zigbee2mqtt Helm chart

Name: zigbee2mqtt Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

lmatfy

Scored 14 Sept 2026

Zigbee to MQTT bridge.

Latest 0.1.14 7 months agoapp version 2.7.2 0Artifact Hub

zigbee2mqtt 0.1.14 deploys 2 container images: library/busybox and koenkk/zigbee2mqtt. Across them, 111 findings — 0 critical, 2 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

1,391022485

111 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	latest	0000	0
koenkk/zigbee2mqtt	2.7.2	022485	1,391

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

85 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-58042	nodejs@24.11.1-r0	24.18.1-r0
Low	GHSA-v2v4-37r5-5v8g	ip-address@10.0.1	10.1.1
Low	ALPINE-CVE-2026-58040	nodejs@24.11.1-r0	24.18.1-r0
Low	ALPINE-CVE-2026-21714	nodejs@24.11.1-r0	24.14.1-r0
Low	ALPINE-CVE-2026-34743	xz@5.8.1-r0	5.8.3-r0
Low	GHSA-58qx-3vcg-4xpx	ws@8.18.3	8.20.1
Low	ALPINE-CVE-2026-42769	openssl@3.5.4-r0	3.5.7-r0
Low	GHSA-h67p-54hq-rp68	js-yaml@4.1.1	4.2.0
Low	ALPINE-CVE-2026-78408	util-linux@2.41.2-r0	2.41.6-r1
Low	ALPINE-CVE-2026-21717	nodejs@24.11.1-r0	24.14.1-r0
Low	ALPINE-CVE-2025-14104	util-linux@2.41.2-r0	2.41.4-r0
Low	GHSA-5p4m-2wfm-xmqj	js-yaml@4.1.1	4.3.1
Low	ALPINE-CVE-2026-45446	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-58045	nodejs@24.11.1-r0	24.18.1-r0
Low	ALPINE-CVE-2026-58041	nodejs@24.11.1-r0	24.18.1-r0
Low	ALPINE-CVE-2026-27171	zlib@1.3.1-r2	1.3.2-r0
Low	ALPINE-CVE-2025-55132	nodejs@24.11.1-r0	24.13.0-r0
Low	ALPINE-CVE-2026-56847	nodejs@24.11.1-r0	24.18.1-r0
Low	ALPINE-CVE-2026-48928	nodejs@24.11.1-r0	24.17.0-r0
Low	ALPINE-CVE-2025-15469	openssl@3.5.4-r0	3.5.5-r0
Low	ALPINE-CVE-2026-42768	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-6042	musl@1.2.5-r21	1.2.5-r22
Low	ALPINE-CVE-2026-22795	openssl@3.5.4-r0	3.5.5-r0
Low	ALPINE-CVE-2026-42770	openssl@3.5.4-r0	3.5.7-r0
Low	ALPINE-CVE-2026-48934	nodejs@24.11.1-r0	24.17.0-r0
Low	ALPINE-CVE-2026-48931	nodejs@24.11.1-r0	24.17.0-r0
Low	ALPINE-CVE-2025-68160	openssl@3.5.4-r0	3.5.5-r0
Low	ALPINE-CVE-2026-27456	util-linux@2.41.2-r0	2.41.4-r0
Low	ALPINE-CVE-2026-58044	nodejs@24.11.1-r0	24.18.1-r0
Low	ALPINE-CVE-2025-69418	openssl@3.5.4-r0	3.5.5-r0
Low	ALPINE-CVE-2026-56850	nodejs@24.11.1-r0	24.18.1-r0
Low	ALPINE-CVE-2026-48935	nodejs@24.11.1-r0	24.17.0-r0
Low	ALPINE-CVE-2026-21715	nodejs@24.11.1-r0	24.14.1-r0
Low	ALPINE-CVE-2026-58039	nodejs@24.11.1-r0	24.18.1-r0
Low	ALPINE-CVE-2026-21716	nodejs@24.11.1-r0	24.14.1-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.14latest	7 months ago	2.7.2	022485	1,391

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/lmatfy/zigbee2mqtt.svg)](https://charts.stackradar.io/charts/lmatfy/zigbee2mqtt)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.