librephotos 1.2.0 Helm chart

Name: librephotos Helm chart 1.2.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

k8sonlab

Not scored yet

Helmchart used to install Librephotos in a microservice manner

Version 1.2.0 yesterdayapp version 1.4.0 0Artifact Hub

librephotos 1.2.0 deploys 7 container images: library/postgres, reallibrephotos/librephotos, reallibrephotos/librephotos-frontend, reallibrephotos/librephotos-proxy and 3 more. The highest contribution is DSA-4110-1 in exim4 4.84.2-2+deb8u4, fixed in 4.84.2-2+deb8u5. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

Not yet scored

The daily scoring run has not folded the 7 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres	9.6.5	243227	1,445
reallibrephotos/librephotos	1.4.0	—	not yet scanned
reallibrephotos/librephotos-frontend	1.4.0	—	not yet scanned
reallibrephotos/librephotos-proxy	1.4.0	—	not yet scanned
bitnamilegacy/postgresql	latest	1153241	3,340
bitnamilegacy/redis	latest	2049217	3,131
alpine/k8s	1.22.6	615154216	6,679

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

764 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2022-40304	libxml2@2.9.13-r0	2.9.14-r2
Medium	DEBIAN-CVE-2026-45447	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2
Medium	ALPINE-CVE-2022-39260	git@2.34.1-r0	2.34.5-r0
Medium	ALPINE-CVE-2023-29007	git@2.34.1-r0	2.34.8-r0
Medium	BIT-redis-2025-46817	redis@8.0.3-1	6.2.20
Medium	ALPINE-CVE-2022-1586	pcre2@10.39-r0	10.40-r0
Medium	GHSA-cg3q-j54f-5p7p	github.com/prometheus/client_golang@v1.11.0	1.11.1
Medium	ALPINE-CVE-2022-32205	curl@7.80.0-r0	7.80.0-r2
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.31.0
Medium	DLA-2048-1	libxml2@2.9.1+dfsg1-5+deb8u5	2.9.1+dfsg1-5+deb8u8
Medium	GO-2021-0319	stdlib@go1.17.6	1.16.14
Medium	DEBIAN-CVE-2015-3276	openldap@2.5.13+dfsg-5	no fix listed
Medium	DLA-1925-1	python2.7@2.7.9-2+deb8u1	2.7.9-2+deb8u5
Medium	GO-2023-1703	stdlib@go1.17.6	1.19.8
Medium	ALPINE-CVE-2023-0215	openssl@1.1.1n-r0	1.1.1t-r0
Medium	DEBIAN-CVE-2019-1010023	glibc@2.36-9+deb12u10	no fix listed
Medium	ALPINE-CVE-2022-1587	pcre2@10.39-r0	10.40-r0
Medium	DLA-2255-1	libtasn1-6@4.2-3+deb8u3	4.2-3+deb8u4
Medium	DSA-4086-1	libxml2@2.9.1+dfsg1-5+deb8u5	2.9.1+dfsg1-5+deb8u6
Medium	DLA-2199-1	openldap@2.4.40+dfsg-1+deb8u3	2.4.40+dfsg-1+deb8u6
Medium	GO-2021-0263	stdlib@go1.16.9	1.16.10
Medium	GHSA-vvpx-j8f3-3w6h	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d	0.7.0
Medium	GO-2023-1571	stdlib@go1.17.6	1.19.6
Medium	DLA-2213-1	exim4@4.84.2-2+deb8u4	4.84.2-2+deb8u7
Medium	BIT-redis-2026-23631	redis@8.0.3-1	7.2.14
Medium	DLA-1973-1	libxslt@1.1.28-2+deb8u3	1.1.28-2+deb8u6
Medium	GO-2024-2887	stdlib@go1.17.6	1.21.11
Medium	DLA-2203-1	sqlite3@3.8.7.1-1+deb8u2	3.8.7.1-1+deb8u5
Medium	GO-2022-0435	stdlib@go1.17.6	1.17.9
Medium	ALPINE-CVE-2022-32208	curl@7.80.0-r0	7.80.0-r2
Medium	ALPINE-CVE-2023-0464	openssl@1.1.1n-r0	1.1.1t-r2
Medium	GHSA-hp87-p4gw-j4gq	gopkg.in/yaml.v3@v3.0.0-20200313102051-9f266ea9e77c	3.0.1
Medium	BIT-redis-2026-25243	redis@8.0.3-1	6.2.22
Medium	GO-2022-0288	golang.org/x/net@v0.0.0-20211101193420-4a448f8816b3	0.0.0-20211209124913-491a49abca63
Medium	GO-2022-0288	stdlib@go1.16.9	1.16.12
Medium	ALPINE-CVE-2023-27534	curl@7.80.0-r0	8.0.1-r0
Medium	GHSA-8c26-wmh5-6g9v	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.0.0-20220314234659-1baeb1ce4c0b
Medium	DSA-4071-1	sensible-utils@0.0.9	0.0.9+deb8u1
Medium	GHSA-4374-p667-p6c8	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d	0.17.0
Medium	GO-2023-2102	stdlib@go1.17.6	1.20.10
Medium	ALPINE-CVE-2022-42915	curl@7.80.0-r0	7.80.0-r4
Medium	GHSA-j249-ghv5-7mxv	github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	18.09.8
Medium	GHSA-6635-c626-vj4r	github.com/Masterminds/vcs@v1.13.1	1.13.2
Medium	ALPINE-CVE-2023-27533	curl@7.80.0-r0	8.0.1-r0
Medium	GO-2023-1752	stdlib@go1.17.6	1.19.9
Medium	ALPINE-CVE-2022-27775	curl@7.80.0-r0	7.80.0-r1
Medium	GHSA-69cg-p879-7622	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d	0.0.0-20220906165146-f3363e06e74c
Medium	GO-2022-0969	stdlib@go1.17.6	1.18.6
Medium	GO-2021-0264	stdlib@go1.16.9	1.16.10
Medium	GO-2021-0347	stdlib@go1.17.6	1.16.15

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.2.0latest	yesterday	1.4.0	—	—
1.1.7	20 days ago	1.2.1	11203311,076	18,634
1.1.6	2 months ago	1.0.3	1120332992	18,133

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/k8sonlab/librephotos.svg)](https://charts.stackradar.io/charts/k8sonlab/librephotos)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.