gitlab 4.2.3 Helm chart
kubesphereVerified publisherScored 14 Sept 2026
Web-based Git-repository manager with wiki and issue-tracking features.
Version 4.2.3 5 years agoapp version 13.2.2 0Artifact Hub
gitlab 4.2.3 deploys 17 container images: gitlab/gitlab-runner, mirrorgitlabcontainers/alpine-certificates, library/busybox, mirrorgitlabcontainers/gitlab-shell and 13 more. Across the 14 measured, 2,657 findings — 5 critical, 80 high — 18 on CISA KEV. The highest contribution is ALPINE-CVE-2021-3711 in openssl 1.1.1g-r0, fixed in 1.1.1l-r0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
17 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| gitlab/ | alpine-v13.2.1 | 21184197 | 4,526 |
| mirrorgitlabcontainers/ | 20171114-r3 | 0010 | 29 |
| library/ | 1.31.1 | 0000 | 0 |
| mirrorgitlabcontainers/ | v13.3.0 | 0766216 | 3,823 |
| mirrorgitlabcontainers/ | v13.2.2 | 111105185 | 4,803 |
| mirrorgitlabcontainers/ | v13.2.2 | 112113199 | 5,119 |
| mirrorgitlabcontainers/ | v13.2.2 | 111105185 | 4,803 |
| mirrorgitlabcontainers/ | v13.2.2 | 0665214 | 3,719 |
| minio/ | RELEASE.2017-12-28T01-21-00Z | 0490 | 480 |
| kubesphere/ | 0.21.0 | 0000 | 0 |
| mirrorgooglecontainers/ | 1.4 | — | not yet scanned |
| mirrorgitlabcontainers/ | v2.9.1-gitlab | 0549196 | 3,122 |
| mirrorgitlabcontainers/ | v13.2.2 | 012105290 | 5,548 |
| bitnami/ | 11.7.0 | — | unmeasured |
| bitnami/ | 5.0.7-debian-9-r50 | — | unmeasured |
| minio/ | RELEASE.2018-07-13T00-53-22Z | 0010 | 29 |
| mirrorgitlabcontainers/ | 1.13.12 | 0124163 | 2,132 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
652 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | ALPINE-CVE-2022-22827 | expat | 2.2.10-r0 |
| Medium | GHSA-8hc4-xxm3-5ppp | activerecord | 6.0.3.5 |
| Medium | GHSA-fgv8-vj5c-2ppq | github.com/ | 1.0.0-rc8.0.20190930145003-cad42f6e0932 |
| Medium | ALPINE-CVE-2019-3823 | curl | 7.61.1-r2 |
| Medium | GHSA-wq4h-7r42-5hrr | rack | 2.0.9.1 |
| Medium | ALPINE-CVE-2021-46143 | expat | 2.2.10-r0 |
| Medium | ALPINE-CVE-2022-22825 | expat | 2.2.10-r0 |
| Medium | GHSA-xh29-r2w5-wx8m | nokogiri | 1.13.6 |
| Medium | GHSA-hjg4-8q5f-x6fm | actionpack | 6.0.3.7 |
| Medium | GHSA-5ww9-9qp2-x524 | diffy | 3.4.1 |
| Medium | ALPINE-CVE-2022-23990 | expat | 2.2.10-r1 |
| Medium | GHSA-8c26-wmh5-6g9v | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b |
| Medium | GHSA-gwfg-cqmg-cf8f | webrick | 1.4.4 |
| Medium | GHSA-4374-p667-p6c8 | golang.org/ | 0.17.0 |
| Medium | ALPINE-CVE-2020-8231 | curl | 7.69.1-r2 |
| Medium | ALPINE-CVE-2018-16842 | curl | 7.61.1-r1 |
| Medium | GHSA-93xj-8mrv-444m | httplib2 | 0.19.0 |
| Medium | ALPINE-CVE-2021-23841 | openssl | 1.1.1j-r0 |
| Medium | GHSA-crjr-9rc5-ghw8 | nokogiri | 1.13.4 |
| Medium | GHSA-hq7p-j377-6v63 | activerecord | 6.0.6.1 |
| Medium | ALPINE-CVE-2020-8169 | curl | 7.69.1-r1 |
| Medium | ALPINE-CVE-2020-1971 | openssl | 1.1.1i-r0 |
| Medium | GHSA-69cg-p879-7622 | golang.org/ | 0.0.0-20220906165146-f3363e06e74c |
| Medium | GHSA-3vm4-22fp-5rfm | golang.org/ | 0.0.0-20201216223049-8b5274cf687f |
| Medium | GHSA-qg54-694p-wgpp | date | 2.0.1 |
| Medium | ALPINE-CVE-2022-27775 | curl | 7.79.1-r1 |
| Medium | GHSA-cx63-2mw6-8hw5 | setuptools | 70.0.0 |
| Medium | GHSA-j6w9-fv6q-3q52 | rack | 2.1.4 |
| Medium | ALPINE-CVE-2021-28041 | openssh | 8.3_p1-r2 |
| Medium | ALPINE-CVE-2021-40330 | git | 2.26.3-r1 |
| Medium | ALPINE-CVE-2021-22922 | curl | 7.78.0-r0 |
| Medium | GHSA-g8ww-46x2-2p65 | actionpack | 6.0.3.7 |
| Medium | GHSA-p77j-4mvh-x3m3 | google.golang.org/ | 1.79.3 |
| Medium | GHSA-735f-pc8j-v9w8 | google-protobuf | 3.25.5 |
| Medium | ALPINE-CVE-2021-42380 | busybox | 1.31.1-r21 |
| Medium | ALPINE-CVE-2022-22576 | curl | 7.79.1-r1 |
| Medium | GHSA-cjjc-xp8v-855w | golang.org/ | 0.0.0-20200124225646-8b5121be2f68 |
| Medium | GHSA-r9hx-vwmv-q579 | setuptools | 65.5.1 |
| Medium | GHSA-ww4x-rwq6-qpgf | omniauth | 2.0.0 |
| Medium | GHSA-pm55-qfxr-h247 | omniauth | 1.9.2 |
| Medium | ALPINE-CVE-2022-27776 | curl | 7.79.1-r1 |
| Medium | ALPINE-CVE-2021-42379 | busybox | 1.31.1-r21 |
| Medium | ALPINE-CVE-2021-42381 | busybox | 1.31.1-r21 |
| Medium | ALPINE-CVE-2021-42385 | busybox | 1.31.1-r21 |
| Medium | PYSEC-2025-49 | setuptools | 78.1.1 |
| Medium | ALPINE-CVE-2021-42378 | busybox | 1.31.1-r21 |
| Medium | ALPINE-CVE-2021-42382 | busybox | 1.31.1-r21 |
| Medium | ALPINE-CVE-2021-42384 | busybox | 1.31.1-r21 |
| Medium | ALPINE-CVE-2021-42386 | busybox | 1.31.1-r21 |
| Medium | GHSA-fmx4-26r3-wxpf | commonmarker | 0.23.4 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/kubesphere/gitlab)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.