ghost Helm chart

Name: ghost Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kubernetes-homelab-helm-charts

Scored 14 Sept 2026

Deploys Ghost publishing platform on Kubernetes

Latest 0.1.2 30 days agoapp version 6.39.0-alpine 0Artifact Hub

ghost 0.1.2 deploys 2 container images: library/mysql and library/ghost. Across them, 287 findings — 0 critical, 2 high. The highest contribution is GHSA-r5fr-rjxr-66jc in lodash.template 4.5.0, fixed in 4.18.0.

Radar Score

2,7560224261

287 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
library/mysql×2	8	00260	463
library/ghost	6.39.0-alpine	0222201	2,293

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

215 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-vcc3-ghjq-m6fr	decode-uri-component@0.2.2	0.5.0
Low	GHSA-vxpw-j846-p89q	undici@6.25.0	6.27.0
Low	ALPINE-CVE-2026-14456	openssl@3.5.6-r0	3.5.8-r0
Low	ALPINE-CVE-2026-9076	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-mf9v-mfxr-j63j	urllib3@2.6.3	2.7.0
Low	GHSA-q3j6-qgpj-74h6	fast-uri@3.1.0	3.1.1
Low	GHSA-qgmg-gppg-76g5	validator@7.2.0	13.7.0
Low	GHSA-rgw5-rvv9-x895	brace-expansion@2.0.2	2.1.4
Low	ALPINE-CVE-2026-63072	openssl@3.5.6-r0	3.5.8-r0
Low	GHSA-8cf7-32gw-wr33	jsonwebtoken@8.5.1	9.0.0
Low	ALPINE-CVE-2026-45445	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-6g55-p6wh-862q	postcss@8.5.6	8.5.12
Low	GHSA-22p9-wv53-3rq4	linkify-it@5.0.0	5.0.1
Low	GHSA-23hp-3jrh-7fpw	tar@7.5.15	7.5.19
Low	GHSA-52cp-r559-cp3m	js-yaml@4.1.1	4.3.0
Low	GHSA-hmw2-7cc7-3qxx	form-data@3.0.4	3.0.5
Low	GHSA-qrv3-253h-g69c	pnpm@11.1.2	11.8.0
Low	ALPINE-CVE-2026-54874	openssl@3.5.6-r0	3.5.8-r0
Low	GHSA-vghf-hv5q-vc2g	validator@7.2.0	13.15.22
Low	ALPINE-CVE-2026-42766	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-gcfj-64vw-6mp9	axios@1.16.0	1.18.0
Low	GHSA-jmr9-qjv8-65gv	extract-zip@2.0.1	no fix listed
Low	ALPINE-CVE-2026-63075	openssl@3.5.6-r0	3.5.8-r0
Low	GHSA-w466-c33r-3gjp	pnpm@11.1.2	11.5.3
Low	GHSA-v39h-62p7-jpjc	fast-uri@3.1.0	3.1.2
Low	GHSA-mh99-v99m-4gvg	brace-expansion@2.0.2	2.1.3
Low	GHSA-4cwx-7wf7-3272	undici@7.25.0	7.29.0
Low	GHSA-vmh5-mc38-953g	undici@7.25.0	7.28.0
Low	GHSA-v2hh-gcrm-f6hx	fast-uri@3.1.0	3.1.4
Low	GHSA-8x88-c5mf-7j5w	tar@7.5.15	7.5.18
Low	GHSA-v245-v573-v5vm	linkify-it@5.0.0	5.0.2
Low	GHSA-5p2g-fcmc-qvqq	image-size@1.2.1	no fix listed
Low	GHSA-w3rx-r6r6-pgpr	image-size@1.2.1	no fix listed
Low	GHSA-vq4v-j7r6-jq4m	pnpm@11.1.2	11.11.0
Low	GHSA-c2c7-rcm5-vvqj	picomatch@4.0.3	4.0.4
Low	GHSA-mwp4-54f8-5fhr	ip-address@10.2.0	10.3.1
Low	GHSA-rxhj-4m44-96r4	pnpm@11.1.2	11.4.0
Low	GHSA-jwv3-5hgf-82ww	cryptography@46.0.5	49.0.0
Low	GHSA-wf93-45jw-7689	pip@25.3	26.1.2
Low	ALPINE-CVE-2026-75803	openssl@3.5.6-r0	3.5.8-r0
Low	GHSA-p8p7-x288-28g6	request@2.88.2	no fix listed
Low	GHSA-2883-xcg3-v3hh	js-yaml@4.1.1	4.3.2
Low	GHSA-4c8g-83qw-93j6	fast-uri@3.1.0	3.1.3
Low	GHSA-r292-9mhp-454m	tar@7.5.15	7.5.21
Low	GHSA-r28c-9q8g-f849	postcss@8.5.6	8.5.18
Low	GHSA-7pqw-9j4j-h8q3	extract-zip@2.0.1	no fix listed
Low	GHSA-w5hq-g745-h8pq	uuid@7.0.3	11.1.1
Low	GHSA-w4pp-8pjf-rmxw	pacote@19.0.2	21.5.1
Low	GHSA-hm92-r4w5-c3mj	undici@7.25.0	7.28.0
Low	GHSA-cjhr-43r9-cfmw	pnpm@11.1.2	11.4.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.2latest	30 days ago	6.39.0-alpine	0224261	2,756

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kubernetes-homelab-helm-charts/ghost.svg)](https://charts.stackradar.io/charts/kubernetes-homelab-helm-charts/ghost)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.