pcre2@10.39-r0	10.40-r0
Medium	DEBIAN-CVE-2019-1010023	glibc@2.41-12+deb13u4	no fix listed
Medium	DSA-4086-1	libxml2@2.9.1+dfsg1-5+deb8u5	2.9.1+dfsg1-5+deb8u6
Medium	GO-2021-0263	stdlib@go1.16.9	1.16.10
Medium	GHSA-vvpx-j8f3-3w6h	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d	0.7.0
Medium	GO-2023-1571	stdlib@go1.17.6	1.19.6
Medium	DLA-2213-1	exim4@4.84.2-2+deb8u4	4.84.2-2+deb8u7
Medium	BIT-redis-2026-23631	redis@8.0.3-1	7.2.14
Medium	ALPINE-CVE-2023-0215	openssl@1.1.1n-r0	1.1.1t-r0
Medium	DLA-2199-1	openldap@2.4.40+dfsg-1+deb8u3	2.4.40+dfsg-1+deb8u6
Medium	DLA-1973-1	libxslt@1.1.28-2+deb8u3	1.1.28-2+deb8u6
Medium	GO-2024-2887	stdlib@go1.17.6	1.21.11
Medium	DLA-2203-1	sqlite3@3.8.7.1-1+deb8u2	3.8.7.1-1+deb8u5
Medium	GO-2022-0435	stdlib@go1.17.6	1.17.9
Medium	GHSA-hp87-p4gw-j4gq	gopkg.in/yaml.v3@v3.0.0-20200313102051-9f266ea9e77c	3.0.1
Medium	BIT-redis-2026-25243	redis@8.0.3-1	6.2.22
Medium	GO-2022-0288	golang.org/x/net@v0.0.0-20211101193420-4a448f8816b3	0.0.0-20211209124913-491a49abca63
Medium	GO-2022-0288	stdlib@go1.16.9	1.16.12
Medium	GHSA-8c26-wmh5-6g9v	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.0.0-20220314234659-1baeb1ce4c0b
Medium	GHSA-4374-p667-p6c8	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d	0.17.0
Medium	GO-2023-2102	stdlib@go1.17.6	1.20.10
Medium	ALPINE-CVE-2022-42915	curl@7.80.0-r0	7.80.0-r4
Medium	ALPINE-CVE-2023-0464	openssl@1.1.1n-r0	1.1.1t-r2
Medium	GHSA-j249-ghv5-7mxv	github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	18.09.8
Medium	ALPINE-CVE-2022-32208	curl@7.80.0-r0	7.80.0-r2
Medium	DSA-4071-1	sensible-utils@0.0.9	0.0.9+deb8u1
Medium	ALPINE-CVE-2023-27534	curl@7.80.0-r0	8.0.1-r0
Medium	GHSA-6635-c626-vj4r	github.com/Masterminds/vcs@v1.13.1	1.13.2
Medium	GO-2023-1752	stdlib@go1.17.6	1.19.9
Medium	GHSA-69cg-p879-7622	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d	0.0.0-20220906165146-f3363e06e74c
Medium	GO-2022-0969	stdlib@go1.17.6	1.18.6
Medium	GO-2021-0264	stdlib@go1.16.9	1.16.10
Medium	GO-2021-0347	stdlib@go1.17.6	1.16.15

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.7latest	2 days ago	1.2.1	1120335925	17,470
1.1.6	1 month ago	1.0.3	1120335938	17,731

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/k8sonlab/librephotos.svg)](https://charts.stackradar.io/charts/k8sonlab/librephotos)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.