gitlab 4.2.3 Helm chart

Name: gitlab Helm chart 4.2.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kubesphere

Scored 14 Sept 2026

Web-based Git-repository manager with wiki and issue-tracking features.

Version 4.2.3 5 years agoapp version 13.2.2 0Artifact Hub

gitlab 4.2.3 deploys 17 container images: gitlab/gitlab-runner, mirrorgitlabcontainers/alpine-certificates, library/busybox, mirrorgitlabcontainers/gitlab-shell and 13 more. Across the 14 measured, 2,657 findings — 5 critical, 80 high — 18 on CISA KEV. The highest contribution is ALPINE-CVE-2021-3711 in openssl 1.1.1g-r0, fixed in 1.1.1l-r0.

Radar Score

38,1335807271,845

2,657 findings over 14 of 17 images measured

KEV ×18 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

17 images

Image	Tag	Vulnerabilities	Radar Score
gitlab/gitlab-runner×2	alpine-v13.2.1	21184197	4,526
mirrorgitlabcontainers/alpine-certificates×7	20171114-r3	0010	29
library/busybox×9	1.31.1	0000	0
mirrorgitlabcontainers/gitlab-shell	v13.3.0	0766216	3,823
mirrorgitlabcontainers/gitlab-sidekiq-ce×2	v13.2.2	111105185	4,803
mirrorgitlabcontainers/gitlab-task-runner-ce×2	v13.2.2	112113199	5,119
mirrorgitlabcontainers/gitlab-webservice-ce×2	v13.2.2	111105185	4,803
mirrorgitlabcontainers/gitlab-workhorse-ce	v13.2.2	0665214	3,719
minio/minio	RELEASE.2017-12-28T01-21-00Z	0490	480
kubesphere/nginx-ingress-controller	0.21.0	0000	0
mirrorgooglecontainers/defaultbackend-amd64	1.4	—	not yet scanned
mirrorgitlabcontainers/gitlab-container-registry	v2.9.1-gitlab	0549196	3,122
mirrorgitlabcontainers/gitaly	v13.2.2	012105290	5,548
bitnami/postgresql	11.7.0	—	unmeasured
bitnami/redis	5.0.7-debian-9-r50	—	unmeasured
minio/mc	RELEASE.2018-07-13T00-53-22Z	0010	29
mirrorgitlabcontainers/kubectl	1.13.12	0124163	2,132

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

652 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2021-0240	stdlib@go1.13.9	1.15.13
Low	GHSA-qw9x-cqr3-wc7r	github.com/opencontainers/runc@v1.0.0-rc6.0.20190115182101-c1e454b2a1bf	1.2.8
Low	GHSA-cgrx-mc8f-2prm	github.com/opencontainers/runc@v1.0.0-rc6.0.20190115182101-c1e454b2a1bf	1.2.8
Low	DLA-2302-1	libjpeg-turbo@1:1.5.1-2	1:1.5.1-2+deb9u1
Low	GO-2021-0242	stdlib@go1.13.9	1.15.13
Low	DLA-2513-1	p11-kit@0.23.3-2	0.23.3-2+deb9u1
Low	GHSA-h4h5-3hr4-j3g2	google-protobuf@3.8.0	3.16.3
Low	GO-2021-0264	stdlib@go1.13.9	1.16.10
Low	GO-2022-0969	stdlib@go1.13.9	1.18.6
Low	DLA-3022-1	dpkg@1.18.25	1.18.26
Low	GO-2021-0239	stdlib@go1.13.9	1.15.13
Low	DLA-2657-1	lz4@0.0~r131-2+b1	0.0~r131-2+deb9u1
Low	GO-2021-0347	stdlib@go1.13.9	1.16.15
Low	GHSA-496j-2rq6-j6cc	grpc@1.24.0	1.53.2
Low	GO-2021-0245	stdlib@go1.13.9	1.15.15
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.52.0
Low	GO-2021-0319	stdlib@go1.13.9	1.16.14
Low	ALPINE-CVE-2020-8284	curl@7.69.1-r0	7.74.0-r0
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.52.0
Low	GHSA-mcvf-2q2m-x72m	rails-html-sanitizer@1.3.0	1.4.4
Low	GHSA-gxhx-g4fq-49hj	carrierwave@1.3.1	2.2.5
Low	GHSA-2wrh-6pvc-2jm9	golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa	0.13.0
Low	GHSA-cgx6-hpwq-fhv5	nokogiri@1.10.9	1.13.5
Low	GHSA-r6ph-v2qm-q3c2	cryptography@3.0	46.0.5
Low	GO-2022-0493	stdlib@go1.13.9	1.17.10
Low	GHSA-x4h9-gwv3-r4m4	ruby-saml@1.7.2	1.18.0
Low	GHSA-fq42-c5rg-92c2	nokogiri@1.10.9	1.13.2
Low	GO-2021-0224	stdlib@go1.13.9	1.13.13
Low	DLA-2481-1	openldap@2.4.44+dfsg-5+deb9u4	2.4.44+dfsg-5+deb9u6
Low	GHSA-g98m-96g9-wfjq	bundler@1.16.6	2.1.0
Low	GHSA-v569-hp3g-36wr	rack@2.0.9	2.2.23
Low	GO-2021-0317	stdlib@go1.13.9	1.16.14
Low	GHSA-228g-948r-83gx	loofah@2.5.0	2.19.1
Low	DLA-2566-1	libbsd@0.8.3-1	0.8.3-1+deb9u1
Low	GHSA-j5g9-f88f-gfj3	httplib2@0.18.1	0.32.0
Low	GO-2023-2185	stdlib@go1.13.9	1.20.11
Low	DLA-2614-1	busybox@1:1.22.0-19+b3	1:1.22.0-19+deb9u2
Low	DLA-2760-1	nettle@3.3-1+b2	3.3-1+deb9u1
Low	GO-2021-0235	stdlib@go1.13.9	1.14.14
Low	DLA-2596-1	shadow@1:4.4-4.1	1:4.4-4.1+deb9u1
Low	GO-2022-0229	stdlib@go1.13.3	1.12.16
Low	GHSA-8h22-8cf7-hq6g	activestorage@6.0.3.1	6.1.7.7
Low	PYSEC-2026-3553	cryptography@3.0	49.0.0
Low	DLA-2771-1	krb5@1.15-1+deb9u1	1.15-1+deb9u3
Low	GHSA-wf93-45jw-7689	pip@20.1.1	26.1.2
Low	GHSA-cg4j-q9v8-6v38	activesupport@6.0.3.1	7.2.3.1
Low	GHSA-h2jq-g4cq-5ppq	rack@2.0.9	2.2.23
Low	GHSA-hm5p-x4rq-38w4	httparty@0.16.4	0.24.0
Low	ALPINE-CVE-2021-22890	curl@7.69.1-r0	7.76.0-r0
Low	GO-2022-0537	stdlib@go1.13.9	1.17.13

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
4.2.3latest	5 years ago	13.2.2	5807271,845	38,133

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kubesphere/gitlab.svg)](https://charts.stackradar.io/charts/kubesphere/gitlab)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.