ghost 0.2.3 Helm chart
kubernetes-homelab-helm-chartsVerified publisherScored 11 Oct 2026
Deploys Ghost publishing platform on Kubernetes
Version 0.2.3 yesterdayapp version 6.39.0-alpine 0Artifact Hub
ghost 0.2.3 deploys 2 container images: library/mysql and library/ghost. Across them, 373 findings — 0 critical, 2 high. The highest contribution is GHSA-r5fr-rjxr-66jc in lodash.template 4.5.0, fixed in 4.18.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| library/ | 8 | 00970 | 880 |
| library/ | 6.39.0-alpine | 0232260 | 3,317 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-qhr7-859c-m2p7 | brace-expansion | 2.1.6 |
| Low | GHSA-w4pp-8pjf-rmxw | pacote | 21.5.1 |
| Low | GHSA-qwph-4952-7xr6 | jsonwebtoken | 9.0.0 |
| Low | GHSA-cjhr-43r9-cfmw | pnpm | 11.4.0 |
| Low | GHSA-72r4-9c5j-mj57 | pnpm | 11.7.0 |
| Low | GHSA-fr4h-3cph-29xv | pnpm | 11.7.0 |
| Low | GHSA-j8rh-479h-cp32 | axios | 1.20.0 |
| Low | GHSA-h39j-r5qq-r9mm | decompress | no fix listed |
| Low | GHSA-9fr6-4gfg-395g | axios | 1.20.0 |
| Low | GHSA-vh66-26gq-q6x8 | axios | 1.20.0 |
| Low | GO-2026-6613 | stdlib | 1.26.9 |
| Low | GHSA-22jq-vg5j-6vgg | ip-address | 10.2.1 |
| Low | GO-2026-6605 | stdlib | 1.26.9 |
| Low | GHSA-42h9-826w-cgv3 | axios | 1.18.0 |
| Low | GHSA-pmv8-rq9r-6j72 | axios | 1.18.0 |
| Low | GO-2026-6610 | stdlib | 1.26.9 |
| Low | GHSA-m8m8-qj5v-23w3 | axios | 1.20.0 |
| Low | GHSA-2vr4-cq9g-pvrc | ip-address | 10.5.1 |
| Low | GHSA-p6gq-j5cr-w38f | nodemailer | 9.0.1 |
| Low | GHSA-4gxm-v5v7-fqc4 | pnpm | 11.5.3 |
| Low | ALPINE-CVE-2026-63074 | openssl | 3.5.8-r0 |
| Low | GHSA-2v37-7h3g-55p8 | nanoid | 3.3.18 |
| Low | GHSA-xwg4-73v4-xw9w | nanoid | 3.3.12 |
| Low | GHSA-v53p-9fqp-m79j | nodemailer | 10.0.6 |
| Low | ALPINE-CVE-2026-42767 | openssl | 3.5.7-r0 |
| Low | GHSA-fxqj-rqcc-2cmp | postcss | 8.5.23 |
| Low | GO-2026-4970 | stdlib | 1.25.12 |
| Low | GHSA-wmmp-3585-3rmp | nodemailer | 9.1.0 |
| Low | GHSA-v2hh-gcrm-f6hx | fast-uri | 3.1.4 |
| Low | GHSA-8988-9cw3-xx77 | urllib3 | 2.8.0 |
| Low | GHSA-mmx7-hfxf-jppx | axios | 1.18.0 |
| Low | GHSA-cc9r-2j5m-2m83 | nodemailer | 9.1.0 |
| Low | GHSA-xj6q-8x83-jv6g | axios | 1.18.0 |
| Low | GHSA-qw65-cvwx-89v3 | fast-uri | 3.1.7 |
| Low | GHSA-3qhv-2rgh-x77r | pnpm | 11.5.3 |
| Low | GHSA-qxc2-j82w-r537 | @faker-js/ | 10.5.0 |
| Low | GHSA-vp96-hxj8-p424 | pyopenssl | 26.0.0 |
| Low | GHSA-jqff-g426-hqxp | fast-uri | 3.1.6 |
| Low | GHSA-jxxr-4gwj-5jf2 | brace-expansion | 5.0.6 |
| Low | GHSA-hjrf-2m68-5959 | jsonwebtoken | 9.0.0 |
| Low | GHSA-rpw4-54j3-4h4q | ip-address | 10.5.1 |
| Low | GHSA-w8wr-v893-vjvp | tar | 7.5.18 |
| Low | GHSA-gh4c-6fx4-qh6g | urllib3 | 2.8.0 |
| Low | GO-2025-4012 | stdlib | 1.24.8 |
| Low | GHSA-7p8r-x3mc-p8w7 | fast-uri | 3.1.5 |
| Low | GHSA-f65p-4m7j-42xc | fast-uri | 3.1.6 |
| Low | GHSA-j6r3-76f7-8jcv | ip-address | 10.7.1 |
| Low | GHSA-hpcv-96wg-7vj8 | dompurify | 3.4.6 |
| Low | GHSA-vx52-2968-3vc6 | pnpm | 11.11.0 |
| Low | GO-2026-4980 | stdlib | 1.25.10 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 0.2.3latest | yesterday | 6.39.0-alpine | 0241330 | 4,197 |
| 0.1.2 | 13 days ago | 6.39.0-alpine | 0241330 | 4,197 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.