music-assistant 0.1.3 Helm chart
karljorgensenScored 14 Sept 2026
Music Assistant for Kubernetes
Version 0.1.3 4 months agoapp version 2.8.7 0Artifact Hub
music-assistant 0.1.3 deploys 1 container image: ghcr.io/music-assistant/server. Across them, 700 findings — 0 critical, 2 high. The highest contribution is GHSA-4v7x-pqxf-cx7m in golang.org/x/net v0.17.0, fixed in 0.23.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
1 image
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | 2.8.7 | 0290607 | 7,081 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
700 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2026-42013 | gnutls28 | 3.7.9-2+deb12u7 |
| Low | DEBIAN-CVE-2026-0861 | glibc | 2.36-9+deb12u14 |
| Low | DEBIAN-CVE-2026-58469 | wget | no fix listed |
| Low | DEBIAN-CVE-2026-3833 | gnutls28 | 3.7.9-2+deb12u7 |
| Low | DEBIAN-CVE-2024-2236 | libgcrypt20 | no fix listed |
| Low | DEBIAN-CVE-2026-31789 | openssl | 3.0.19-1~deb12u2 |
| Low | DEBIAN-CVE-2026-64830 | ffmpeg | no fix listed |
| Low | DEBIAN-CVE-2026-54874 | openssl | no fix listed |
| Low | DEBIAN-CVE-2026-64832 | ffmpeg | no fix listed |
| Low | GHSA-2wc2-fm75-p42x | soupsieve | 2.8.4 |
| Low | GHSA-836r-79rf-4m37 | soupsieve | 2.8.4 |
| Low | DEBIAN-CVE-2026-42766 | openssl | 3.0.20-1~deb12u2 |
| Low | DEBIAN-CVE-2026-74860 | libxml2 | no fix listed |
| Low | DEBIAN-CVE-2026-64835 | ffmpeg | no fix listed |
| Low | DEBIAN-CVE-2026-37555 | libsndfile | no fix listed |
| Low | DEBIAN-CVE-2025-69720 | ncurses | no fix listed |
| Low | GHSA-63hw-fmq6-xxg2 | aiohttp | 3.14.1 |
| Low | GHSA-6v7p-g79w-8964 | msgpack | 1.2.1 |
| Low | DEBIAN-CVE-2026-86145 | pcre2 | 10.42-1+deb12u1 |
| Low | DEBIAN-CVE-2025-48965 | mbedtls | no fix listed |
| Low | DEBIAN-CVE-2023-49528 | ffmpeg | no fix listed |
| Low | DEBIAN-CVE-2026-3644 | python3.11 | no fix listed |
| Low | GHSA-xcgm-r5h9-7989 | aiohttp | 3.14.1 |
| Low | DEBIAN-CVE-2026-58011 | glib2.0 | no fix listed |
| Low | DEBIAN-CVE-2025-15281 | glibc | 2.36-9+deb12u14 |
| Low | DEBIAN-CVE-2025-6297 | dpkg | 1.21.23 |
| Low | DEBIAN-CVE-2026-58049 | ffmpeg | no fix listed |
| Low | DEBIAN-CVE-2026-45186 | expat | no fix listed |
| Low | DEBIAN-CVE-2026-42011 | gnutls28 | 3.7.9-2+deb12u7 |
| Low | DEBIAN-CVE-2026-30999 | ffmpeg | no fix listed |
| Low | DEBIAN-CVE-2026-9538 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-58050 | libssh2 | 1.10.0-3+deb12u1 |
| Low | DEBIAN-CVE-2020-15719 | openldap | no fix listed |
| Low | DEBIAN-CVE-2026-56208 | aom | 3.6.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-0990 | libxml2 | 2.9.14+dfsg-1.3~deb12u6 |
| Low | GHSA-4fvr-rgm6-gqmc | aiohttp | 3.14.1 |
| Low | DEBIAN-CVE-2026-66034 | libssh2 | 1.10.0-3+deb12u1 |
| Low | DEBIAN-CVE-2026-34873 | mbedtls | no fix listed |
| Low | DEBIAN-CVE-2026-67216 | cjson | no fix listed |
| Low | DEBIAN-CVE-2025-7458 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2025-15661 | libssh2 | 1.10.0-3+deb12u1 |
| Low | GHSA-45hq-cxwh-f6vc | pillow | 12.3.0 |
| Low | DEBIAN-CVE-2026-54411 | pam | no fix listed |
| Low | DEBIAN-CVE-2026-2219 | dpkg | 1.21.23 |
| Low | GHSA-5x94-69rx-g8h2 | pillow | 12.3.0 |
| Low | GHSA-phj9-mv4w-65pm | pillow | 12.3.0 |
| Low | DEBIAN-CVE-2026-42497 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-41992 | gzip | no fix listed |
| Low | DEBIAN-CVE-2025-2177 | zvbi | 0.2.41-1+deb12u1 |
| Low | GHSA-8v84-f9pq-wr9x | pillow | 12.3.0 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/karljorgensen/music-assistant)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.