ghost 0.2.3 Helm chart

Name: ghost Helm chart 0.2.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kubernetes-homelab-helm-charts

Scored 11 Oct 2026

Deploys Ghost publishing platform on Kubernetes

Version 0.2.3 yesterdayapp version 6.39.0-alpine 0Artifact Hub

ghost 0.2.3 deploys 2 container images: library/mysql and library/ghost. Across them, 373 findings — 0 critical, 2 high. The highest contribution is GHSA-r5fr-rjxr-66jc in lodash.template 4.5.0, fixed in 4.18.0.

Radar Score

4,1970241330

373 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
library/mysql×2	8	00970	880
library/ghost	6.39.0-alpine	0232260	3,317

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

276 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-4977	stdlib@go1.24.6	1.25.10
Low	GHSA-vcc3-ghjq-m6fr	decode-uri-component@0.2.2	0.5.0
Low	GHSA-vxpw-j846-p89q	undici@6.25.0	6.27.0
Low	GO-2026-4986	stdlib@go1.24.6	1.25.10
Low	GO-2026-4918	stdlib@go1.24.6	1.25.10
Low	ALPINE-CVE-2026-42764	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-63075	openssl@3.5.6-r0	3.5.8-r0
Low	GHSA-q3j6-qgpj-74h6	fast-uri@3.1.0	3.1.1
Low	GHSA-p8wg-vrv2-v86f	handlebars@4.7.9	4.7.10
Low	GHSA-vfj7-8cjw-p6xm	braces@3.0.3	no fix listed
Low	ALPINE-CVE-2026-14456	openssl@3.5.6-r0	3.5.8-r0
Low	GHSA-gcfj-64vw-6mp9	axios@1.16.0	1.18.0
Low	ALPINE-CVE-2026-9076	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-45445	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-v39h-62p7-jpjc	fast-uri@3.1.0	3.1.2
Low	GHSA-mwp4-54f8-5fhr	ip-address@10.2.0	10.3.1
Low	GHSA-hmw2-7cc7-3qxx	form-data@3.0.4	3.0.5
Low	GHSA-jmr9-qjv8-65gv	extract-zip@2.0.1	no fix listed
Low	GO-2025-4009	stdlib@go1.24.6	1.24.8
Low	GHSA-rgw5-rvv9-x895	brace-expansion@2.0.2	2.1.4
Low	GO-2025-4006	stdlib@go1.24.6	1.24.8
Low	GHSA-v245-v573-v5vm	linkify-it@5.0.0	5.0.2
Low	GHSA-mh99-v99m-4gvg	brace-expansion@2.0.2	2.1.3
Low	GHSA-8cf7-32gw-wr33	jsonwebtoken@8.5.1	9.0.0
Low	GHSA-68fv-2mgg-jv7q	source-map-js@1.2.1	1.2.2
Low	GHSA-qgmg-gppg-76g5	validator@7.2.0	13.7.0
Low	GHSA-vq4v-j7r6-jq4m	pnpm@11.1.2	11.11.0
Low	ALPINE-CVE-2026-54874	openssl@3.5.6-r0	3.5.8-r0
Low	GO-2026-4870	stdlib@go1.24.6	1.25.9
Low	GO-2026-4971	stdlib@go1.24.6	1.25.10
Low	GO-2026-4947	stdlib@go1.24.6	1.25.9
Low	GHSA-6g55-p6wh-862q	postcss@8.5.6	8.5.12
Low	GHSA-vc2v-76pw-4v95	compression@1.8.1	1.8.2
Low	GHSA-jqcg-44mw-7w3h	proxy-addr@2.0.7	2.0.8
Low	GO-2026-5037	stdlib@go1.24.6	1.25.11
Low	GHSA-52cp-r559-cp3m	js-yaml@4.1.1	4.3.0
Low	GHSA-23hp-3jrh-7fpw	tar@7.5.15	7.5.19
Low	GO-2026-6603	stdlib@go1.24.6	1.26.9
Low	GO-2026-5972	stdlib@go1.24.6	1.25.13
Low	GO-2026-6088	stdlib@go1.24.6	1.25.13
Low	GO-2026-6089	stdlib@go1.24.6	1.25.13
Low	GO-2026-6090	stdlib@go1.24.6	1.25.13
Low	GO-2026-6611	stdlib@go1.24.6	1.26.9
Low	GHSA-wf93-45jw-7689	pip@25.3	26.1.2
Low	GO-2026-5038	stdlib@go1.24.6	1.25.11
Low	GO-2026-6218	stdlib@go1.24.6	1.25.13
Low	GHSA-4cwx-7wf7-3272	undici@7.25.0	7.29.0
Low	GHSA-2883-xcg3-v3hh	js-yaml@4.1.1	4.3.2
Low	GHSA-vmh5-mc38-953g	undici@7.25.0	7.28.0
Low	GHSA-ch52-4w7c-c8xp	http-cache-semantics@4.2.0	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.3latest	yesterday	6.39.0-alpine	0241330	4,197
0.1.2	13 days ago	6.39.0-alpine	0241330	4,197

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kubernetes-homelab-helm-charts/ghost.svg)](https://charts.stackradar.io/charts/kubernetes-homelab-helm-charts/ghost)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.