librephotos 1.2.0 Helm chart

Name: librephotos Helm chart 1.2.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

k8sonlab

Scored 24 Oct 2026

Helmchart used to install Librephotos in a microservice manner

Version 1.2.0 yesterdayapp version 1.4.0 0Artifact Hub

librephotos 1.2.0 deploys 7 container images: library/postgres, reallibrephotos/librephotos, reallibrephotos/librephotos-frontend, reallibrephotos/librephotos-proxy and 3 more. Across them, 1,414 findings — 11 critical, 20 high — 3 on CISA KEV. The highest contribution is DSA-4110-1 in exim4 4.84.2-2+deb8u4, fixed in 4.84.2-2+deb8u5. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

18,62811203371,046

1,414 findings over 7 of 7 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres	9.6.5	243227	1,445
reallibrephotos/librephotos	1.4.0	0015150	1,596
reallibrephotos/librephotos-frontend	1.4.0	00439	501
reallibrephotos/librephotos-proxy	1.4.0	0025160	1,785
bitnamilegacy/postgresql	latest	1157237	3,415
bitnamilegacy/redis	latest	2051215	3,192
alpine/k8s	1.22.6	615153218	6,694

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

955 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-4046	glibc@2.36-9+deb12u10	2.36-9+deb12u14
Low	GO-2025-4009	stdlib@go1.17.6	1.24.8
Low	DEBIAN-CVE-2026-54411	pam@1.7.0-5	no fix listed
Low	DLA-1524-1	libxml2@2.9.1+dfsg1-5+deb8u5	2.9.1+dfsg1-5+deb8u7
Low	DEBIAN-CVE-2026-74860	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	GO-2025-4006	stdlib@go1.17.6	1.24.8
Low	BIT-postgresql-2026-6477	postgresql@17.5.0-14	14.23.0
Low	GO-2024-2961	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.0.0-20220525230936-793ad666bf5e
Low	DEBIAN-CVE-2026-82560	perl@5.40.1-6+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-93990	expat@2.8.3-1~deb13u1	2.9.0-1~deb13u1
Low	ALPINE-CVE-2023-0465	openssl@1.1.1n-r0	1.1.1t-r2
Low	GHSA-6hwg-w5jg-9c6x	github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	19.03.9
Low	DEBIAN-CVE-2026-54874	openssl@3.0.16-1~deb12u1	3.0.22-1~deb12u1
Low	GO-2026-4870	stdlib@go1.24.13	1.25.9
Low	DEBIAN-CVE-2026-41992	gzip@1.12-1	no fix listed
Low	GO-2026-4971	stdlib@go1.24.13	1.25.10
Low	DEBIAN-CVE-2026-113351	expat@2.8.3-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-0915	glibc@2.36-9+deb12u10	2.36-9+deb12u14
Low	GHSA-8ppf-4f7h-5ppj	pyasn1@0.4.8	0.6.4
Low	GHSA-hm4w-wwcw-mr6r	pyasn1@0.4.8	0.6.4
Low	GHSA-m4p7-r5rc-7g4j	pyasn1@0.4.8	0.6.4
Low	GO-2026-4947	stdlib@go1.24.13	1.25.9
Low	DEBIAN-CVE-2026-48959	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u4
Low	BIT-postgresql-2026-6637	postgresql@17.5.0-14	14.23.0
Low	BIT-postgresql-2026-6479	postgresql@17.5.0-14	14.23.0
Low	GHSA-5x8w-8jj5-q52h	pillow@12.3.0	13.0.0
Low	GHSA-8g5g-8vmr-9782	pillow@12.3.0	13.0.0
Low	GO-2026-5037	stdlib@go1.24.13	1.25.11
Low	ALPINE-CVE-2022-39253	git@2.34.1-r0	2.34.5-r0
Low	DEBIAN-CVE-2025-69419	openssl@3.0.16-1~deb12u1	3.0.18-1~deb12u2
Low	DLA-1932-1	openssl@1.0.1t-1+deb8u7	1.0.1t-1+deb8u12
Low	ALPINE-CVE-2023-23915	curl@7.80.0-r0	7.80.0-r6
Low	BIT-postgresql-2026-18408	postgresql@17.5.0-14	14.24.0
Low	ALPINE-CVE-2023-27538	curl@7.80.0-r0	8.0.1-r0
Low	GO-2026-6603	stdlib@go1.24.13	1.26.9
Low	GO-2026-6603	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d	0.60.0
Low	GO-2026-5972	stdlib@go1.24.13	1.25.13
Low	GO-2026-6088	stdlib@go1.24.13	1.25.13
Low	GO-2026-6089	stdlib@go1.24.13	1.25.13
Low	GO-2026-6090	stdlib@go1.24.13	1.25.13
Low	GO-2026-6611	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d	0.60.0
Low	GO-2026-6611	stdlib@go1.24.13	1.26.9
Low	GHSA-wf93-45jw-7689	pip@24.0	26.1.2
Low	UBUNTU-CVE-2026-8643	python-pip@24.0+dfsg-1ubuntu1.3	no fix listed
Low	GO-2023-1987	stdlib@go1.17.6	1.19.12
Low	DEBIAN-CVE-2026-80229	curl@8.14.1-2+deb13u7	no fix listed
Low	GO-2026-5038	stdlib@go1.24.13	1.25.11
Low	GHSA-vxq7-64xx-v4gw	urllib3@1.26.9	2.8.0
Low	DEBIAN-CVE-2009-4487	nginx@1.30.6-1~trixie	no fix listed
Low	DEBIAN-CVE-2024-2236	libgcrypt20@1.11.0-7+deb13u1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.2.0latest	yesterday	1.4.0	11203371,046	18,628
1.1.7	20 days ago	1.2.1	11203361,072	18,785
1.1.6	2 months ago	1.0.3	1120337988	18,284

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/k8sonlab/librephotos.svg)](https://charts.stackradar.io/charts/k8sonlab/librephotos)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.