librephotos 1.2.0 Helm chart

Name: librephotos Helm chart 1.2.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

k8sonlab

Scored 24 Oct 2026

Helmchart used to install Librephotos in a microservice manner

Version 1.2.0 yesterdayapp version 1.4.0 0Artifact Hub

librephotos 1.2.0 deploys 7 container images: library/postgres, reallibrephotos/librephotos, reallibrephotos/librephotos-frontend, reallibrephotos/librephotos-proxy and 3 more. Across them, 1,414 findings — 11 critical, 20 high — 3 on CISA KEV. The highest contribution is DSA-4110-1 in exim4 4.84.2-2+deb8u4, fixed in 4.84.2-2+deb8u5. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

18,62811203371,046

1,414 findings over 7 of 7 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres	9.6.5	243227	1,445
reallibrephotos/librephotos	1.4.0	0015150	1,596
reallibrephotos/librephotos-frontend	1.4.0	00439	501
reallibrephotos/librephotos-proxy	1.4.0	0025160	1,785
bitnamilegacy/postgresql	latest	1157237	3,415
bitnamilegacy/redis	latest	2051215	3,192
alpine/k8s	1.22.6	615153218	6,694

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

652 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-4977	stdlib@go1.24.13	1.25.10
Low	GO-2025-4097	github.com/opencontainers/runc@v1.0.2	1.2.8
Low	DEBIAN-CVE-2026-57433	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u4
Low	GHSA-w889-685w-c8fh	pillow@12.3.0	13.0.0
Low	DEBIAN-CVE-2026-8926	curl@8.14.1-2+deb13u7	no fix listed
Low	DEBIAN-CVE-2026-6653	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	UBUNTU-CVE-2026-19445	python3.12@3.12.3-1ubuntu0.17	no fix listed
Low	GO-2026-4986	stdlib@go1.24.13	1.25.10
Low	GO-2026-4918	stdlib@go1.24.13	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d	0.53.0
Low	GHSA-9493-h29p-rfm2	github.com/opencontainers/runc@v1.0.2	1.2.8
Low	GO-2026-4601	stdlib@go1.24.13	1.25.8
Low	DEBIAN-CVE-2026-13221	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u4
Low	DLA-2156-1	e2fsprogs@1.42.12-2+b1	1.42.12-2+deb8u2
Low	DEBIAN-CVE-2026-42496	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u4
Low	DLA-1891-1	openldap@2.4.40+dfsg-1+deb8u3	2.4.40+dfsg-1+deb8u5
Low	GO-2024-2599	stdlib@go1.17.6	1.21.8
Low	BIT-postgresql-2026-15741	postgresql@17.5.0-14	14.24.0
Low	GHSA-mh63-6h87-95cp	github.com/golang-jwt/jwt/v4@v4.0.0	4.5.2
Low	DEBIAN-CVE-2026-77214	expat@2.8.3-1~deb13u1	2.9.0-1~deb13u1
Low	BIT-postgresql-2026-14662	postgresql@17.5.0-14	14.24.0
Low	UBUNTU-CVE-2026-42013	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	BIT-postgresql-2026-6478	postgresql@17.5.0-14	14.23.0
Low	DLA-1586-1	openssl@1.0.1t-1+deb8u7	1.0.1t-1+deb8u10
Low	ALPINE-CVE-2023-38546	curl@7.80.0-r0	8.4.0-r0
Low	GHSA-8gwj-m6vh-2g6j	k8s.io/kops@v1.21.2	1.25.4
Low	DEBIAN-CVE-2026-9076	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2
Low	GO-2022-0532	stdlib@go1.17.6	1.17.11
Low	BIT-postgresql-2026-14664	postgresql@17.5.0-14	14.24.0
Low	BIT-postgresql-2026-14670	postgresql@17.5.0-14	14.24.0
Low	DEBIAN-CVE-2026-45445	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2
Low	BIT-postgresql-2025-8715	postgresql@17.5.0-14	13.22.0
Low	BIT-postgresql-2026-19385	postgresql@17.5.0-14	14.24.0
Low	BIT-redis-2025-46818	redis@8.0.3-1	6.2.20
Low	BIT-postgresql-2026-14671	postgresql@17.5.0-14	14.24.0
Low	BIT-postgresql-2026-14677	postgresql@17.5.0-14	14.24.0
Low	BIT-postgresql-2026-14680	postgresql@17.5.0-14	14.24.0
Low	UBUNTU-CVE-2025-66418	python-pip@24.0+dfsg-1ubuntu1.3	24.0+dfsg-1ubuntu1.3+esm1
Low	GHSA-7hfp-qfw3-5jxh	helm.sh/helm/v3@v3.7.1	3.9.4
Low	GHSA-58r4-6rv3-gfh8	pillow@12.3.0	13.0.0
Low	GHSA-7mwm-ghpf-9vrm	pillow@12.3.0	13.0.0
Low	DEBIAN-CVE-2023-50495	ncurses@6.4-4	no fix listed
Low	UBUNTU-CVE-2026-7210	python3.12@3.12.3-1ubuntu0.17	no fix listed
Low	GHSA-557j-xg8c-q2mm	helm.sh/helm/v3@v3.7.1	3.17.4
Low	DEBIAN-CVE-2026-12087	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u4
Low	GO-2025-4116	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.43.0
Low	DEBIAN-CVE-2025-4802	glibc@2.36-9+deb12u10	2.36-9+deb12u11
Low	DEBIAN-CVE-2026-4046	glibc@2.36-9+deb12u10	2.36-9+deb12u14
Low	GO-2025-4009	stdlib@go1.17.6	1.24.8
Low	DEBIAN-CVE-2026-54411	pam@1.7.0-5	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.2.0latest	yesterday	1.4.0	11203371,046	18,628
1.1.7	20 days ago	1.2.1	11203361,072	18,785
1.1.6	2 months ago	1.0.3	1120337988	18,284

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/k8sonlab/librephotos.svg)](https://charts.stackradar.io/charts/k8sonlab/librephotos)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.