librephotos 1.2.0 Helm chart

Name: librephotos Helm chart 1.2.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

k8sonlab

Scored 24 Oct 2026

Helmchart used to install Librephotos in a microservice manner

Version 1.2.0 yesterdayapp version 1.4.0 0Artifact Hub

librephotos 1.2.0 deploys 7 container images: library/postgres, reallibrephotos/librephotos, reallibrephotos/librephotos-frontend, reallibrephotos/librephotos-proxy and 3 more. Across them, 1,414 findings — 11 critical, 20 high — 3 on CISA KEV. The highest contribution is DSA-4110-1 in exim4 4.84.2-2+deb8u4, fixed in 4.84.2-2+deb8u5. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

18,62811203371,046

1,414 findings over 7 of 7 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres	9.6.5	243227	1,445
reallibrephotos/librephotos	1.4.0	0015150	1,596
reallibrephotos/librephotos-frontend	1.4.0	00439	501
reallibrephotos/librephotos-proxy	1.4.0	0025160	1,785
bitnamilegacy/postgresql	latest	1157237	3,415
bitnamilegacy/redis	latest	2051215	3,192
alpine/k8s	1.22.6	615153218	6,694

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

955 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-mrfp-p49p-3hf2	pillow@12.3.0	13.0.0
Low	GO-2026-6218	stdlib@go1.24.13	1.25.13
Low	DLA-1560-1	gnutls28@3.3.8-6+deb8u7	3.3.30-0+deb8u1
Low	GO-2026-5942	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d	0.56.0
Low	DEBIAN-CVE-2026-0861	glibc@2.36-9+deb12u10	2.36-9+deb12u14
Low	DEBIAN-CVE-2026-31789	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2
Low	DEBIAN-CVE-2025-6297	dpkg@1.21.22	1.21.23
Low	DEBIAN-CVE-2025-6020	pam@1.5.2-6+deb12u1	1.5.2-6+deb12u2
Low	DLA-2210-1	apt@1.0.9.8.4	1.0.9.8.6
Low	DLA-1698-1	file@1:5.22+15-2+deb8u3	1:5.22+15-2+deb8u5
Low	BIT-postgresql-2026-6475	postgresql@17.5.0-14	14.23.0
Low	DEBIAN-CVE-2025-69720	ncurses@6.5+20250216-2	no fix listed
Low	GHSA-cgrx-mc8f-2prm	github.com/opencontainers/runc@v1.0.2	1.2.8
Low	GO-2024-2610	stdlib@go1.17.6	1.21.8
Low	DEBIAN-CVE-2026-42766	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2
Low	GHSA-33pg-m6jh-5237	github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	20.10.24
Low	UBUNTU-CVE-2026-86145	pcre2@10.42-4ubuntu2.1	no fix listed
Low	DEBIAN-CVE-2026-84782	openssl@3.0.16-1~deb12u1	no fix listed
Low	GO-2022-1095	stdlib@go1.17.6	1.18.8
Low	ALPINE-CVE-2022-29187	git@2.34.1-r0	2.34.4-r0
Low	BIT-postgis-2026-73515	postgis@3.4.4	3.7.0
Low	GO-2023-2041	stdlib@go1.17.6	1.20.8
Low	GO-2026-6355	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.56.0
Low	DSA-5990-1	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u4
Low	GO-2025-3751	stdlib@go1.17.6	1.23.10
Low	GO-2026-5064	github.com/containerd/containerd@v1.5.9	no fix listed
Low	GHSA-w8v5-vhqr-4h9v	diskcache@5.6.3	no fix listed
Low	DEBIAN-CVE-2026-5928	glibc@2.36-9+deb12u10	no fix listed
Low	DEBIAN-CVE-2025-15281	glibc@2.36-9+deb12u10	2.36-9+deb12u14
Low	GO-2023-2043	stdlib@go1.17.6	1.20.8
Low	UBUNTU-CVE-2026-57585	python-pip@24.0+dfsg-1ubuntu1.3	no fix listed
Low	GO-2026-4342	stdlib@go1.17.6	1.24.12
Low	DEBIAN-CVE-2026-82209	curl@8.14.1-2+deb13u7	no fix listed
Low	GHSA-2qjp-425j-52j9	github.com/containerd/containerd@v1.5.9	1.5.16
Low	GO-2022-0289	stdlib@go1.16.9	1.16.12
Low	GO-2023-1840	stdlib@go1.17.6	1.19.10
Low	DEBIAN-CVE-2026-85091	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed
Low	DEBIAN-CVE-2026-80255	curl@8.14.1-2+deb13u7	no fix listed
Low	GO-2026-5970	golang.org/x/text@v0.3.6	0.39.0
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.52.0
Low	DEBIAN-CVE-2026-42497	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u4
Low	GHSA-c6hw-5grf-ff96	pillow@12.3.0	13.0.0
Low	GHSA-pchr-8j38-3x4p	pillow@12.3.0	13.0.0
Low	BIT-postgresql-2026-6471	postgresql@17.5.0-14	14.24.0
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.52.0
Low	DEBIAN-CVE-2026-0990	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u6
Low	ALPINE-CVE-2022-35252	curl@7.80.0-r0	7.80.0-r3
Low	DEBIAN-CVE-2026-13608	curl@8.14.1-2+deb13u7	no fix listed
Low	GHSA-2wrh-6pvc-2jm9	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d	0.13.0
Low	DLA-1639-1	systemd@215-17+deb8u7	215-17+deb8u9

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.2.0latest	yesterday	1.4.0	11203371,046	18,628
1.1.7	20 days ago	1.2.1	11203361,072	18,785
1.1.6	2 months ago	1.0.3	1120337988	18,284

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/k8sonlab/librephotos.svg)](https://charts.stackradar.io/charts/k8sonlab/librephotos)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.