librephotos Helm chart

Name: librephotos Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

k8sonlab

Scored 15 Sept 2026

Helmchart used to install Librephotos in a microservice manner

Latest 1.1.6 25 days agoapp version 1.0.3 0Artifact Hub

librephotos 1.1.6 deploys 7 container images: library/postgres, reallibrephotos/librephotos, reallibrephotos/librephotos-frontend, reallibrephotos/librephotos-proxy and 3 more. Across the 6 measured, 1,240 findings — 5 critical, 19 high — 3 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 8.0.3-1, fixed in 6.2.20. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

14,833519249967

1,240 findings over 6 of 7 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres	9.6.5	012440	916
reallibrephotos/librephotos	1.0.3	—	not yet scanned
reallibrephotos/librephotos-frontend	1.0.3	00029	195
reallibrephotos/librephotos-proxy	1.0.3	0039228	2,748
bitnamilegacy/postgresql	latest	0252220	3,115
bitnamilegacy/redis	latest	1142188	2,543
alpine/k8s	1.22.6	41592262	5,316

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

865 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-86137	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	no fix listed
Low	DEBIAN-CVE-2026-86141	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2	no fix listed
Low	DEBIAN-CVE-2026-24515	expat@2.7.1-2	2.8.2-1~deb13u1
Low	GHSA-5j5w-g665-5m35	github.com/containerd/containerd@v1.5.7	1.5.8
Low	GHSA-77vh-xpmg-72qh	github.com/opencontainers/image-spec@v1.0.1	1.0.2
Low	GHSA-qq97-vm5h-rrhg	github.com/docker/distribution@v2.7.1+incompatible	2.8.0
Low	DEBIAN-CVE-2026-89162	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	DEBIAN-CVE-2026-89156	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	GHSA-xf85-363p-868w	oras.land/oras-go@v0.4.0	no fix listed
Low	DEBIAN-CVE-2025-8534	tiff@4.7.0-3+deb13u2	no fix listed
Low	DEBIAN-CVE-2026-5958	sed@4.9-1	4.9-1+deb12u1
Low	DEBIAN-CVE-2026-6368	glibc@2.41-12+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-9672	libgd2@2.3.3-13	2.3.3-14~deb13u1
Low	GHSA-c9cp-9c75-9v8c	github.com/containerd/containerd@v1.5.9	1.5.11
Low	GHSA-vp35-85q5-9f25	github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	20.10.20

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.6latest	25 days ago	1.0.3	519249967	14,833

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/k8sonlab/librephotos.svg)](https://charts.stackradar.io/charts/k8sonlab/librephotos)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.