umami Helm chart

Name: umami Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kubernetes-homelab-helm-charts

Scored 14 Sept 2026

A Helm chart for Umami, a privacy-focused web analytics platform

Latest 0.1.0 30 days agoapp version 3.1.0 0Artifact Hub

umami 0.1.0 deploys 3 container images: library/busybox, ghcr.io/umami-software/umami and library/postgres. Across them, 239 findings — 0 critical, 2 high. The highest contribution is GHSA-c4j6-fc7j-m34r in next 16.2.4, fixed in 16.2.5.

Radar Score

2,5960235202

239 findings over 3 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.36	0000	0
ghcr.io/umami-software/umami	3.1.0	0231146	2,103
library/postgres	17-alpine	00456	493

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

229 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-26hh-7cqf-hhc6	next@16.2.4	16.2.6
Low	ALPINE-CVE-2026-80230	curl@8.17.0-r1	8.22.0-r0
Low	GHSA-23hp-3jrh-7fpw	tar@7.5.12	7.5.19
Low	GHSA-qrv3-253h-g69c	pnpm@10.33.0	10.34.4
Low	ALPINE-CVE-2026-54874	openssl@3.5.6-r0	3.5.8-r0
Low	ALPINE-CVE-2026-42766	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-q5qw-h33p-qvwr	hono@4.11.4	4.12.4
Low	ALPINE-CVE-2026-63075	openssl@3.5.6-r0	3.5.8-r0
Low	GHSA-w466-c33r-3gjp	pnpm@10.33.0	10.34.2
Low	GHSA-mh99-v99m-4gvg	brace-expansion@2.0.2	2.1.3
Low	ALPINE-CVE-2026-33630	c-ares@1.34.6-r0	1.34.8-r0
Low	GHSA-8x88-c5mf-7j5w	tar@7.5.12	7.5.18
Low	ALPINE-CVE-2026-82208	curl@8.17.0-r1	8.22.0-r0
Low	GHSA-vq4v-j7r6-jq4m	pnpm@10.33.0	10.34.5
Low	GHSA-c2c7-rcm5-vvqj	picomatch@4.0.3	4.0.4
Low	GHSA-q8wf-6r8g-63ch	next@16.2.4	16.2.11
Low	ALPINE-CVE-2026-12064	curl@8.17.0-r1	8.22.0-r0
Low	GHSA-mwp4-54f8-5fhr	ip-address@10.1.0	10.3.1
Low	ALPINE-CVE-2026-8932	curl@8.17.0-r1	8.22.0-r0
Low	GHSA-rxhj-4m44-96r4	pnpm@10.33.0	10.34.0
Low	ALPINE-CVE-2026-8286	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-75803	openssl@3.5.6-r0	3.5.8-r0
Low	GHSA-r292-9mhp-454m	tar@7.5.12	7.5.21
Low	GHSA-395f-4hp3-45gv	shell-quote@1.8.3	1.9.0
Low	GHSA-h64f-5h5j-jqjh	next@16.2.4	16.2.5
Low	ALPINE-CVE-2026-8458	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-6253	curl@8.17.0-r1	8.20.0-r0
Low	GHSA-w4pp-8pjf-rmxw	pacote@19.0.2	21.5.1
Low	GHSA-cjhr-43r9-cfmw	pnpm@10.33.0	10.34.0
Low	GHSA-72r4-9c5j-mj57	pnpm@10.33.0	10.34.4
Low	GHSA-fr4h-3cph-29xv	pnpm@10.33.0	10.34.4
Low	GHSA-c59q-g84q-2gj5	pnpm@10.33.0	10.34.5
Low	GHSA-wc8c-qw6v-h7f6	@hono/node-server@1.19.9	1.19.10
Low	GO-2026-4341	stdlib@go1.24.6	1.24.12
Low	GHSA-4c39-4ccg-62r3	next@16.2.4	16.2.11
Low	ALPINE-CVE-2026-9547	curl@8.17.0-r1	8.22.0-r0
Low	GHSA-955p-x3mx-jcvp	next@16.2.4	16.2.11
Low	ALPINE-CVE-2026-6276	curl@8.17.0-r1	8.20.0-r0
Low	GHSA-4gxm-v5v7-fqc4	pnpm@10.33.0	10.34.2
Low	GHSA-f886-m6hf-6m8v	brace-expansion@2.0.2	2.0.3
Low	GHSA-88fw-hqm2-52qc	hono@4.11.4	4.12.25
Low	ALPINE-CVE-2026-9080	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-42767	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-5545	curl@8.17.0-r1	8.20.0-r0
Low	ALPINE-CVE-2026-3784	curl@8.17.0-r1	8.19.0-r0
Low	ALPINE-CVE-2026-9545	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2025-14819	curl@8.17.0-r1	8.18.0-r0
Low	GHSA-38f7-945m-qr2g	effect@3.18.4	3.20.0
Low	GHSA-xf4j-xp2r-rqqx	hono@4.11.4	4.12.12
Low	ALPINE-CVE-2026-76642	util-linux@2.42.1-r0	2.42.3-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.0latest	30 days ago	3.1.0	0235202	2,596

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kubernetes-homelab-helm-charts/umami.svg)](https://charts.stackradar.io/charts/kubernetes-homelab-helm-charts/umami)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.