StackRadar

servarr 1.5.2 Helm chart

kubitodevVerified publisher

Scored 14 Sept 2026

Kubito Servarr Helm Chart

Version 1.5.2 2 months agodeploys tag 1.4.5 7Artifact Hub

servarr 1.5.2 deploys 10 container images: lscr.io/linuxserver/bazarr, ghcr.io/flaresolverr/flaresolverr, lscr.io/linuxserver/jellyfin, ghcr.io/seerr-team/seerr and 6 more. Across the 3 measured, 273 findings0 critical, 2 high 1 on CISA KEV. The highest contribution is GHSA-r5fr-rjxr-66jc in lodash-es 4.17.23, fixed in 4.18.0.

Radar Score

3,0040238233

273 findings over 3 of 10 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

10 images
ImageTagVulnerabilitiesRadar Score
lscr.io/linuxserver/bazarr1.4.5unmeasured
ghcr.io/flaresolverr/flaresolverrv3.3.210114821,013
lscr.io/linuxserver/jellyfin10.10.1unmeasured
ghcr.io/seerr-team/seerrlatest01241511,991
library/busybox×3latest00000
lscr.io/linuxserver/lidarr2.7.1unmeasured
lscr.io/linuxserver/prowlarr1.25.4unmeasured
lscr.io/linuxserver/qbittorrent4.6.7unmeasured
lscr.io/linuxserver/radarr5.14.0unmeasured
lscr.io/linuxserver/sonarr4.0.10unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

233 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowDLA-4143-1glibc@2.31-13+deb11u102.31-13+deb11u12
LowDLA-4089-1libxslt@1.1.34-4+deb11u11.1.34-4+deb11u2
LowDLA-4195-1krb5@1.18.3-6+deb11u41.18.3-6+deb11u7
LowDLA-4230-1xorg-server@2:1.20.11-1+deb11u132:1.20.11-1+deb11u16
LowGHSA-v3r7-h72x-cjcmundici@6.25.06.28.0
LowGHSA-v422-hmwv-36x6body-parser@2.2.22.3.0
LowGHSA-jp4c-xjxw-mgf9pip@24.026.1
LowGHSA-8m3c-c648-2xjjnodemailer@6.9.169.1.1
LowGHSA-8xcm-r25x-g524undici@6.25.06.28.0
LowDLA-4424-1openjpeg2@2.4.0-32.4.0-3+deb11u2
LowGHSA-m8rv-5g2x-5cg5undici@6.25.06.28.0
LowGHSA-58qw-9mgm-455vpip@24.026.1
LowGHSA-c7w3-x93f-qmm8nodemailer@6.9.168.0.4
LowGHSA-g8m3-5g58-fq7mundici@6.25.06.27.0
LowDLA-4225-1gdk-pixbuf@2.42.2+dfsg-1+deb11u12.42.2+dfsg-1+deb11u3
LowDLA-4469-1alsa-lib@1.2.4-1.11.2.4-1.1+deb11u1
LowGHSA-35p6-xmwp-9g52undici@6.25.06.27.0
LowGHSA-7rx3-28cr-v5whhandlebars@4.7.84.7.9
LowGHSA-xhjh-pmcv-23jwaxios@1.15.01.15.1
LowDLA-4319-1libxml2@2.9.10+dfsg-6.7+deb11u42.9.10+dfsg-6.7+deb11u9
LowDLA-4437-1gnupg2@2.2.27-2+deb11u22.2.27-2+deb11u3
LowGHSA-qvfw-j98x-7q72multer@2.1.12.3.0
LowDLA-3972-1tzdata@2024a-0+deb11u12024b-0+deb11u1
LowDLA-4016-1ucf@3.00433.0043+deb11u2
LowDLA-4085-1tzdata@2024a-0+deb11u12025a-0+deb11u1
LowDLA-4105-1tzdata@2024a-0+deb11u12025b-0+deb11u1
LowDLA-4213-1curl@7.74.0-1.3+deb11u117.74.0-1.3+deb11u15
LowDLA-4403-1tzdata@2024a-0+deb11u12025b-0+deb11u2
LowDLA-4485-1ca-certificates@2021011920230311+deb12u1~deb11u1
LowGHSA-442j-39wm-28r2handlebars@4.7.84.7.9
LowGHSA-4x5r-pxfx-6jf8@babel/core@7.29.07.29.6
LowGHSA-vpq2-c234-7xj6@tootallnate/once@1.1.22.0.1
LowGHSA-6vgw-5pg2-w6jppip@24.026.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.5.2latest2 months ago1.4.502382333,004

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/kubitodev/servarr.svg)](https://charts.stackradar.io/charts/kubitodev/servarr)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.