librephotos 1.2.0 Helm chart

Name: librephotos Helm chart 1.2.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

k8sonlab

Scored 24 Oct 2026

Helmchart used to install Librephotos in a microservice manner

Version 1.2.0 yesterdayapp version 1.4.0 0Artifact Hub

librephotos 1.2.0 deploys 7 container images: library/postgres, reallibrephotos/librephotos, reallibrephotos/librephotos-frontend, reallibrephotos/librephotos-proxy and 3 more. Across them, 1,414 findings — 11 critical, 20 high — 3 on CISA KEV. The highest contribution is DSA-4110-1 in exim4 4.84.2-2+deb8u4, fixed in 4.84.2-2+deb8u5. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

18,62811203371,046

1,414 findings over 7 of 7 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres	9.6.5	243227	1,445
reallibrephotos/librephotos	1.4.0	0015150	1,596
reallibrephotos/librephotos-frontend	1.4.0	00439	501
reallibrephotos/librephotos-proxy	1.4.0	0025160	1,785
bitnamilegacy/postgresql	latest	1157237	3,415
bitnamilegacy/redis	latest	2051215	3,192
alpine/k8s	1.22.6	615153218	6,694

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

652 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DLA-1524-1	libxml2@2.9.1+dfsg1-5+deb8u5	2.9.1+dfsg1-5+deb8u7
Low	DEBIAN-CVE-2026-74860	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	GO-2025-4006	stdlib@go1.17.6	1.24.8
Low	BIT-postgresql-2026-6477	postgresql@17.5.0-14	14.23.0
Low	GO-2024-2961	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.0.0-20220525230936-793ad666bf5e
Low	DEBIAN-CVE-2026-82560	perl@5.40.1-6+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-93990	expat@2.8.3-1~deb13u1	2.9.0-1~deb13u1
Low	ALPINE-CVE-2023-0465	openssl@1.1.1n-r0	1.1.1t-r2
Low	GHSA-6hwg-w5jg-9c6x	github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	19.03.9
Low	DEBIAN-CVE-2026-54874	openssl@3.0.16-1~deb12u1	3.0.22-1~deb12u1
Low	GO-2026-4870	stdlib@go1.24.13	1.25.9
Low	DEBIAN-CVE-2026-41992	gzip@1.12-1	no fix listed
Low	GO-2026-4971	stdlib@go1.24.13	1.25.10
Low	DEBIAN-CVE-2026-113351	expat@2.8.3-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-0915	glibc@2.36-9+deb12u10	2.36-9+deb12u14
Low	GHSA-8ppf-4f7h-5ppj	pyasn1@0.4.8	0.6.4
Low	GHSA-hm4w-wwcw-mr6r	pyasn1@0.4.8	0.6.4
Low	GHSA-m4p7-r5rc-7g4j	pyasn1@0.4.8	0.6.4
Low	GO-2026-4947	stdlib@go1.24.13	1.25.9
Low	DEBIAN-CVE-2026-48959	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u4
Low	BIT-postgresql-2026-6637	postgresql@17.5.0-14	14.23.0
Low	BIT-postgresql-2026-6479	postgresql@17.5.0-14	14.23.0
Low	GHSA-5x8w-8jj5-q52h	pillow@12.3.0	13.0.0
Low	GHSA-8g5g-8vmr-9782	pillow@12.3.0	13.0.0
Low	GO-2026-5037	stdlib@go1.24.13	1.25.11
Low	ALPINE-CVE-2022-39253	git@2.34.1-r0	2.34.5-r0
Low	DEBIAN-CVE-2025-69419	openssl@3.0.16-1~deb12u1	3.0.18-1~deb12u2
Low	DLA-1932-1	openssl@1.0.1t-1+deb8u7	1.0.1t-1+deb8u12
Low	ALPINE-CVE-2023-23915	curl@7.80.0-r0	7.80.0-r6
Low	BIT-postgresql-2026-18408	postgresql@17.5.0-14	14.24.0
Low	ALPINE-CVE-2023-27538	curl@7.80.0-r0	8.0.1-r0
Low	GO-2026-6603	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d	0.60.0
Low	GO-2026-6603	stdlib@go1.24.13	1.26.9
Low	GO-2026-5972	stdlib@go1.24.13	1.25.13
Low	GO-2026-6088	stdlib@go1.24.13	1.25.13
Low	GO-2026-6089	stdlib@go1.24.13	1.25.13
Low	GO-2026-6090	stdlib@go1.24.13	1.25.13
Low	GO-2026-6611	stdlib@go1.24.13	1.26.9
Low	GO-2026-6611	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d	0.60.0
Low	GHSA-wf93-45jw-7689	pip@24.0	26.1.2
Low	UBUNTU-CVE-2026-8643	python-pip@24.0+dfsg-1ubuntu1.3	no fix listed
Low	GO-2023-1987	stdlib@go1.17.6	1.19.12
Low	DEBIAN-CVE-2026-80229	curl@8.14.1-2+deb13u7	no fix listed
Low	GO-2026-5038	stdlib@go1.24.13	1.25.11
Low	GHSA-vxq7-64xx-v4gw	urllib3@1.26.9	2.8.0
Low	DEBIAN-CVE-2009-4487	nginx@1.30.6-1~trixie	no fix listed
Low	DEBIAN-CVE-2024-2236	libgcrypt20@1.11.0-7+deb13u1	no fix listed
Low	GHSA-mrfp-p49p-3hf2	pillow@12.3.0	13.0.0
Low	GO-2026-6218	stdlib@go1.24.13	1.25.13
Low	DLA-1560-1	gnutls28@3.3.8-6+deb8u7	3.3.30-0+deb8u1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.2.0latest	yesterday	1.4.0	11203371,046	18,628
1.1.7	20 days ago	1.2.1	11203361,072	18,785
1.1.6	2 months ago	1.0.3	1120337988	18,284

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/k8sonlab/librephotos.svg)](https://charts.stackradar.io/charts/k8sonlab/librephotos)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.