gitlab 4.2.3 Helm chart
kubesphereVerified publisherScored 14 Sept 2026
Web-based Git-repository manager with wiki and issue-tracking features.
Version 4.2.3 5 years agoapp version 13.2.2 0Artifact Hub
gitlab 4.2.3 deploys 17 container images: gitlab/gitlab-runner, mirrorgitlabcontainers/alpine-certificates, library/busybox, mirrorgitlabcontainers/gitlab-shell and 13 more. Across the 14 measured, 2,657 findings — 5 critical, 80 high — 18 on CISA KEV. The highest contribution is ALPINE-CVE-2021-3711 in openssl 1.1.1g-r0, fixed in 1.1.1l-r0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
17 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| gitlab/ | alpine-v13.2.1 | 21184197 | 4,526 |
| mirrorgitlabcontainers/ | 20171114-r3 | 0010 | 29 |
| library/ | 1.31.1 | 0000 | 0 |
| mirrorgitlabcontainers/ | v13.3.0 | 0766216 | 3,823 |
| mirrorgitlabcontainers/ | v13.2.2 | 111105185 | 4,803 |
| mirrorgitlabcontainers/ | v13.2.2 | 112113199 | 5,119 |
| mirrorgitlabcontainers/ | v13.2.2 | 111105185 | 4,803 |
| mirrorgitlabcontainers/ | v13.2.2 | 0665214 | 3,719 |
| minio/ | RELEASE.2017-12-28T01-21-00Z | 0490 | 480 |
| kubesphere/ | 0.21.0 | 0000 | 0 |
| mirrorgooglecontainers/ | 1.4 | — | not yet scanned |
| mirrorgitlabcontainers/ | v2.9.1-gitlab | 0549196 | 3,122 |
| mirrorgitlabcontainers/ | v13.2.2 | 012105290 | 5,548 |
| bitnami/ | 11.7.0 | — | unmeasured |
| bitnami/ | 5.0.7-debian-9-r50 | — | unmeasured |
| minio/ | RELEASE.2018-07-13T00-53-22Z | 0010 | 29 |
| mirrorgitlabcontainers/ | 1.13.12 | 0124163 | 2,132 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
652 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-ggxm-pgc9-g7fp | rdoc | 6.1.2.1 |
| Medium | GHSA-w6pv-c757-6rgr | apollo_upload_server | 2.1.0 |
| Medium | GHSA-x527-x647-q7gg | golang.org/ | 0.52.0 |
| Medium | GHSA-5866-49gr-22v4 | rexml | 3.3.3 |
| Medium | DLA-2369-1 | libxml2 | 2.9.4+dfsg1-2.2+deb9u3 |
| Medium | GHSA-69p3-xp37-f692 | kubeclient | 4.9.3 |
| Medium | GHSA-hggm-jpg3-v476 | cryptography | 3.2 |
| Medium | GHSA-gjh7-p2fx-99vx | rack | 2.2.14 |
| Medium | GHSA-7wqh-767x-r66v | rack | 2.2.13 |
| Medium | GHSA-3ww4-gg4f-jr7f | cryptography | 42.0.0 |
| Medium | GHSA-gwc9-m7rh-j2ww | golang.org/ | 0.0.0-20211202192323-5770296d904e |
| Medium | GHSA-vgwf-h737-ff37 | golang.org/ | 0.52.0 |
| Medium | GHSA-3x8r-x6xp-q4vm | loofah | 2.19.1 |
| Medium | GHSA-9xrj-h377-fr87 | activestorage | 7.2.3.1 |
| Medium | GHSA-f5wc-c3c7-36mc | golang.org/ | 0.52.0 |
| Medium | DLA-2492-1 | openssl | 1.1.0l-1~deb9u2 |
| Medium | DLA-2493-1 | openssl1.0 | 1.0.2u-1~deb9u3 |
| Medium | GO-2021-0243 | stdlib | 1.15.14 |
| Medium | GO-2022-0273 | stdlib | 1.16.8 |
| Medium | GHSA-p782-xgp4-8hr8 | golang.org/ | 0.0.0-20220412211240-33da011f77ad |
| Medium | GHSA-73f9-jhhh-hr5m | activestorage | 7.2.3.1 |
| Medium | ALPINE-CVE-2020-14145 | openssh | 8.3_p1-r1 |
| Medium | GHSA-4f99-4q7p-p3gh | github.com/ | 1.8.3 |
| Medium | GHSA-2j26-frm8-cmj9 | activesupport | 7.2.3.1 |
| Medium | GHSA-r46p-8f7g-vvvg | activestorage | 7.2.3.1 |
| Medium | DLA-2734-1 | curl | 7.52.1-5+deb9u15 |
| Medium | GHSA-mm33-5vfq-3mm3 | actionpack | 6.0.4.8 |
| Medium | GHSA-hqxw-f8mx-cpmw | github.com/ | 2.8.2-beta.1 |
| Medium | GHSA-rm3j-f69w-wqmq | golang.org/ | 0.52.0 |
| Medium | GHSA-p543-xpfm-54cp | rack | 2.2.19 |
| Medium | GHSA-wpv5-97wm-hp9c | rack | 2.2.19 |
| Medium | GHSA-hcg3-q754-cr77 | golang.org/ | 0.35.0 |
| Medium | GHSA-2rqw-v265-jf8c | actionpack | 6.0.4.1 |
| Medium | DLA-2972-1 | libxml2 | 2.9.4+dfsg1-2.2+deb9u6 |
| Medium | GHSA-cfjv-5498-mph5 | actionview | 6.0.3.3 |
| Medium | GHSA-ch3h-j2vf-95pv | actionview | 6.0.4.8 |
| Medium | GHSA-v95c-p5hm-xq8f | github.com/ | 1.0.3 |
| Medium | GO-2022-1144 | stdlib | 1.18.9 |
| Medium | GHSA-6v2p-p543-phr9 | golang.org/ | 0.27.0 |
| Medium | GHSA-w7pp-m8wf-vj6r | cryptography | 39.0.1 |
| Medium | GHSA-5pq7-52mg-hr42 | httparty | 0.21.0 |
| Medium | PYSEC-2024-225 | cryptography | 42.0.4 |
| Medium | DLA-2664-1 | curl | 7.52.1-5+deb9u14 |
| Medium | GHSA-xrx6-fmxq-rjj2 | rsa | 4.7 |
| Medium | GHSA-jr27-m4p2-rc6r | pyasn1 | 0.6.3 |
| Medium | GHSA-5xp3-jfq3-5q8x | pip | 21.1 |
| Low | GHSA-9493-h29p-rfm2 | github.com/ | 1.2.8 |
| Low | ALPINE-CVE-2022-27774 | curl | 7.79.1-r1 |
| Low | GHSA-7g2v-jj9q-g3rg | rack | 2.2.11 |
| Low | DLA-2976-1 | gzip | 1.6-5+deb9u1 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/kubesphere/gitlab)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.