nginx-s3 Helm chart

Name: nginx-s3 Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

olopost

Scored 14 Sept 2026

Nginx S3 gateway

Latest 0.2.1 1 year agodeploys tag unprivileged-oss 1Artifact Hub

nginx-s3 0.2.1 deploys 1 container image: ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway. Across them, 436 findings — 2 critical, 2 high — 2 on CISA KEV. The highest contribution is DEBIAN-CVE-2025-27363 in freetype 2.12.1+dfsg-5+deb12u3, fixed in 2.12.1+dfsg-5+deb12u4.

Radar Score

5,0392286346

436 findings over 1 of 1 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway	unprivileged-oss	2286346	5,039

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

436 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2024-38950	libde265@1.0.11-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-32741	libheif@1.15.1-1	no fix listed
Low	DEBIAN-CVE-2024-26458	krb5@1.20.1-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2024-38949	libde265@1.0.11-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-49295	libde265@1.0.11-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-49346	libde265@1.0.11-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2025-68431	libheif@1.15.1-1	no fix listed
Low	DEBIAN-CVE-2016-2781	coreutils@9.1-1	no fix listed
Low	DEBIAN-CVE-2026-32882	libheif@1.15.1-1	no fix listed
Low	DEBIAN-CVE-2025-8176	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-42767	openssl@3.0.14-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2026-5545	curl@7.88.1-10+deb12u7	no fix listed
Low	DEBIAN-CVE-2026-48962	perl@5.36.0-7+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-3784	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2026-56210	aom@3.6.0-1+deb12u1	3.6.0-1+deb12u3
Low	DEBIAN-CVE-2025-14819	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2026-48029	libheif@1.15.1-1	no fix listed
Low	DEBIAN-CVE-2026-42015	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7
Low	DEBIAN-CVE-2026-76642	util-linux@2.38.1-5+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-40909	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
Low	DEBIAN-CVE-2026-48961	perl@5.36.0-7+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-63074	openssl@3.0.14-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2025-14524	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2025-14831	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u6
Low	DEBIAN-CVE-2025-61144	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-6238	glibc@2.36-9+deb12u8	no fix listed
Low	DEBIAN-CVE-2026-54240	libde265@1.0.11-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-54241	libde265@1.0.11-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-47178	libheif@1.15.1-1	no fix listed
Low	DEBIAN-CVE-2026-25210	expat@2.5.0-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-65018	libpng1.6@1.6.39-2	1.6.39-2+deb12u1
Low	DEBIAN-CVE-2026-5435	glibc@2.36-9+deb12u8	no fix listed
Low	DEBIAN-CVE-2026-54369	acl@2.3.1-3	no fix listed
Low	DEBIAN-CVE-2026-7017	perl@5.36.0-7+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-48175	libavif@0.11.1-1	0.11.1-1+deb12u1
Low	DEBIAN-CVE-2026-32739	libheif@1.15.1-1	no fix listed
Low	DEBIAN-CVE-2021-4214	libpng1.6@1.6.39-2	no fix listed
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.1-4	no fix listed
Low	DEBIAN-CVE-2026-32814	libheif@1.15.1-1	no fix listed
Low	DEBIAN-CVE-2025-0395	glibc@2.36-9+deb12u8	2.36-9+deb12u10
Low	DEBIAN-CVE-2023-4039	gcc-12@12.2.0-14	12.2.0-14+deb12u1
Low	DEBIAN-CVE-2026-52491	tiff@4.5.0-6+deb12u1	no fix listed
Low	DSA-5962-1	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u5
Low	DEBIAN-CVE-2026-32738	libheif@1.15.1-1	no fix listed
Low	DEBIAN-CVE-2023-1916	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-4598	systemd@252.30-1~deb12u2	252.38-1~deb12u1
Low	DEBIAN-CVE-2025-15079	curl@7.88.1-10+deb12u7	no fix listed
Low	DSA-5979-1	libxslt@1.1.35-1	1.1.35-1+deb12u2
Low	DEBIAN-CVE-2026-6429	curl@7.88.1-10+deb12u7	no fix listed
Low	DEBIAN-CVE-2024-22365	pam@1.5.2-6+deb12u1	1.5.2-6+deb12u2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.1latest	1 year ago	unprivileged-oss	2286346	5,039

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/olopost/nginx-s3.svg)](https://charts.stackradar.io/charts/olopost/nginx-s3)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.