gitlab 4.2.3 Helm chart

Name: gitlab Helm chart 4.2.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kubesphere

Scored 14 Sept 2026

Web-based Git-repository manager with wiki and issue-tracking features.

Version 4.2.3 5 years agoapp version 13.2.2 0Artifact Hub

gitlab 4.2.3 deploys 17 container images: gitlab/gitlab-runner, mirrorgitlabcontainers/alpine-certificates, library/busybox, mirrorgitlabcontainers/gitlab-shell and 13 more. Across the 14 measured, 2,657 findings — 5 critical, 80 high — 18 on CISA KEV. The highest contribution is ALPINE-CVE-2021-3711 in openssl 1.1.1g-r0, fixed in 1.1.1l-r0.

Radar Score

38,1335807271,845

2,657 findings over 14 of 17 images measured

KEV ×18 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

17 images

Image	Tag	Vulnerabilities	Radar Score
gitlab/gitlab-runner×2	alpine-v13.2.1	21184197	4,526
mirrorgitlabcontainers/alpine-certificates×7	20171114-r3	0010	29
library/busybox×9	1.31.1	0000	0
mirrorgitlabcontainers/gitlab-shell	v13.3.0	0766216	3,823
mirrorgitlabcontainers/gitlab-sidekiq-ce×2	v13.2.2	111105185	4,803
mirrorgitlabcontainers/gitlab-task-runner-ce×2	v13.2.2	112113199	5,119
mirrorgitlabcontainers/gitlab-webservice-ce×2	v13.2.2	111105185	4,803
mirrorgitlabcontainers/gitlab-workhorse-ce	v13.2.2	0665214	3,719
minio/minio	RELEASE.2017-12-28T01-21-00Z	0490	480
kubesphere/nginx-ingress-controller	0.21.0	0000	0
mirrorgooglecontainers/defaultbackend-amd64	1.4	—	not yet scanned
mirrorgitlabcontainers/gitlab-container-registry	v2.9.1-gitlab	0549196	3,122
mirrorgitlabcontainers/gitaly	v13.2.2	012105290	5,548
bitnami/postgresql	11.7.0	—	unmeasured
bitnami/redis	5.0.7-debian-9-r50	—	unmeasured
minio/mc	RELEASE.2018-07-13T00-53-22Z	0010	29
mirrorgitlabcontainers/kubectl	1.13.12	0124163	2,132

