firecrawl 3.0.13 Helm chart
obeoneVerified publisherScored 26 Sept 2026
Firecrawl is an open-source API that crawls websites and turns them into LLM-ready data (markdown, HTML, structured JSON), with an optional MCP server exposing its tools at /v2/mcp. This chart packages the self-hosted topology — API, workers, Playwright renderer and the bundled Redis / RabbitMQ / NuQ-Postgres backends — using the bjw-s common library and official ghcr.io images.
Version 3.0.13 yesterdayapp version 2.11.403 0Artifact Hub
firecrawl 3.0.13 deploys 5 container images: ghcr.io/firecrawl/firecrawl, ghcr.io/firecrawl/nuq-postgres, ghcr.io/firecrawl/playwright-service, library/rabbitmq and 1 more. Across them, 987 findings — 1 critical, 1 high. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.4-r0, fixed in 3.5.5-r0. Chart.yaml declares kubeVersion >=1.31.0-0; rendered for Kubernetes 1.31.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | 2.11.403 | 0145219 | 2,836 |
| ghcr.io/ | latest | 0042231 | 2,777 |
| ghcr.io/ | latest | 0062299 | 3,827 |
| library/ | 3.13-management-alpine | 102661 | 1,083 |
| library/ | 7.4-alpine | 0000 | 0 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2026-34181 | openssl | 3.5.6-1~deb13u2 |
| Low | DEBIAN-CVE-2026-4873 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-89160 | pcre2 | 10.42-1+deb12u1 |
| Low | GHSA-83g3-92jg-28cx | tar | 7.5.8 |
| Low | DEBIAN-CVE-2026-86143 | libxml2 | no fix listed |
| Low | ALPINE-CVE-2026-4360 | python3 | 3.12.14-r0 |
| Low | DEBIAN-CVE-2026-15588 | glib2.0 | no fix listed |
| Low | DEBIAN-CVE-2026-1965 | curl | no fix listed |
| Low | DEBIAN-CVE-2022-0563 | util-linux | no fix listed |
| Low | ALPINE-CVE-2026-76957 | expat | 2.8.4-r0 |
| Low | DEBIAN-CVE-2026-11979 | libxml2 | no fix listed |
| Low | DEBIAN-CVE-2026-76957 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2007-2768 | openssh | no fix listed |
| Low | GHSA-p88m-4jfj-68fv | undici | 6.27.0 |
| Low | DEBIAN-CVE-2026-89158 | pcre2 | 10.42-1+deb12u1 |
| Low | DEBIAN-CVE-2026-93542 | libxi | no fix listed |
| Low | DEBIAN-CVE-2026-93541 | libxi | no fix listed |
| Low | DEBIAN-CVE-2026-93544 | libxi | no fix listed |
| Low | DEBIAN-CVE-2026-59999 | openssh | no fix listed |
| Low | DEBIAN-CVE-2026-5704 | tar | no fix listed |
| Low | DEBIAN-CVE-2023-45913 | mesa | no fix listed |
| Low | DEBIAN-CVE-2026-22693 | harfbuzz | no fix listed |
| Low | DEBIAN-CVE-2026-27447 | cups | no fix listed |
| Low | DEBIAN-CVE-2025-27587 | openssl | no fix listed |
| Low | DEBIAN-CVE-2026-78410 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-50593 | graphite2 | 1.3.14-1+deb12u1 |
| Low | DEBIAN-CVE-2026-56109 | alsa-lib | no fix listed |
| Low | DEBIAN-CVE-2026-19487 | perl | no fix listed |
| Low | GHSA-4mjr-xmp4-gh2g | qs | 6.16.0 |
| Low | DEBIAN-CVE-2023-52426 | expat | no fix listed |
| Low | DEBIAN-CVE-2026-34979 | cups | no fix listed |
| Low | DEBIAN-CVE-2026-89156 | pcre2 | 10.42-1+deb12u1 |
| Low | DEBIAN-CVE-2011-3374 | apt | no fix listed |
| Low | DEBIAN-CVE-2026-89161 | pcre2 | 10.42-1+deb12u1 |
| Low | DEBIAN-CVE-2013-4392 | systemd | no fix listed |
| Low | DEBIAN-CVE-2023-45919 | mesa | no fix listed |
| Low | DEBIAN-CVE-2026-41989 | libgcrypt20 | 1.10.1-3+deb12u1 |
| Low | DEBIAN-CVE-2026-42014 | gnutls28 | 3.7.9-2+deb12u7 |
| Low | DEBIAN-CVE-2023-6135 | nss | no fix listed |
| Low | DEBIAN-CVE-2026-6767 | nss | 2:3.87.1-1+deb12u3 |
| Low | GO-2026-4981 | stdlib | 1.25.10 |
| Low | GO-2026-4918 | stdlib | 1.25.10 |
| Low | GO-2026-4918 | golang.org/ | 0.53.0 |
| Low | GO-2026-4986 | stdlib | 1.25.10 |
| Low | GO-2026-4337 | stdlib | 1.24.13 |
| Low | DEBIAN-CVE-2026-93545 | libxi | no fix listed |
| Low | DEBIAN-CVE-2026-94281 | libxi | no fix listed |
| Low | DEBIAN-CVE-2023-26924 | llvm-toolchain-15 | no fix listed |
| Low | DEBIAN-CVE-2026-40225 | systemd | 252.39-1~deb12u2 |
| Low | DEBIAN-CVE-2025-1377 | elfutils | no fix listed |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 3.0.13latest | yesterday | 2.11.403 | 11175810 | 10,523 |
| 3.0.12 | 2 days ago | 2.11.400 | 11175810 | 10,524 |
| 3.0.11 | 3 days ago | 2.11.395 | 11168817 | 10,439 |
| 3.0.10 | 4 days ago | 2.11.384 | 11168817 | 10,438 |
| 3.0.9 | 5 days ago | 2.11.376 | 11168814 | 10,399 |
| 3.0.8 | 6 days ago | 2.11.371 | 11168814 | 10,408 |
| 3.0.7 | 8 days ago | 2.11.359 | 11168839 | 10,632 |
| 3.0.6 | 9 days ago | 2.11.349 | 11173843 | 10,777 |
| 3.0.5 | 10 days ago | 2.11.341 | 11173842 | 10,759 |
| 3.0.4 | 10 days ago | 2.11.340 | 11173842 | 10,751 |
| 3.0.3 | 12 days ago | 2.11.334 | 11166849 | 10,607 |
| 3.0.1 | 14 days ago | 2.11.330 | 11173842 | 10,729 |
| 3.0.0 | 20 days ago | 2.11.209 | 11171851 | 10,754 |
| 2.1.1 | 1 month ago | 2.11.198 | 10135596 | 7,840 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.