ghost Helm chart

Name: ghost Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kubernetes-homelab-helm-charts

Scored 14 Sept 2026

Deploys Ghost publishing platform on Kubernetes

Latest 0.1.2 30 days agoapp version 6.39.0-alpine 0Artifact Hub

ghost 0.1.2 deploys 2 container images: library/mysql and library/ghost. Across them, 287 findings — 0 critical, 2 high. The highest contribution is GHSA-r5fr-rjxr-66jc in lodash.template 4.5.0, fixed in 4.18.0.

Radar Score

2,7560224261

287 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
library/mysql×2	8	00260	463
library/ghost	6.39.0-alpine	0222201	2,293

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

241 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-3qhv-2rgh-x77r	pnpm@11.1.2	11.5.3
Low	ALPINE-CVE-2026-63074	openssl@3.5.6-r0	3.5.8-r0
Low	GHSA-jqff-g426-hqxp	fast-uri@3.1.0	3.1.6
Low	GHSA-g6cj-pr64-35w5	cryptography@46.0.5	50.0.0
Low	GHSA-w8wr-v893-vjvp	tar@7.5.15	7.5.18
Low	ALPINE-CVE-2026-34181	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-hjrf-2m68-5959	jsonwebtoken@8.5.1	9.0.0
Low	GHSA-7p8r-x3mc-p8w7	fast-uri@3.1.0	3.1.5
Low	GHSA-f65p-4m7j-42xc	fast-uri@3.1.0	3.1.6
Low	GHSA-hpcv-96wg-7vj8	dompurify@3.4.1	3.4.6
Low	GHSA-p6gq-j5cr-w38f	nodemailer@8.0.5	9.0.1
Low	GHSA-mmx7-hfxf-jppx	axios@1.16.0	1.18.0
Low	GHSA-xj6q-8x83-jv6g	axios@1.16.0	1.18.0
Low	GHSA-p4xf-rf54-rj3x	pnpm@11.1.2	11.4.0
Low	GHSA-r47g-fvhr-h676	dompurify@3.4.1	3.4.6
Low	GHSA-jxxr-4gwj-5jf2	brace-expansion@5.0.5	5.0.6
Low	GHSA-gj8w-mvpf-x27x	pnpm@11.1.2	11.5.3
Low	PYSEC-2026-3721	pip@25.3	26.2
Low	GHSA-52v5-jr5w-gjxr	sigstore@3.1.0	4.1.1
Low	GHSA-pr7r-676h-xcf6	undici@7.25.0	7.28.0
Low	GHSA-5wx6-mg75-v57r	pnpm@11.1.2	11.5.3
Low	GHSA-gvwx-54wh-qm9j	tar@7.5.15	7.5.17
Low	GHSA-9965-vmph-33xx	validator@7.2.0	13.15.20
Low	GHSA-hg3w-7f8c-63hp	pnpm@10.33.0	10.33.4
Low	GHSA-rgj7-g3m4-5g8c	sharp@0.34.5	0.35.4
Low	GHSA-v2v4-37r5-5v8g	ip-address@10.1.0	10.1.1
Low	GHSA-28wg-ghj8-5hjv	nanoid@3.3.11	3.3.16
Low	GHSA-jxwj-j7wr-gfrw	sanitize-html@2.17.0	2.17.6
Low	GHSA-2v37-7h3g-55p8	nanoid@3.3.11	3.3.18
Low	GHSA-58qx-3vcg-4xpx	ws@8.20.0	8.20.1
Low	GHSA-jr45-8vmc-qm54	undici@7.25.0	7.29.0
Low	GHSA-3v7f-55p6-f55p	picomatch@4.0.3	4.0.4
Low	GHSA-vp96-hxj8-p424	pyopenssl@25.3.0	26.0.0
Low	ALPINE-CVE-2026-42769	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-7q8q-rj6j-mhjq	axios@1.16.0	1.18.0
Low	GHSA-h67p-54hq-rp68	js-yaml@4.1.1	4.2.0
Low	GHSA-q6j5-fjx5-2mc3	pnpm@11.1.2	11.4.0
Low	GHSA-6v5v-wf23-fmfq	markdown-it@14.1.1	14.2.0
Low	GHSA-3f6p-5ww8-9rcr	mysql2@3.14.1	3.22.0
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@2.0.2	2.1.2
Low	GHSA-76mc-f452-cxcm	dompurify@3.4.1	3.4.7
Low	GHSA-q8mj-m7cp-5q26	qs@6.14.2	6.15.2
Low	GHSA-54hh-g5mx-jqcp	pnpm@11.1.2	11.4.0
Low	GHSA-p88m-4jfj-68fv	undici@6.25.0	6.27.0
Low	GO-2026-4981	stdlib@go1.24.6	1.25.10
Low	GHSA-vmf3-w455-68vh	tar@7.5.15	7.5.16
Low	GHSA-8988-4f7v-96qf	@opentelemetry/core@2.6.1	2.8.0
Low	GO-2026-4977	stdlib@go1.24.6	1.25.10
Low	GO-2026-4986	stdlib@go1.24.6	1.25.10
Low	GHSA-jwp9-9v96-94mx	decompress@4.2.1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.2latest	30 days ago	6.39.0-alpine	0224261	2,756

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kubernetes-homelab-helm-charts/ghost.svg)](https://charts.stackradar.io/charts/kubernetes-homelab-helm-charts/ghost)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.