umami 0.3.0 Helm chart

Name: umami Helm chart 0.3.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kubernetes-homelab-helm-charts

Not scored yet

A Helm chart for Umami, a privacy-focused web analytics platform

Version 0.3.0 todayapp version 3.4.0 0Artifact Hub

umami 0.3.0 deploys 3 container images: library/busybox, ghcr.io/umami-software/umami and library/postgres. The highest contribution is ALPINE-CVE-2026-63073 in openssl 3.5.7-r0, fixed in 3.5.8-r0.

Radar Score

Not yet scored

The daily scoring run has not folded the 3 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.36	0000	0
ghcr.io/umami-software/umami	3.4.0	00522	305
library/postgres	17-alpine	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

27 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2026-63073	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-63076	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-18798	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-14457	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-63072	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-ggr8-5vv4-36mx	deepmerge-ts@7.1.5	8.0.0
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-85091	zlib@1.3.2-r0	1.3.2-r1
Low	GHSA-pqg4-j6r4-53mv	shell-quote@1.10.0	1.11.0
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-rfgv-xxqx-mfg5	undici@6.28.0	6.28.1
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-wq5f-xc86-pv6w	sharp@0.35.4	0.35.5
Low	GHSA-vcvr-r3jv-pc5j	next@16.3.4	16.3.6
Low	GHSA-3wwx-pv8p-q78v	undici@6.28.0	6.28.1
Low	GHSA-cjq9-62q9-8jv4	next@16.3.4	16.3.8
Low	ALPINE-CVE-2026-58055	nghttp2@1.69.0-r0	1.70.0-r0
Low	GHSA-3f6p-5ww8-9rcr	mysql2@3.15.3	3.22.0
Low	GHSA-4jqv-mc3x-m676	next@16.3.4	16.3.8
Low	GHSA-mcj8-r9mp-w47p	next@16.3.4	16.3.8
Low	GHSA-f87g-xv8r-7p7x	next@16.3.4	16.3.8
Low	GHSA-rgwj-5xj2-c3m3	mysql2@3.15.3	3.23.1
Low	GHSA-39w2-rjm5-chcv	next@16.3.4	16.3.8
Low	GHSA-3w37-wq28-93x7	next@16.3.4	16.3.8
Low	GHSA-r53p-7pc4-xj5r	undici@6.28.0	6.28.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.3.0latest	today	3.4.0	—	—
0.2.1	yesterday	3.4.0	001276	1,008
0.1.0	3 days ago	3.1.0	0038220	2,925

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kubernetes-homelab-helm-charts/umami.svg)](https://charts.stackradar.io/charts/kubernetes-homelab-helm-charts/umami)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.