umami 0.2.1 Helm chart

Name: umami Helm chart 0.2.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kubernetes-homelab-helm-charts

Scored 22 Oct 2026

A Helm chart for Umami, a privacy-focused web analytics platform

Version 0.2.1 todayapp version 3.4.0 0Artifact Hub

umami 0.2.1 deploys 3 container images: library/busybox, ghcr.io/umami-software/umami and library/postgres. Across them, 88 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-63073 in openssl 3.5.7-r0, fixed in 3.5.8-r0.

Radar Score

1,008001276

88 findings over 3 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.36	0000	0
ghcr.io/umami-software/umami	3.4.0	00522	305
library/postgres	17-alpine	00754	703

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

88 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r0	3.5.8-r0
Low	GO-2026-4970	stdlib@go1.24.6	1.25.12
Low	GO-2025-4012	stdlib@go1.24.6	1.24.8
Low	GHSA-wq5f-xc86-pv6w	sharp@0.35.4	0.35.5
Low	GO-2026-4980	stdlib@go1.24.6	1.25.10
Low	GHSA-vcvr-r3jv-pc5j	next@16.3.4	16.3.6
Low	GHSA-3wwx-pv8p-q78v	undici@6.28.0	6.28.1
Low	GO-2025-4011	stdlib@go1.24.6	1.24.8
Low	GO-2025-4015	stdlib@go1.24.6	1.24.8
Low	GO-2026-4603	stdlib@go1.24.6	1.25.8
Low	GO-2025-4175	stdlib@go1.24.6	1.24.11
Low	GO-2026-4864	stdlib@go1.24.6	1.25.9
Low	GO-2026-4982	stdlib@go1.24.6	1.25.10
Low	GO-2026-6091	stdlib@go1.24.6	1.25.13
Low	GO-2025-4008	stdlib@go1.24.6	1.24.8
Low	GO-2025-4010	stdlib@go1.24.6	1.24.8
Low	GHSA-cjq9-62q9-8jv4	next@16.3.4	16.3.8
Low	GO-2026-4865	stdlib@go1.24.6	1.25.9
Low	ALPINE-CVE-2026-58055	nghttp2@1.69.0-r0	1.70.0-r0
Low	GO-2026-4976	stdlib@go1.24.6	1.25.10
Low	GO-2026-5039	stdlib@go1.24.6	1.25.11
Low	GO-2026-5856	stdlib@go1.24.6	1.25.12
Low	GHSA-3f6p-5ww8-9rcr	mysql2@3.15.3	3.22.0
Low	GO-2026-4340	stdlib@go1.24.6	1.24.12
Low	GO-2026-6599	stdlib@go1.24.6	1.26.9
Low	GO-2026-6600	stdlib@go1.24.6	1.26.9
Low	GHSA-4jqv-mc3x-m676	next@16.3.4	16.3.8
Low	GO-2026-4869	stdlib@go1.24.6	1.25.9
Low	GHSA-mcj8-r9mp-w47p	next@16.3.4	16.3.8
Low	GHSA-f87g-xv8r-7p7x	next@16.3.4	16.3.8
Low	GHSA-rgwj-5xj2-c3m3	mysql2@3.15.3	3.23.1
Low	GHSA-mjcv-p78q-w5fw	github.com/moby/sys/user@v0.1.0	0.4.1
Low	GHSA-39w2-rjm5-chcv	next@16.3.4	16.3.8
Low	GHSA-3w37-wq28-93x7	next@16.3.4	16.3.8
Low	GHSA-r53p-7pc4-xj5r	undici@6.28.0	6.28.1
Low	GO-2026-6809	stdlib@go1.24.6	1.26.10
Low	GO-2026-5024	golang.org/x/sys@v0.1.0	0.44.0
Low	GO-2026-4602	stdlib@go1.24.6	1.25.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.1latest	today	3.4.0	001276	1,008
0.1.0	2 days ago	3.1.0	0038220	2,925

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kubernetes-homelab-helm-charts/umami.svg)](https://charts.stackradar.io/charts/kubernetes-homelab-helm-charts/umami)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.