gitlab Helm chart

Name: gitlab Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kubesphere

Scored 14 Sept 2026

Web-based Git-repository manager with wiki and issue-tracking features.

Latest 4.2.3 5 years agoapp version 13.2.2 0Artifact Hub

gitlab 4.2.3 deploys 17 container images: gitlab/gitlab-runner, mirrorgitlabcontainers/alpine-certificates, library/busybox, mirrorgitlabcontainers/gitlab-shell and 13 more. Across the 14 measured, 2,657 findings — 5 critical, 80 high — 18 on CISA KEV. The highest contribution is ALPINE-CVE-2021-3711 in openssl 1.1.1g-r0, fixed in 1.1.1l-r0.

Radar Score

38,1335807271,845

2,657 findings over 14 of 17 images measured

KEV ×18 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

17 images

Image	Tag	Vulnerabilities	Radar Score
gitlab/gitlab-runner×2	alpine-v13.2.1	21184197	4,526
mirrorgitlabcontainers/alpine-certificates×7	20171114-r3	0010	29
library/busybox×9	1.31.1	0000	0
mirrorgitlabcontainers/gitlab-shell	v13.3.0	0766216	3,823
mirrorgitlabcontainers/gitlab-sidekiq-ce×2	v13.2.2	111105185	4,803
mirrorgitlabcontainers/gitlab-task-runner-ce×2	v13.2.2	112113199	5,119
mirrorgitlabcontainers/gitlab-webservice-ce×2	v13.2.2	111105185	4,803
mirrorgitlabcontainers/gitlab-workhorse-ce	v13.2.2	0665214	3,719
minio/minio	RELEASE.2017-12-28T01-21-00Z	0490	480
kubesphere/nginx-ingress-controller	0.21.0	0000	0
mirrorgooglecontainers/defaultbackend-amd64	1.4	—	not yet scanned
mirrorgitlabcontainers/gitlab-container-registry	v2.9.1-gitlab	0549196	3,122
mirrorgitlabcontainers/gitaly	v13.2.2	012105290	5,548
bitnami/postgresql	11.7.0	—	unmeasured
bitnami/redis	5.0.7-debian-9-r50	—	unmeasured
minio/mc	RELEASE.2018-07-13T00-53-22Z	0010	29
mirrorgitlabcontainers/kubectl	1.13.12	0124163	2,132

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

652 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	ALPINE-CVE-2021-3711	openssl@1.1.1g-r0	1.1.1l-r0
Critical	GHSA-754f-8gm6-c4r2	ruby-saml@1.7.2	1.12.4
Critical	ALPINE-CVE-2021-21300	git@2.26.2-r0	2.26.3-r0
High	ALPINE-CVE-2022-25236	expat@2.2.9-r1	2.2.10-r2
High	ALPINE-CVE-2022-0778	openssl@1.1.1g-r0	1.1.1n-r0
High	GHSA-x4qr-2fvf-3mr5	cryptography@3.0	39.0.1
High	GHSA-xr9x-r78c-5hrm	activestorage@6.0.3.1	7.2.3.2
High	ALPINE-CVE-2018-25032	zlib@1.2.11-r3	1.2.12-r0
High	GHSA-jc36-42cf-vqwj	nokogiri@1.10.9	1.13.4
High	ALPINE-CVE-2021-23840	openssl@1.1.1g-r0	1.1.1j-r0
High	ALPINE-CVE-2021-3712	openssl@1.1.1g-r0	1.1.1l-r0
High	GHSA-8877-prq4-9xfw	actionpack@6.0.3.1	6.0.3.5
High	GHSA-4vc4-m8qh-g8jm	ruby-saml@1.7.2	1.12.4
High	GHSA-45x7-px36-x8w8	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.0.0-20231218163308-9d2ee975ef9f
High	ALPINE-CVE-2022-37434	zlib@1.2.11-r3	1.2.12-r2
High	GHSA-35mm-cc6r-8fjp	actionpack@6.0.3.1	6.0.3.4
High	GHSA-qppj-fm5r-hxr3KEV	golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa	0.17.0
High	GHSA-59gp-qqm7-cw4j	nokogiri@1.10.9	1.13.2
High	GHSA-4v7x-pqxf-cx7m	golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa	0.23.0
High	ALPINE-CVE-2021-3449	openssl@1.1.1g-r0	1.1.1k-r0
High	ALPINE-CVE-2019-3822	curl@7.57.0-r0	7.61.1-r2
High	ALPINE-CVE-2018-1000120	curl@7.57.0-r0	7.59.0-r0
High	GHSA-jw9c-mfg7-9rx2	ruby-saml@1.7.2	1.12.3
High	ALPINE-CVE-2018-14618	curl@7.57.0-r0	7.61.1-r0
High	GHSA-ffhg-7mh4-33c4	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.0.0-20200220183623-bac4c82f6975
High	GHSA-jvgm-pfqv-887x	bundler@1.16.6	2.0.0
High	GHSA-pg8v-g4xq-hww9	rails-html-sanitizer@1.3.0	1.4.3
High	ALPINE-CVE-2018-1000122	curl@7.57.0-r0	7.59.0-r0
High	DLA-2534-1KEV	sudo@1.8.19p1-2.1+deb9u2	1.8.19p1-2.1+deb9u3
High	DLA-2663-1KEV	libimage-exiftool-perl@10.40-1	10.40-1+deb9u1
High	DLA-2776-1KEV	apache2@2.4.25-3+deb9u9	2.4.25-3+deb9u11
High	GO-2022-0535KEV	stdlib@go1.13.3	1.12.16
Medium	DLA-2907-1	apache2@2.4.25-3+deb9u9	2.4.25-3+deb9u12
Medium	ALPINE-CVE-2018-0500	curl@7.57.0-r0	7.61.0-r0
Medium	GO-2024-2687	stdlib@go1.13.9	1.21.9
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.52.0
Medium	ALPINE-CVE-2018-16839	curl@7.57.0-r0	7.61.1-r1
Medium	DLA-2544-1	openldap@2.4.44+dfsg-5+deb9u4	2.4.44+dfsg-5+deb9u7
Medium	DLA-3008-1	openssl@1.1.0l-1~deb9u1	1.1.0l-1~deb9u6
Medium	GHSA-22f2-v57c-j9cx	rack@2.0.9	2.2.8.1
Medium	GHSA-jw9f-hh49-cvp9	nokogiri@1.10.9	1.11.4
Medium	GHSA-cf3w-g86h-35x4	carrierwave@1.3.1	1.3.2
Medium	ALPINE-CVE-2021-22945	curl@7.69.1-r0	7.79.0-r0
Medium	DLA-2952-1	openssl@1.1.0l-1~deb9u1	1.1.0l-1~deb9u5
Medium	DLA-2953-1	openssl1.0@1.0.2u-1~deb9u1	1.0.2u-1~deb9u7
Medium	ALPINE-CVE-2022-25235	expat@2.2.9-r1	2.2.10-r2
Medium	ALPINE-CVE-2018-1000301	curl@7.57.0-r0	7.60.0-r0
Medium	ALPINE-CVE-2022-22822	expat@2.2.9-r1	2.2.10-r0
Medium	ALPINE-CVE-2022-25315	expat@2.2.9-r1	2.2.10-r2
Medium	ALPINE-CVE-2018-1000300	curl@7.57.0-r0	7.60.0-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
4.2.3latest	5 years ago	13.2.2	5807271,845	38,133

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kubesphere/gitlab.svg)](https://charts.stackradar.io/charts/kubesphere/gitlab)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.