ghost Helm chart

Name: ghost Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kubernetes-homelab-helm-charts

Scored 14 Sept 2026

Deploys Ghost publishing platform on Kubernetes

Latest 0.1.2 30 days agoapp version 6.39.0-alpine 0Artifact Hub

ghost 0.1.2 deploys 2 container images: library/mysql and library/ghost. Across them, 287 findings — 0 critical, 2 high. The highest contribution is GHSA-r5fr-rjxr-66jc in lodash.template 4.5.0, fixed in 4.18.0.

Radar Score

2,7560224261

287 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
library/mysql×2	8	00260	463
library/ghost	6.39.0-alpine	0222201	2,293

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

215 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-72r4-9c5j-mj57	pnpm@11.1.2	11.7.0
Low	GHSA-fr4h-3cph-29xv	pnpm@11.1.2	11.7.0
Low	GHSA-c59q-g84q-2gj5	pnpm@11.1.2	11.11.0
Low	GHSA-qwph-4952-7xr6	jsonwebtoken@8.5.1	9.0.0
Low	GHSA-h39j-r5qq-r9mm	decompress@4.2.1	no fix listed
Low	GO-2026-4341	stdlib@go1.24.6	1.24.12
Low	GHSA-4xrf-jv44-h6hh	ip-address@10.2.0	10.2.2
Low	GHSA-jqh4-m9w3-8hp9	axios@1.16.0	1.18.0
Low	GHSA-4gxm-v5v7-fqc4	pnpm@11.1.2	11.5.3
Low	GHSA-wc9g-mqfw-jrwm	multer@2.1.1	2.3.0
Low	GHSA-xwg4-73v4-xw9w	nanoid@3.3.11	3.3.12
Low	GHSA-hcpx-6fm6-wx23	axios@1.16.0	1.18.0
Low	GHSA-f886-m6hf-6m8v	brace-expansion@2.0.2	2.0.3
Low	GHSA-535w-7cp7-47q4	multer@2.1.1	2.3.0
Low	GHSA-72gw-mp4g-v24j	multer@2.1.1	2.2.0
Low	GHSA-22jq-vg5j-6vgg	ip-address@10.2.0	10.2.1
Low	ALPINE-CVE-2026-42767	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-fxqj-rqcc-2cmp	postcss@8.5.6	8.5.23
Low	GHSA-f4gw-2p7v-4548	axios@1.16.0	1.18.0
Low	GHSA-42h9-826w-cgv3	axios@1.16.0	1.18.0
Low	GHSA-pmv8-rq9r-6j72	axios@1.16.0	1.18.0
Low	GHSA-mwf2-3pr3-8698	axios@1.16.0	1.18.0
Low	GHSA-m2h6-j472-rp4c	cryptography@46.0.5	49.0.0
Low	GHSA-qxc2-j82w-r537	@faker-js/faker@7.6.0	10.5.0
Low	GHSA-3qhv-2rgh-x77r	pnpm@11.1.2	11.5.3
Low	ALPINE-CVE-2026-63074	openssl@3.5.6-r0	3.5.8-r0
Low	GHSA-jqff-g426-hqxp	fast-uri@3.1.0	3.1.6
Low	GHSA-g6cj-pr64-35w5	cryptography@46.0.5	50.0.0
Low	GHSA-w8wr-v893-vjvp	tar@7.5.15	7.5.18
Low	ALPINE-CVE-2026-34181	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-hjrf-2m68-5959	jsonwebtoken@8.5.1	9.0.0
Low	GHSA-7p8r-x3mc-p8w7	fast-uri@3.1.0	3.1.5
Low	GHSA-f65p-4m7j-42xc	fast-uri@3.1.0	3.1.6
Low	GHSA-hpcv-96wg-7vj8	dompurify@3.4.1	3.4.6
Low	GHSA-p6gq-j5cr-w38f	nodemailer@8.0.5	9.0.1
Low	GHSA-mmx7-hfxf-jppx	axios@1.16.0	1.18.0
Low	GHSA-xj6q-8x83-jv6g	axios@1.16.0	1.18.0
Low	GHSA-p4xf-rf54-rj3x	pnpm@11.1.2	11.4.0
Low	GHSA-r47g-fvhr-h676	dompurify@3.4.1	3.4.6
Low	GHSA-jxxr-4gwj-5jf2	brace-expansion@5.0.5	5.0.6
Low	GHSA-gj8w-mvpf-x27x	pnpm@11.1.2	11.5.3
Low	PYSEC-2026-3721	pip@25.3	26.2
Low	GHSA-52v5-jr5w-gjxr	sigstore@3.1.0	4.1.1
Low	GHSA-pr7r-676h-xcf6	undici@7.25.0	7.28.0
Low	GHSA-5wx6-mg75-v57r	pnpm@11.1.2	11.5.3
Low	GHSA-gvwx-54wh-qm9j	tar@7.5.15	7.5.17
Low	GHSA-9965-vmph-33xx	validator@7.2.0	13.15.20
Low	GHSA-hg3w-7f8c-63hp	pnpm@10.33.0	10.33.4
Low	GHSA-rgj7-g3m4-5g8c	sharp@0.34.5	0.35.4
Low	GHSA-v2v4-37r5-5v8g	ip-address@10.1.0	10.1.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.2latest	30 days ago	6.39.0-alpine	0224261	2,756

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kubernetes-homelab-helm-charts/ghost.svg)](https://charts.stackradar.io/charts/kubernetes-homelab-helm-charts/ghost)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.