StackRadar

gitlab 4.2.3 Helm chart

kubesphereVerified publisher

Scored 14 Sept 2026

Web-based Git-repository manager with wiki and issue-tracking features.

Version 4.2.3 5 years agoapp version 13.2.2 0Artifact Hub

gitlab 4.2.3 deploys 17 container images: gitlab/gitlab-runner, mirrorgitlabcontainers/alpine-certificates, library/busybox, mirrorgitlabcontainers/gitlab-shell and 13 more. Across the 14 measured, 2,657 findings5 critical, 80 high 18 on CISA KEV. The highest contribution is ALPINE-CVE-2021-3711 in openssl 1.1.1g-r0, fixed in 1.1.1l-r0.

Radar Score

38,1335807271,845

2,657 findings over 14 of 17 images measured

KEV ×18 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

17 images
ImageTagVulnerabilitiesRadar Score
gitlab/gitlab-runner×2alpine-v13.2.1211841974,526
mirrorgitlabcontainers/alpine-certificates×720171114-r3001029
library/busybox×91.31.100000
mirrorgitlabcontainers/gitlab-shellv13.3.007662163,823
mirrorgitlabcontainers/gitlab-sidekiq-ce×2v13.2.21111051854,803
mirrorgitlabcontainers/gitlab-task-runner-ce×2v13.2.21121131995,119
mirrorgitlabcontainers/gitlab-webservice-ce×2v13.2.21111051854,803
mirrorgitlabcontainers/gitlab-workhorse-cev13.2.206652143,719
minio/minioRELEASE.2017-12-28T01-21-00Z0490480
kubesphere/nginx-ingress-controller0.21.000000
mirrorgooglecontainers/defaultbackend-amd641.4not yet scanned
mirrorgitlabcontainers/gitlab-container-registryv2.9.1-gitlab05491963,122
mirrorgitlabcontainers/gitalyv13.2.20121052905,548
bitnami/postgresql11.7.0unmeasured
bitnami/redis5.0.7-debian-9-r50unmeasured
minio/mcRELEASE.2018-07-13T00-53-22Z001029
mirrorgitlabcontainers/kubectl1.13.1201241632,132

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

652 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGO-2023-1568stdlib@go1.13.91.19.6
LowGHSA-5prr-v3j2-97mhnokogiri@1.10.91.19.4
LowGO-2022-1037stdlib@go1.13.91.18.7
LowPYSEC-2026-3554cryptography@3.049.0.0
LowGO-2023-1987stdlib@go1.13.91.19.12
LowGHSA-p67v-3w7g-wjg7nokogiri@1.10.91.19.4
LowGHSA-wjv4-x9w8-wm3hnokogiri@1.10.91.19.4
LowGHSA-cvp8-5r8g-fhvqomniauth-saml@1.10.01.10.5
LowGO-2023-1752stdlib@go1.13.91.19.9
LowGHSA-c32j-vqhx-rx3xjwt@2.1.02.10.3
LowGHSA-4xh5-x5gv-qwphpip@20.1.125.3
LowGO-2023-1705stdlib@go1.13.91.19.8
LowGHSA-hj56-84jw-67h6bindata@2.4.32.4.10
LowGHSA-fwcm-636p-68r5carrierwave@1.3.11.3.2
LowGO-2023-1878stdlib@go1.13.91.19.11
LowGHSA-vr8q-g5c7-m54mnokogiri@1.10.91.11.0
LowALPINE-CVE-2021-42374busybox@1.31.1-r161.31.1-r21
LowGHSA-f27w-vcwj-c954bcrypt@3.1.123.1.22
LowGHSA-45gg-vh54-h5m9golang.org/x/crypto@v0.0.0-20191011191535-87dc89f015500.52.0
LowGHSA-h35f-9h28-mq5csetuptools@47.3.183.0.0
LowGO-2022-1039stdlib@go1.13.91.18.7
LowDLA-2691-1libgcrypt20@1.7.6-2+deb9u31.7.6-2+deb9u4
LowGHSA-r657-rxjc-j557rack@2.0.92.2.20
LowGO-2024-2963stdlib@go1.13.91.21.12
LowGO-2023-1702stdlib@go1.13.91.19.8
LowGHSA-5cv4-jp36-h3mwgolang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa0.55.0
LowGHSA-fh74-hm69-rqjwgithub.com/opencontainers/runc@v1.0.0-rc6.0.20190115182101-c1e454b2a1bf1.0.0-rc9.0.20200122160610-2fc03cc11c77
LowGHSA-mrxw-mxhj-p664nokogiri@1.10.91.18.4
LowGO-2022-0525stdlib@go1.13.91.17.12
LowGO-2022-0520stdlib@go1.13.91.17.12
LowGHSA-8j3g-f24p-4mpwwebsocket-driver@0.7.10.8.1
LowGHSA-353f-x4gh-cqq8nokogiri@1.10.91.18.9
LowGHSA-hw46-3hmr-x9xvomniauth-saml@1.10.01.10.6
LowDLA-2932-1tiff@4.0.8-2+deb9u54.0.8-2+deb9u8
LowGHSA-5v8h-3h3q-446pnokogiri@1.10.91.19.4
LowGHSA-76r7-hhxj-r776activerecord@6.0.3.17.1.5.2
LowGHSA-7rrm-v45f-jp64nokogiri@1.10.91.11.4
LowGHSA-j5w8-q4qc-rx2xgolang.org/x/crypto@v0.0.0-20191011191535-87dc89f015500.45.0
LowGHSA-f3fp-gc8g-vw66github.com/opencontainers/runc@v1.0.0-rc6.0.20190115182101-c1e454b2a1bf1.1.2
LowPYSEC-2026-3721pip@20.1.126.2
LowDLA-2295-1curl@7.52.1-5+deb9u107.52.1-5+deb9u11
LowGO-2023-2375stdlib@go1.13.91.20.0
LowGHSA-vvgc-356p-c3xwgolang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa0.38.0
LowGO-2023-1569stdlib@go1.13.91.19.6
LowGHSA-mq26-g339-26xfpip@20.1.123.3
LowGHSA-g2j6-57v7-gm8cgithub.com/opencontainers/runc@v1.0.0-rc6.0.20190115182101-c1e454b2a1bf1.1.5
LowGHSA-qc2q-p7wx-3px3google.golang.org/grpc@v1.24.01.83.1
LowDLA-2784-1icu@57.1-6+deb9u457.1-6+deb9u5
LowGO-2023-2382stdlib@go1.13.91.20.12
LowGO-2022-1143stdlib@go1.13.91.18.9

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
4.2.3latest5 years ago13.2.25807271,84538,133

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/kubesphere/gitlab.svg)](https://charts.stackradar.io/charts/kubesphere/gitlab)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.