ghost 0.2.3 Helm chart

Name: ghost Helm chart 0.2.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kubernetes-homelab-helm-charts

Scored 11 Oct 2026

Deploys Ghost publishing platform on Kubernetes

Version 0.2.3 yesterdayapp version 6.39.0-alpine 0Artifact Hub

ghost 0.2.3 deploys 2 container images: library/mysql and library/ghost. Across them, 373 findings — 0 critical, 2 high. The highest contribution is GHSA-r5fr-rjxr-66jc in lodash.template 4.5.0, fixed in 4.18.0.

Radar Score

4,1970241330

373 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
library/mysql×2	8	00970	880
library/ghost	6.39.0-alpine	0232260	3,317

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

313 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-45445	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-v39h-62p7-jpjc	fast-uri@3.1.0	3.1.2
Low	GHSA-mwp4-54f8-5fhr	ip-address@10.2.0	10.3.1
Low	GHSA-hmw2-7cc7-3qxx	form-data@3.0.4	3.0.5
Low	GHSA-jmr9-qjv8-65gv	extract-zip@2.0.1	no fix listed
Low	GO-2025-4009	stdlib@go1.24.6	1.24.8
Low	GHSA-rgw5-rvv9-x895	brace-expansion@2.0.2	2.1.4
Low	GO-2025-4006	stdlib@go1.24.6	1.24.8
Low	GHSA-v245-v573-v5vm	linkify-it@5.0.0	5.0.2
Low	GHSA-mh99-v99m-4gvg	brace-expansion@2.0.2	2.1.3
Low	GHSA-8cf7-32gw-wr33	jsonwebtoken@8.5.1	9.0.0
Low	GHSA-68fv-2mgg-jv7q	source-map-js@1.2.1	1.2.2
Low	GHSA-qgmg-gppg-76g5	validator@7.2.0	13.7.0
Low	GHSA-vq4v-j7r6-jq4m	pnpm@11.1.2	11.11.0
Low	ALPINE-CVE-2026-54874	openssl@3.5.6-r0	3.5.8-r0
Low	GO-2026-4870	stdlib@go1.24.6	1.25.9
Low	GO-2026-4971	stdlib@go1.24.6	1.25.10
Low	GO-2026-4947	stdlib@go1.24.6	1.25.9
Low	GHSA-6g55-p6wh-862q	postcss@8.5.6	8.5.12
Low	GHSA-vc2v-76pw-4v95	compression@1.8.1	1.8.2
Low	GHSA-jqcg-44mw-7w3h	proxy-addr@2.0.7	2.0.8
Low	GO-2026-5037	stdlib@go1.24.6	1.25.11
Low	GHSA-52cp-r559-cp3m	js-yaml@4.1.1	4.3.0
Low	GHSA-23hp-3jrh-7fpw	tar@7.5.15	7.5.19
Low	GO-2026-6603	stdlib@go1.24.6	1.26.9
Low	GO-2026-5972	stdlib@go1.24.6	1.25.13
Low	GO-2026-6088	stdlib@go1.24.6	1.25.13
Low	GO-2026-6089	stdlib@go1.24.6	1.25.13
Low	GO-2026-6090	stdlib@go1.24.6	1.25.13
Low	GO-2026-6611	stdlib@go1.24.6	1.26.9
Low	GHSA-wf93-45jw-7689	pip@25.3	26.1.2
Low	GO-2026-5038	stdlib@go1.24.6	1.25.11
Low	GO-2026-6218	stdlib@go1.24.6	1.25.13
Low	GHSA-4cwx-7wf7-3272	undici@7.25.0	7.29.0
Low	GHSA-2883-xcg3-v3hh	js-yaml@4.1.1	4.3.2
Low	GHSA-vmh5-mc38-953g	undici@7.25.0	7.28.0
Low	GHSA-ch52-4w7c-c8xp	http-cache-semantics@4.2.0	no fix listed
Low	GHSA-r292-9mhp-454m	tar@7.5.15	7.5.21
Low	GHSA-r28c-9q8g-f849	postcss@8.5.6	8.5.18
Low	GHSA-mghh-pgcx-3jjj	axios@1.16.0	1.20.0
Low	GHSA-qrv3-253h-g69c	pnpm@11.1.2	11.8.0
Low	GHSA-c59q-g84q-2gj5	pnpm@11.1.2	11.11.0
Low	GHSA-vghf-hv5q-vc2g	validator@7.2.0	13.15.22
Low	ALPINE-CVE-2026-42766	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-542g-h47m-68v8	axios@1.16.0	1.20.0
Low	GHSA-535w-7cp7-47q4	multer@2.1.1	2.3.0
Low	GHSA-72gw-mp4g-v24j	multer@2.1.1	2.2.0
Low	GHSA-c2c7-rcm5-vvqj	picomatch@4.0.3	4.0.4
Low	GHSA-wc9g-mqfw-jrwm	multer@2.1.1	2.3.0
Low	GHSA-vxq7-64xx-v4gw	urllib3@2.6.3	2.8.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.3latest	yesterday	6.39.0-alpine	0241330	4,197
0.1.2	13 days ago	6.39.0-alpine	0241330	4,197

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kubernetes-homelab-helm-charts/ghost.svg)](https://charts.stackradar.io/charts/kubernetes-homelab-helm-charts/ghost)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.