portfolio-tracker 0.2.1 Helm chart

Name: portfolio-tracker Helm chart 0.2.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kubernetes-homelab-helm-charts

Scored 22 Oct 2026

Deploys the self-hosted Portfolio Tracker with PostgreSQL

Version 0.2.1 todayapp version 0.7.0 0Artifact Hub

portfolio-tracker 0.2.1 deploys 3 container images: library/busybox, ghcr.io/harish2k01/portfolio-tracker and library/postgres. Across them, 185 findings — 0 critical, 0 high. The highest contribution is GHSA-p293-qw3h-jr36 in next 16.2.7, fixed in 16.3.3.

Radar Score

1,9980020165

185 findings over 3 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.36	0000	0
ghcr.io/harish2k01/portfolio-tracker	0.7.0	0013111	1,295
library/postgres	16-alpine	00754	703

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

185 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2026-6218	stdlib@go1.24.6	1.25.13
Low	GHSA-r292-9mhp-454m	tar@7.5.13	7.5.21
Low	GHSA-r28c-9q8g-f849	postcss@8.4.31	8.5.18
Low	GO-2026-4342	stdlib@go1.24.6	1.24.12
Low	ALPINE-CVE-2026-85091	zlib@1.3.2-r0	1.3.2-r1
Low	GHSA-4c8g-83qw-93j6	fast-uri@3.1.2	3.1.3
Low	GO-2025-4155	stdlib@go1.24.6	1.24.11
Low	GO-2025-4014	stdlib@go1.24.6	1.24.8
Low	GHSA-8x88-c5mf-7j5w	tar@7.5.13	7.5.18
Low	GO-2026-6617	stdlib@go1.24.6	1.26.9
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-5qjj-4xww-7phc	valibot@1.2.0	1.4.2
Low	GO-2025-4007	stdlib@go1.24.6	1.24.9
Low	GO-2026-6608	stdlib@go1.24.6	1.26.9
Low	GHSA-q8wf-6r8g-63ch	next@16.2.7	16.2.11
Low	GHSA-rfgv-xxqx-mfg5	undici@6.25.0	6.28.1
Low	GO-2026-6607	stdlib@go1.24.6	1.26.9
Low	GO-2025-4013	stdlib@go1.24.6	1.24.8
Low	GO-2026-6609	stdlib@go1.24.6	1.26.9
Low	GHSA-w5hq-g745-h8pq	uuid@8.3.2	11.1.1
Low	GO-2026-4946	stdlib@go1.24.6	1.25.9
Low	GHSA-6j4f-fj2g-mc7p	brace-expansion@5.0.5	5.0.10
Low	GHSA-qhr7-859c-m2p7	brace-expansion@5.0.5	5.0.11
Low	GHSA-68fv-2mgg-jv7q	source-map-js@1.2.1	1.2.2
Low	GHSA-w4pp-8pjf-rmxw	pacote@21.5.0	21.5.1
Low	GHSA-rgj7-g3m4-5g8c	sharp@0.34.5	0.35.4
Low	GO-2026-6613	stdlib@go1.24.6	1.26.9
Low	GHSA-4c39-4ccg-62r3	next@16.2.7	16.2.11
Low	GO-2026-6605	stdlib@go1.24.6	1.26.9
Low	GO-2026-6610	stdlib@go1.24.6	1.26.9
Low	GHSA-955p-x3mx-jcvp	next@16.2.7	16.2.11
Low	GHSA-p6gq-j5cr-w38f	nodemailer@7.0.13	9.0.1
Low	GHSA-vvjj-xcjg-gr5g	nodemailer@7.0.13	8.0.5
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-2v37-7h3g-55p8	nanoid@3.3.12	3.3.18
Low	GHSA-gqvv-2mrq-wpjv	hono@4.12.23	4.13.5
Low	GHSA-v53p-9fqp-m79j	nodemailer@7.0.13	10.0.6
Low	GHSA-88fw-hqm2-52qc	hono@4.12.23	4.12.25
Low	GHSA-fxqj-rqcc-2cmp	postcss@8.4.31	8.5.23
Low	GO-2026-4970	stdlib@go1.24.6	1.25.12
Low	GHSA-wmmp-3585-3rmp	nodemailer@7.0.13	9.1.0
Low	GHSA-v2hh-gcrm-f6hx	fast-uri@3.1.2	3.1.4
Low	GHSA-cc9r-2j5m-2m83	nodemailer@7.0.13	9.1.0
Low	GHSA-qw65-cvwx-89v3	fast-uri@3.1.2	3.1.7
Low	GHSA-jqff-g426-hqxp	fast-uri@3.1.2	3.1.6
Low	GHSA-jxxr-4gwj-5jf2	brace-expansion@5.0.5	5.0.6
Low	GHSA-rpw4-54j3-4h4q	ip-address@10.1.0	10.5.1
Low	GHSA-w8wr-v893-vjvp	tar@7.5.13	7.5.18
Low	GO-2025-4012	stdlib@go1.24.6	1.24.8
Low	GHSA-7p8r-x3mc-p8w7	fast-uri@3.1.2	3.1.5

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.1latest	today	0.7.0	0020165	1,998
0.1.0	2 days ago	0.1.0	0020166	2,007

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kubernetes-homelab-helm-charts/portfolio-tracker.svg)](https://charts.stackradar.io/charts/kubernetes-homelab-helm-charts/portfolio-tracker)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.