nginx-s3 Helm chart

Name: nginx-s3 Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

olopost

Scored 14 Sept 2026

Nginx S3 gateway

Latest 0.2.1 1 year agodeploys tag unprivileged-oss 1Artifact Hub

nginx-s3 0.2.1 deploys 1 container image: ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway. Across them, 436 findings — 2 critical, 2 high — 2 on CISA KEV. The highest contribution is DEBIAN-CVE-2025-27363 in freetype 2.12.1+dfsg-5+deb12u3, fixed in 2.12.1+dfsg-5+deb12u4.

Radar Score

5,0392286346

436 findings over 1 of 1 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway	unprivileged-oss	2286346	5,039

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

436 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-22796	openssl@3.0.14-1~deb12u2	3.0.18-1~deb12u2
Low	DEBIAN-CVE-2025-10148	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2024-26462	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u3
Low	DEBIAN-CVE-2026-22695	libpng1.6@1.6.39-2	1.6.39-2+deb12u2
Low	DEBIAN-CVE-2026-1965	curl@7.88.1-10+deb12u7	no fix listed
Low	DEBIAN-CVE-2022-0563	util-linux@2.38.1-5+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-3576	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u4
Low	DEBIAN-CVE-2026-4878	libcap2@1:2.66-4	1:2.66-4+deb12u3
Low	DEBIAN-CVE-2026-11979	libxml2@2.9.14+dfsg-1.3~deb12u1	no fix listed
Low	DEBIAN-CVE-2023-2908	tiff@4.5.0-6+deb12u1	4.5.0-6+deb12u2
Low	DEBIAN-CVE-2026-7168	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2023-25433	tiff@4.5.0-6+deb12u1	4.5.0-6+deb12u2
Low	DEBIAN-CVE-2026-86140	libxml2@2.9.14+dfsg-1.3~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-41069	libheif@1.15.1-1	no fix listed
Low	DEBIAN-CVE-2023-26966	tiff@4.5.0-6+deb12u1	4.5.0-6+deb12u2
Low	DEBIAN-CVE-2026-3783	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2026-4873	curl@7.88.1-10+deb12u7	no fix listed
Low	DSA-6189-1	libpng1.6@1.6.39-2	1.6.39-2+deb12u4
Low	DEBIAN-CVE-2026-34743	xz-utils@5.4.1-0.2	5.4.1-1+deb12u1
Low	DEBIAN-CVE-2026-5704	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-3184	util-linux@2.38.1-5+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-58055	nghttp2@1.52.0-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2023-26965	tiff@4.5.0-6+deb12u1	4.5.0-6+deb12u2
Low	DEBIAN-CVE-2026-7010	perl@5.36.0-7+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-19487	perl@5.36.0-7+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-22801	libpng1.6@1.6.39-2	1.6.39-2+deb12u2
Low	DEBIAN-CVE-2023-52426	expat@2.5.0-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-52492	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-89158	pcre2@10.42-1	10.42-1+deb12u1
Low	DEBIAN-CVE-2025-27587	openssl@3.0.14-1~deb12u2	no fix listed
Low	DSA-5796-1	libheif@1.15.1-1	1.15.1-1+deb12u1
Low	DEBIAN-CVE-2013-4392	systemd@252.30-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2026-78408	util-linux@2.38.1-5+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-41989	libgcrypt20@1.10.1-3	1.10.1-3+deb12u1
Low	DEBIAN-CVE-2026-49271	libheif@1.15.1-1	no fix listed
Low	DEBIAN-CVE-2024-11053	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u10
Low	DEBIAN-CVE-2023-3164	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2023-31439	systemd@252.30-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2026-76957	expat@2.5.0-1+deb12u1	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2023-31437	systemd@252.30-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2025-68973	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2
Low	DEBIAN-CVE-2026-4438	glibc@2.36-9+deb12u8	2.36-9+deb12u14
Low	DEBIAN-CVE-2023-31438	systemd@252.30-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2026-1757	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6
Low	DEBIAN-CVE-2026-72522	expat@2.5.0-1+deb12u1	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-56403	expat@2.5.0-1+deb12u1	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-56404	expat@2.5.0-1+deb12u1	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-56405	expat@2.5.0-1+deb12u1	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-56408	expat@2.5.0-1+deb12u1	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-56406	expat@2.5.0-1+deb12u1	2.5.0-1+deb12u3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.1latest	1 year ago	unprivileged-oss	2286346	5,039

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/olopost/nginx-s3.svg)](https://charts.stackradar.io/charts/olopost/nginx-s3)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.