librephotos 1.1.7 Helm chart

Name: librephotos Helm chart 1.1.7: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

k8sonlab

Scored 6 Oct 2026

Helmchart used to install Librephotos in a microservice manner

Version 1.1.7 2 days agoapp version 1.2.1 0Artifact Hub

librephotos 1.1.7 deploys 7 container images: library/postgres, reallibrephotos/librephotos, reallibrephotos/librephotos-frontend, reallibrephotos/librephotos-proxy and 3 more. Across them, 1,291 findings — 11 critical, 20 high — 3 on CISA KEV. The highest contribution is DSA-4110-1 in exim4 4.84.2-2+deb8u4, fixed in 4.84.2-2+deb8u5. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

17,4701120335925

1,291 findings over 7 of 7 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres	9.6.5	243227	1,446
reallibrephotos/librephotos	1.2.1	001499	1,082
reallibrephotos/librephotos-frontend	1.2.1	00326	340
reallibrephotos/librephotos-proxy	1.2.1	0027153	1,855
bitnamilegacy/postgresql	latest	1159228	3,385
bitnamilegacy/redis	latest	2052194	3,009
alpine/k8s	1.22.6	615148198	6,353

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

869 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2026-4977	stdlib@go1.24.13	1.25.10
Low	DEBIAN-CVE-2026-57433	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u4
Low	GO-2025-4097	github.com/opencontainers/runc@v1.0.2	1.2.8
Low	DEBIAN-CVE-2026-8926	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-6653	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	UBUNTU-CVE-2026-19445	python3.12@3.12.3-1ubuntu0.17	no fix listed
Low	GO-2026-4986	stdlib@go1.24.13	1.25.10
Low	ALPINE-CVE-2023-27535	curl@7.80.0-r0	8.0.1-r0
Low	GO-2026-4918	stdlib@go1.24.13	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d	0.53.0
Low	GHSA-9493-h29p-rfm2	github.com/opencontainers/runc@v1.0.2	1.2.8
Low	ALPINE-CVE-2022-27774	curl@7.80.0-r0	7.80.0-r1
Low	DEBIAN-CVE-2026-13221	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u4
Low	DEBIAN-CVE-2026-42496	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u4
Low	ALPINE-CVE-2023-27536	curl@7.80.0-r0	8.0.1-r0
Low	DLA-1891-1	openldap@2.4.40+dfsg-1+deb8u3	2.4.40+dfsg-1+deb8u5
Low	GO-2024-2599	stdlib@go1.17.6	1.21.8
Low	BIT-postgresql-2026-15741	postgresql@17.5.0-14	14.24.0
Low	BIT-postgresql-2026-14662	postgresql@17.5.0-14	14.24.0
Low	UBUNTU-CVE-2026-42013	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	GHSA-mh63-6h87-95cp	github.com/golang-jwt/jwt/v4@v4.0.0	4.5.2
Low	DLA-2156-1	e2fsprogs@1.42.12-2+b1	1.42.12-2+deb8u2
Low	BIT-postgresql-2026-6478	postgresql@17.5.0-14	14.23.0
Low	DEBIAN-CVE-2026-31789	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2
Low	DLA-1586-1	openssl@1.0.1t-1+deb8u7	1.0.1t-1+deb8u10
Low	GHSA-8gwj-m6vh-2g6j	k8s.io/kops@v1.21.2	1.25.4
Low	ALPINE-CVE-2023-38546	curl@7.80.0-r0	8.4.0-r0
Low	GO-2022-0532	stdlib@go1.17.6	1.17.11
Low	BIT-postgresql-2026-14664	postgresql@17.5.0-14	14.24.0
Low	BIT-postgresql-2026-14670	postgresql@17.5.0-14	14.24.0
Low	DEBIAN-CVE-2026-45445	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2
Low	BIT-postgresql-2025-8715	postgresql@17.5.0-14	13.22.0
Low	BIT-postgresql-2026-19385	postgresql@17.5.0-14	14.24.0
Low	BIT-postgresql-2026-14671	postgresql@17.5.0-14	14.24.0
Low	BIT-postgresql-2026-14677	postgresql@17.5.0-14	14.24.0
Low	BIT-postgresql-2026-14680	postgresql@17.5.0-14	14.24.0
Low	UBUNTU-CVE-2025-66418	python-pip@24.0+dfsg-1ubuntu1.3	24.0+dfsg-1ubuntu1.3+esm1
Low	GHSA-7hfp-qfw3-5jxh	helm.sh/helm/v3@v3.7.1	3.9.4
Low	BIT-redis-2025-46818	redis@8.0.3-1	6.2.20
Low	DEBIAN-CVE-2026-12087	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u4
Low	DEBIAN-CVE-2025-4802	glibc@2.36-9+deb12u10	2.36-9+deb12u11
Low	DEBIAN-CVE-2026-4046	glibc@2.36-9+deb12u10	2.36-9+deb12u14
Low	GO-2025-4009	stdlib@go1.17.6	1.24.8
Low	DEBIAN-CVE-2026-54411	pam@1.7.0-5	no fix listed
Low	DLA-1524-1	libxml2@2.9.1+dfsg1-5+deb8u5	2.9.1+dfsg1-5+deb8u7
Low	GO-2025-4006	stdlib@go1.17.6	1.24.8
Low	GHSA-557j-xg8c-q2mm	helm.sh/helm/v3@v3.7.1	3.17.4
Low	BIT-postgresql-2026-6477	postgresql@17.5.0-14	14.23.0
Low	GO-2024-2961	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.0.0-20220525230936-793ad666bf5e
Low	DEBIAN-CVE-2026-74860	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.7latest	2 days ago	1.2.1	1120335925	17,470
1.1.6	1 month ago	1.0.3	1120335938	17,731

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/k8sonlab/librephotos.svg)](https://charts.stackradar.io/charts/k8sonlab/librephotos)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.