gitlab Helm chart

Name: gitlab Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kubesphere

Scored 14 Sept 2026

Web-based Git-repository manager with wiki and issue-tracking features.

Latest 4.2.3 5 years agoapp version 13.2.2 0Artifact Hub

gitlab 4.2.3 deploys 17 container images: gitlab/gitlab-runner, mirrorgitlabcontainers/alpine-certificates, library/busybox, mirrorgitlabcontainers/gitlab-shell and 13 more. Across the 14 measured, 2,657 findings — 5 critical, 80 high — 18 on CISA KEV. The highest contribution is ALPINE-CVE-2021-3711 in openssl 1.1.1g-r0, fixed in 1.1.1l-r0.

Radar Score

38,1335807271,845

2,657 findings over 14 of 17 images measured

KEV ×18 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

17 images

Image	Tag	Vulnerabilities	Radar Score
gitlab/gitlab-runner×2	alpine-v13.2.1	21184197	4,526
mirrorgitlabcontainers/alpine-certificates×7	20171114-r3	0010	29
library/busybox×9	1.31.1	0000	0
mirrorgitlabcontainers/gitlab-shell	v13.3.0	0766216	3,823
mirrorgitlabcontainers/gitlab-sidekiq-ce×2	v13.2.2	111105185	4,803
mirrorgitlabcontainers/gitlab-task-runner-ce×2	v13.2.2	112113199	5,119
mirrorgitlabcontainers/gitlab-webservice-ce×2	v13.2.2	111105185	4,803
mirrorgitlabcontainers/gitlab-workhorse-ce	v13.2.2	0665214	3,719
minio/minio	RELEASE.2017-12-28T01-21-00Z	0490	480
kubesphere/nginx-ingress-controller	0.21.0	0000	0
mirrorgooglecontainers/defaultbackend-amd64	1.4	—	not yet scanned
mirrorgitlabcontainers/gitlab-container-registry	v2.9.1-gitlab	0549196	3,122
mirrorgitlabcontainers/gitaly	v13.2.2	012105290	5,548
bitnami/postgresql	11.7.0	—	unmeasured
bitnami/redis	5.0.7-debian-9-r50	—	unmeasured
minio/mc	RELEASE.2018-07-13T00-53-22Z	0010	29
mirrorgitlabcontainers/kubectl	1.13.12	0124163	2,132

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

406 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.24.0	1.83.1
Low	DLA-2784-1	icu@57.1-6+deb9u4	57.1-6+deb9u5
Low	GO-2023-2382	stdlib@go1.13.9	1.20.12
Low	GO-2022-1143	stdlib@go1.13.9	1.18.9
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.52.0
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.45.0
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.52.0
Low	GO-2024-2599	stdlib@go1.13.9	1.21.8
Low	GO-2022-1038	stdlib@go1.13.9	1.18.7
Low	GO-2024-3106	stdlib@go1.13.9	1.22.7
Low	GO-2023-1570	stdlib@go1.13.9	1.19.6
Low	GO-2022-0531	stdlib@go1.13.9	1.17.11
Low	GO-2024-2600	stdlib@go1.13.9	1.21.8
Low	GHSA-r88r-gmrh-7j83	gopkg.in/yaml.v2@v2.2.2	2.2.3
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.24.0	1.82.1
Low	GO-2024-2609	stdlib@go1.13.9	1.21.8
Low	GO-2024-3107	stdlib@go1.13.9	1.22.7
Low	GO-2023-1751	stdlib@go1.13.9	1.19.9
Low	GO-2023-1753	stdlib@go1.13.9	1.19.9
Low	DLA-2290-1	e2fsprogs@1.43.4-2+deb9u1	1.43.4-2+deb9u2
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.52.0
Low	GHSA-f5pg-7wfw-84q9	github.com/aws/aws-sdk-go@v1.31.7	1.34.0
Low	GHSA-vp96-hxj8-p424	pyopenssl@19.1.0	26.0.0
Low	GO-2023-2041	stdlib@go1.13.9	1.20.8
Low	GO-2023-2043	stdlib@go1.13.9	1.20.8
Low	GHSA-2qc6-mcvw-92cw	nokogiri@1.10.9	1.13.9
Low	GHSA-pxvg-2qj5-37jq	nokogiri@1.10.9	1.14.3
Low	GHSA-qcfx-2mfw-w4cg	activestorage@6.0.3.1	7.2.3.1
Low	GO-2022-0515	stdlib@go1.13.9	1.17.12
Low	GO-2023-2186	stdlib@go1.13.9	1.20.11
Low	GHSA-xc9x-jj77-9p9j	nokogiri@1.10.9	1.15.6
Low	GHSA-x8cg-fq8g-mxfx	rack@2.0.9	2.2.23
Low	GHSA-jfmj-5v4g-7637	zipp@3.1.0	3.19.1
Low	GO-2024-3333	golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa	0.33.0
Low	GHSA-jp94-3292-c3xv	devise@4.7.1	5.0.4
Low	GO-2024-3105	stdlib@go1.13.9	1.22.7
Low	GO-2022-1095	stdlib@go1.13.9	1.18.8
Low	GHSA-7w2c-w47h-789w	doorkeeper@5.0.3	5.6.6
Low	GHSA-cj75-f6xr-r4g7	rails-html-sanitizer@1.3.0	1.7.1
Low	GO-2023-1621	stdlib@go1.13.9	1.19.7
Low	GO-2026-4981	stdlib@go1.13.9	1.25.10
Low	GO-2025-3563	stdlib@go1.13.9	1.23.8
Low	GO-2026-4977	stdlib@go1.13.9	1.25.10
Low	GO-2024-2610	stdlib@go1.13.9	1.21.8
Low	GO-2026-4986	stdlib@go1.13.9	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa	0.53.0
Low	GO-2026-4918	stdlib@go1.13.9	1.25.10
Low	GO-2026-4337	stdlib@go1.13.9	1.24.13
Low	GHSA-mvxr-6m87-mv2q	mail@2.7.1	2.9.1
Low	GHSA-89vf-4333-qx8v	activesupport@6.0.3.1	7.2.3.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
4.2.3latest	5 years ago	13.2.2	5807271,845	38,133

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kubesphere/gitlab.svg)](https://charts.stackradar.io/charts/kubesphere/gitlab)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.