openccu Helm chart
openccuVerified publisherScored 14 Sept 2026
HomeMatic/homematicIP CCU central based on OpenCCU
Latest 3.89.8 1 month agoapp version 3.89.8.20260719 1Artifact Hub
openccu 3.89.8 deploys 1 container image: ghcr.io/openccu/openccu. Across them, 168 findings — 0 critical, 0 high. The highest contribution is GHSA-5cgq-3rg8-m6cv in golang.org/x/crypto v0.50.0, fixed in 0.52.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
1 image
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | 3.89.8.20260719 | 0033135 | 1,916 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
168 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-5cgq-3rg8-m6cv | golang.org/ | 0.52.0 |
| Medium | GHSA-9vjp-v76f-g363 | netty-codec | 4.1.68.Final |
| Medium | GHSA-grg4-wf29-r9vv | netty-codec | 4.1.68.Final |
| Medium | GHSA-57j2-w4cx-62h2 | jackson-databind | 2.12.6.1 |
| Medium | GHSA-7c2r-3jqf-c9rw | jackson-dataformat-xml | 2.7.8 |
| Medium | GHSA-7r82-7xv7-xcpj | httpclient | 4.5.13 |
| Medium | GHSA-5j98-mcp5-4vw2 | glob | 10.5.0 |
| Medium | GHSA-jjjh-jjxp-wpff | jackson-databind | 2.12.7.1 |
| Medium | GHSA-rgv9-q543-rqg4 | jackson-databind | 2.12.7.1 |
| Medium | GHSA-gwrp-pvrq-jmwv | commons-io | 2.7 |
| Medium | GHSA-w9fj-cfpg-grvv | netty-codec-http2 | 4.2.11.Final |
| Medium | GHSA-wx5j-54mm-rqqq | netty-codec-http | 4.1.71.Final |
| Medium | GHSA-6mjq-h674-j845 | netty-handler | 4.1.94.Final |
| Medium | GHSA-j288-q9x7-2f5v | commons-lang | no fix listed |
| Medium | GHSA-cgp8-4m63-fhh5 | commons-net | 3.9.0 |
| Medium | GHSA-78wr-2p64-hpwj | commons-io | 2.14.0 |
| Medium | GHSA-3qp7-7mw8-wx86 | netty-handler | 4.1.135.Final |
| Medium | GHSA-355h-qmc2-wpwf | jetty-http | 9.4.60 |
| Medium | GHSA-x527-x647-q7gg | golang.org/ | 0.52.0 |
| Medium | GHSA-3x8x-79m2-3w2w | jackson-databind | 2.12.6 |
| Medium | GHSA-rmj7-2vxq-3g9f | jackson-databind | 2.18.8 |
| Medium | GHSA-vgwf-h737-ff37 | golang.org/ | 0.52.0 |
| Medium | GHSA-j3rv-43j4-c7qm | jackson-databind | 2.18.8 |
| Medium | GHSA-f5wc-c3c7-36mc | golang.org/ | 0.52.0 |
| Medium | GHSA-prj3-ccx8-p6x4 | netty-codec-http2 | 4.1.124.Final |
| Medium | GHSA-h46c-h94j-95f3 | jackson-core | 2.15.0 |
| Medium | GHSA-cm33-6792-r9fm | netty-codec-dns | 4.1.133.Final |
| Medium | GHSA-f6hv-jmp6-3vwv | netty-codec-http2 | 4.2.13.Final |
| Medium | GHSA-f6hv-jmp6-3vwv | netty-codec-http | 4.2.13.Final |
| Medium | GHSA-jppx-w49h-x2qq | netty-codec-http | 4.2.16.Final |
| Medium | GHSA-rm3j-f69w-wqmq | golang.org/ | 0.52.0 |
| Medium | GHSA-x4gw-5cx5-pgmh | netty-handler | 4.1.135.Final |
| Medium | GHSA-3ppc-4f35-3m26 | minimatch | 9.0.6 |
| Low | GHSA-3pxv-7cmr-fjr4 | log4j-core | 2.25.4 |
| Low | GHSA-445c-vh5m-36rj | log4j-core | 2.25.4 |
| Low | GHSA-89gr-r52h-f8rx | golang.org/ | 0.52.0 |
| Low | GHSA-jppx-rxg9-jmrx | golang.org/ | 0.52.0 |
| Low | GHSA-34x7-hfp2-rc4v | tar | 7.5.7 |
| Low | GHSA-57rv-r2g8-2cj3 | netty-codec-http | 4.2.13.Final |
| Low | GHSA-pwqr-wmgm-9rr8 | netty-codec-http | 4.2.10.Final |
| Low | GHSA-45q3-82m4-75jr | netty-handler-proxy | 4.1.133.Final |
| Low | GHSA-rgw5-rvv9-x895 | brace-expansion | 5.0.9 |
| Low | GHSA-3wrr-7qpf-2prh | jackson-databind | 2.14.0 |
| Low | GHSA-qffp-2rhf-9h96 | tar | 7.5.10 |
| Low | GHSA-c4c3-7fpv-j4q5 | netty-handler | 4.1.137.Final |
| Low | GHSA-23hp-3jrh-7fpw | tar | 7.5.19 |
| Low | GHSA-7r86-cg39-jmmj | minimatch | 9.0.7 |
| Low | GHSA-8qq5-rm4j-mr97 | tar | 7.5.3 |
| Low | GHSA-5pvg-856g-cp85 | netty-resolver-dns | 4.1.135.Final |
| Low | GHSA-5jpm-x58v-624v | netty-codec-http | 4.1.108.Final |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 3.89.8latest | 1 month ago | 3.89.8.20260719 | 0033135 | 1,916 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/openccu/openccu)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.