mattermost-enterprise-edition Helm chart

Name: mattermost-enterprise-edition Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

mattermost

Scored 14 Sept 2026

Mattermost Enterprise server with high availitibity.

Latest 2.6.103 20 days agoapp version 11.10.1 1Artifact Hub

mattermost-enterprise-edition 2.6.103 deploys 3 container images: appropriate/curl, mattermost/mattermost-enterprise-edition and minio/mc. Across them, 263 findings — 0 critical, 12 high — 1 on CISA KEV. The highest contribution is GHSA-xx8w-mq23-29g4 in github.com/minio/minio v0.0.0-20200421050159-282c9f790a03, fixed in 0.0.0-20240131185645-0ae4915a9391.

Radar Score

3,60001251200

263 findings over 3 of 3 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
appropriate/curl×2	latest	0591	551
mattermost/mattermost-enterprise-edition×2	11.10.1	00822	345
minio/mc	RELEASE.2020-04-25T00-43-23Z	0734177	2,704

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

51 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2018-0500	curl@7.59.0-r0	7.61.0-r0
Medium	GO-2024-2687	stdlib@go1.13.10	1.21.9
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.0.0-20200214034016-1d94cc7ab1c6	0.52.0
Medium	ALPINE-CVE-2018-16839	curl@7.59.0-r0	7.61.1-r1
Medium	ALPINE-CVE-2018-1000301	curl@7.59.0-r0	7.60.0-r0
Medium	ALPINE-CVE-2018-1000300	curl@7.59.0-r0	7.60.0-r0
Medium	ALPINE-CVE-2018-16840	curl@7.59.0-r0	7.61.1-r1
Medium	GHSA-83g2-8m93-v3w7	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.0.0-20210520170846-37e1c6afe023
Medium	DEBIAN-CVE-2019-1010022	glibc@2.36-9+deb12u14	no fix listed
Medium	ALPINE-CVE-2019-14697	musl@1.1.18-r2	1.1.18-r4
Medium	DEBIAN-CVE-2018-20796	glibc@2.36-9+deb12u14	no fix listed
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.0.0-20200214034016-1d94cc7ab1c6	0.31.0
Medium	ALPINE-CVE-2018-16890	curl@7.59.0-r0	7.61.1-r2
Medium	GHSA-c3h9-896r-86jm	github.com/gogo/protobuf@v1.2.1	1.3.2
Medium	DEBIAN-CVE-2019-1010023	glibc@2.36-9+deb12u14	no fix listed
Medium	ALPINE-CVE-2021-36159	apk-tools@2.10.4-r2	2.10.7-r0
Medium	GHSA-vvpx-j8f3-3w6h	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.7.0
Medium	ALPINE-CVE-2019-3823	curl@7.59.0-r0	7.61.1-r2
Medium	GHSA-8c26-wmh5-6g9v	golang.org/x/crypto@v0.0.0-20200214034016-1d94cc7ab1c6	0.0.0-20220314234659-1baeb1ce4c0b
Medium	GHSA-4374-p667-p6c8	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.17.0
Medium	GHSA-wg47-6jq2-q2hh	github.com/minio/minio@v0.0.0-20200421050159-282c9f790a03	0.0.0-20250403145552-8c70975283f9
Medium	ALPINE-CVE-2018-16842	curl@7.59.0-r0	7.61.1-r1
Medium	ALPINE-CVE-2021-23841	openssl@1.1.1g-r0	1.1.1j-r0
Medium	ALPINE-CVE-2020-1971	openssl@1.1.1g-r0	1.1.1i-r0
Medium	GHSA-69cg-p879-7622	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.0.0-20220906165146-f3363e06e74c
Medium	GHSA-3vm4-22fp-5rfm	golang.org/x/crypto@v0.0.0-20200214034016-1d94cc7ab1c6	0.0.0-20201216223049-8b5274cf687f
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.22.0	1.79.3
Medium	DEBIAN-CVE-2019-9192	glibc@2.36-9+deb12u14	no fix listed
Medium	GHSA-w73w-5m7g-f7qc	github.com/dgrijalva/jwt-go@v3.2.0+incompatible	no fix listed
Medium	GHSA-wxc4-f4m6-wwqv	gopkg.in/yaml.v2@v2.2.4	2.2.8
Medium	GHSA-xrjj-mj9h-534m	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.4.0
Medium	GHSA-5rcv-m4m3-hfh7	golang.org/x/text@v0.3.2	0.3.3
Medium	GHSA-h86h-8ppg-mxmh	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.0.0-20210428140749-89ef3d95e781
Medium	GHSA-69ch-w2m2-3vjp	golang.org/x/text@v0.3.2	0.3.8
Medium	GO-2022-0433	stdlib@go1.13.10	1.17.9
Medium	GO-2026-5757	github.com/minio/minio@v0.0.0-20200421050159-282c9f790a03	no fix listed
Medium	GHSA-ppp9-7jff-5vj2	golang.org/x/text@v0.3.2	0.3.7
Medium	DEBIAN-CVE-2026-63076	openssl@3.0.20-1~deb12u2	no fix listed
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.0.0-20200214034016-1d94cc7ab1c6	0.52.0
Medium	DEBIAN-CVE-2019-1010024	glibc@2.36-9+deb12u14	no fix listed
Medium	DEBIAN-CVE-2026-5450	glibc@2.36-9+deb12u14	no fix listed
Medium	GHSA-gwc9-m7rh-j2ww	golang.org/x/crypto@v0.0.0-20200214034016-1d94cc7ab1c6	0.0.0-20211202192323-5770296d904e
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.0.0-20200214034016-1d94cc7ab1c6	0.52.0
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.0.0-20200214034016-1d94cc7ab1c6	0.52.0
Medium	GO-2021-0243	stdlib@go1.13.10	1.15.14
Medium	GO-2022-0273	stdlib@go1.13.10	1.16.8
Medium	GHSA-p782-xgp4-8hr8	golang.org/x/sys@v0.0.0-20200323222414-85ca7c5b95cd	0.0.0-20220412211240-33da011f77ad
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.0.0-20200214034016-1d94cc7ab1c6	0.52.0
Medium	GHSA-hcg3-q754-cr77	golang.org/x/crypto@v0.0.0-20200214034016-1d94cc7ab1c6	0.35.0
Medium	GO-2022-1144	stdlib@go1.13.10	1.18.9

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.6.103latest	20 days ago	11.10.1	01251200	3,600

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/mattermost/mattermost-enterprise-edition.svg)](https://charts.stackradar.io/charts/mattermost/mattermost-enterprise-edition)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.