librephotos 1.2.0 Helm chart

Name: librephotos Helm chart 1.2.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

k8sonlab

Scored 24 Oct 2026

Helmchart used to install Librephotos in a microservice manner

Version 1.2.0 yesterdayapp version 1.4.0 0Artifact Hub

librephotos 1.2.0 deploys 7 container images: library/postgres, reallibrephotos/librephotos, reallibrephotos/librephotos-frontend, reallibrephotos/librephotos-proxy and 3 more. Across them, 1,414 findings — 11 critical, 20 high — 3 on CISA KEV. The highest contribution is DSA-4110-1 in exim4 4.84.2-2+deb8u4, fixed in 4.84.2-2+deb8u5. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

18,62811203371,046

1,414 findings over 7 of 7 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres	9.6.5	243227	1,445
reallibrephotos/librephotos	1.4.0	0015150	1,596
reallibrephotos/librephotos-frontend	1.4.0	00439	501
reallibrephotos/librephotos-proxy	1.4.0	0025160	1,785
bitnamilegacy/postgresql	latest	1157237	3,415
bitnamilegacy/redis	latest	2051215	3,192
alpine/k8s	1.22.6	615153218	6,694

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

652 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-9080	curl@8.14.1-2+deb13u7	no fix listed
Low	GHSA-5xm2-6676-qcp9	pillow@12.3.0	13.0.0
Low	GHSA-65qm-jvmh-6pqg	pillow@12.3.0	13.0.0
Low	GHSA-cp9v-662q-vvx9	pillow@12.3.0	13.0.0
Low	GHSA-f2g6-542v-9j58	pillow@12.3.0	13.0.0
Low	GHSA-gg2r-wvfm-q9rx	pillow@12.3.0	13.0.0
Low	GHSA-jg86-v3jv-hrpm	pillow@12.3.0	13.0.0
Low	GHSA-p4wg-p73j-c528	pillow@12.3.0	13.0.0
Low	GHSA-q45j-58j2-45rg	pillow@12.3.0	13.0.0
Low	BIT-postgresql-2026-6464	postgresql@17.5.0-14	14.24.0
Low	DEBIAN-CVE-2025-7458	sqlite3@3.40.1-2+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-9538	perl@5.40.1-6+deb13u1	no fix listed
Low	GO-2025-4014	stdlib@go1.17.6	1.24.8
Low	DEBIAN-CVE-2020-15719	openldap@2.6.10+dfsg-1	no fix listed
Low	GO-2026-6303	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.55.0
Low	GHSA-g7cr-3p24-7wf7	pillow@12.3.0	13.0.0
Low	GO-2026-6354	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.56.0
Low	DEBIAN-CVE-2026-11822	sqlite3@3.40.1-2+deb12u1	no fix listed
Low	GO-2023-2382	stdlib@go1.17.6	1.20.12
Low	DEBIAN-CVE-2026-2219	dpkg@1.21.22	1.21.23
Low	BIT-postgresql-2026-14668	postgresql@17.5.0-14	14.24.0
Low	GO-2026-6617	stdlib@go1.24.13	1.26.9
Low	GO-2026-6617	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d	0.60.0
Low	UBUNTU-CVE-2026-19553	python3.12@3.12.3-1ubuntu0.17	no fix listed
Low	DEBIAN-CVE-2026-75803	openssl@3.0.16-1~deb12u1	3.0.22-1~deb12u1
Low	UBUNTU-CVE-2026-42012	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	GO-2024-3105	stdlib@go1.17.6	1.22.7
Low	DEBIAN-CVE-2026-9545	curl@8.14.1-2+deb13u7	no fix listed
Low	GHSA-p436-gjf2-799p	github.com/docker/cli@v20.10.12+incompatible	29.2.0
Low	DEBIAN-CVE-2026-82208	curl@8.14.1-2+deb13u7	no fix listed
Low	GO-2025-4007	stdlib@go1.17.6	1.24.9
Low	DEBIAN-CVE-2026-107708	krb5@1.21.3-5+deb13u1	no fix listed
Low	GO-2026-6608	stdlib@go1.24.13	1.26.9
Low	DEBIAN-CVE-2026-12064	curl@8.14.1-2+deb13u7	no fix listed
Low	DEBIAN-CVE-2026-8932	curl@8.14.1-2+deb13u7	no fix listed
Low	DLA-2221-1	sqlite3@3.8.7.1-1+deb8u2	3.8.7.1-1+deb8u6
Low	GO-2026-6607	stdlib@go1.24.13	1.26.9
Low	DEBIAN-CVE-2026-95619	gcc-14@14.2.0-19	no fix listed
Low	DEBIAN-CVE-2026-95619	gcc-12@12.2.0-14+deb12u1	no fix listed
Low	DLA-1643-1	krb5@1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u5
Low	GO-2025-3420	stdlib@go1.17.6	1.22.11
Low	BIT-postgresql-2026-14679	postgresql@17.5.0-14	14.24.0
Low	GHSA-pxq6-2prw-chj9	github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	no fix listed
Low	GO-2025-4013	stdlib@go1.17.6	1.24.8
Low	GHSA-22hg-r758-rrw9	pillow@12.3.0	13.0.0
Low	GHSA-27h8-gf7j-v5hc	pillow@12.3.0	13.0.0
Low	GHSA-j4m9-6w36-pw47	pillow@12.3.0	13.0.0
Low	DEBIAN-CVE-2026-6791	glibc@2.41-12+deb13u4	no fix listed
Low	GO-2026-6609	stdlib@go1.24.13	1.26.9
Low	DEBIAN-CVE-2022-27943	gcc-12@12.2.0-14+deb12u1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.2.0latest	yesterday	1.4.0	11203371,046	18,628
1.1.7	20 days ago	1.2.1	11203361,072	18,785
1.1.6	2 months ago	1.0.3	1120337988	18,284

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/k8sonlab/librephotos.svg)](https://charts.stackradar.io/charts/k8sonlab/librephotos)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.