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

652 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	DLA-2960-1	apache2@2.4.25-3+deb9u9	2.4.25-3+deb9u13
Medium	DLA-2706-1	apache2@2.4.25-3+deb9u9	2.4.25-3+deb9u10
Medium	GHSA-fp4w-jxhp-m23p	bundler@1.16.6	2.2.10
Medium	ALPINE-CVE-2022-23852	expat@2.2.9-r1	2.2.10-r1
Medium	GHSA-mqm2-cgpr-p4m6	kramdown@2.2.1	2.3.0
Medium	DLA-3017-1	openldap@2.4.44+dfsg-5+deb9u4	2.4.44+dfsg-5+deb9u9
Medium	ALPINE-CVE-2020-8285	curl@7.69.1-r0	7.69.1-r3
Medium	GHSA-r4mg-4433-c7g3	activestorage@6.0.3.1	7.1.5.2
Medium	DLA-2574-1	openldap@2.4.44+dfsg-5+deb9u4	2.4.44+dfsg-5+deb9u8
Medium	ALPINE-CVE-2018-1000121	curl@7.57.0-r0	7.59.0-r0
Medium	ALPINE-CVE-2018-1000005	curl@7.57.0-r0	7.58.0-r0
Medium	DLA-2968-1	zlib@1:1.2.8.dfsg-5	1:1.2.8.dfsg-5+deb9u1
Medium	DLA-2563-1	openssl@1.1.0l-1~deb9u1	1.1.0l-1~deb9u3
Medium	DLA-2565-1	openssl1.0@1.0.2u-1~deb9u1	1.0.2u-1~deb9u4
Medium	DLA-2766-1	openssl@1.1.0l-1~deb9u1	1.1.0l-1~deb9u4
Medium	DLA-2774-1	openssl1.0@1.0.2u-1~deb9u1	1.0.2u-1~deb9u6
Medium	ALPINE-CVE-2022-22823	expat@2.2.9-r1	2.2.10-r0
Medium	ALPINE-CVE-2022-22824	expat@2.2.9-r1	2.2.10-r0
Medium	GHSA-83g2-8m93-v3w7	golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa	0.0.0-20210520170846-37e1c6afe023
Medium	GHSA-c3xm-pvg7-gh7r	github.com/opencontainers/runc@v1.0.0-rc6.0.20190115182101-c1e454b2a1bf	1.0.0-rc95
Medium	ALPINE-CVE-2021-45960	expat@2.2.9-r1	2.2.10-r0
Medium	GHSA-jphg-qwrw-7w9g	json@2.1.0	2.3.0
Medium	GHSA-w749-p3v6-hccq	activestorage@6.0.3.1	6.0.4.7
Medium	GHSA-v222-6mr4-qj29	asciidoctor-include-ext@0.3.1	0.4.0
Medium	GHSA-52p9-v744-mwjj	kramdown@2.2.1	2.3.1
Medium	ALPINE-CVE-2019-14697	musl@1.1.18-r3	1.1.18-r4
Medium	GHSA-cg3q-j54f-5p7p	github.com/prometheus/client_golang@v1.0.0	1.11.1
Medium	GHSA-g6wq-qcwm-j5g2	websocket-extensions@0.1.4	0.1.5
Medium	GHSA-v4f8-2847-rwm7	nokogiri@1.10.9	1.11.4
Medium	ALPINE-CVE-2022-28391	busybox@1.31.1-r16	1.31.1-r22
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.31.0
Medium	DLA-2935-1	expat@2.2.0-2+deb9u3	2.2.0-2+deb9u5
Medium	GHSA-5c5f-7vfq-3732	jmespath@1.4.0	1.6.1
Medium	ALPINE-CVE-2018-16890	curl@7.57.0-r0	7.61.1-r2
Medium	GHSA-3hhc-qp5v-9p2j	activerecord@6.0.3.1	6.0.5.1
Medium	GHSA-v5h6-c2hv-hv3r	stringio@0.0.2	3.0.1.1
Medium	GHSA-jrfj-98qg-qjgv	sidekiq@5.2.9	5.2.10
Medium	GHSA-c3h9-896r-86jm	github.com/gogo/protobuf@v1.1.1	1.3.2
Medium	ALPINE-CVE-2021-39537	ncurses@6.2_p20200523-r0	6.2_p20200523-r1
Medium	GHSA-5f9h-9pjv-v6j7	rack@2.0.9	2.1.3
Medium	GHSA-8cr8-4vfw-mr7h	rexml@3.1.9	3.2.5
Medium	GHSA-7wjx-3g7j-8584	actionpack@6.0.3.1	6.0.3.7
Medium	DLA-2559-1	busybox@1:1.22.0-19+b3	1:1.22.0-19+deb9u1
Medium	ALPINE-CVE-2021-36159	apk-tools@2.10.5-r1	2.10.7-r0
Medium	ALPINE-CVE-2022-25314	expat@2.2.9-r1	2.2.10-r2
Medium	ALPINE-CVE-2020-8286	curl@7.69.1-r0	7.69.1-r3
Medium	GHSA-vvpx-j8f3-3w6h	golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa	0.7.0
Medium	GHSA-33c5-9fx5-fvjm	k8s.io/apimachinery@v0.0.0-20191004074956-c5d2f014d689	0.16.13
Medium	ALPINE-CVE-2021-22946	curl@7.69.1-r0	7.79.0-r0
Medium	ALPINE-CVE-2022-22826	expat@2.2.9-r1	2.2.10-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
4.2.3latest	5 years ago	13.2.2	5807271,845	38,133

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kubesphere/gitlab.svg)](https://charts.stackradar.io/charts/kubesphere/gitlab)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.