mattermost-team-edition Helm chart

Name: mattermost-team-edition Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

openshift

Scored 14 Sept 2026

Mattermost Team Edition is an open-source, self-hosted messaging platform for teams. It offers a free, community-driven solution for secure, private collaboration. Features include group and direct messaging, file sharing, and powerful search, giving your team a modern communication hub.

Latest 6.6.83app version 10.11.2 0Artifact Hub

mattermost-team-edition 6.6.83 deploys 4 container images: library/busybox, library/mysql, appropriate/curl and mattermost/mattermost-team-edition. Across them, 401 findings — 0 critical, 7 high. The highest contribution is DEBIAN-CVE-2025-15467 in openssl 3.0.17-1~deb12u2, fixed in 3.0.18-1~deb12u2. Chart.yaml declares kubeVersion >=1.20.0; rendered for Kubernetes 1.20.0.

Radar Score

4,0890749345

401 findings over 4 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.31.1	0000	0
library/mysql	8.0.18	001127	579
appropriate/curl	latest	0591	551
mattermost/mattermost-team-edition	10.11.2	0229317	2,959

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

345 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2025-69420	openssl@3.0.17-1~deb12u2	3.0.18-1~deb12u2
Low	GHSA-3x39-62h4-f8j6	github.com/mattermost/mattermost/server/v8@v0.0.0-20250821100404-2a35a97a1877+dirty	8.0.0-20251028000919-d3ed703dc833
Low	GHSA-mp6x-97xj-9x62	github.com/mattermost/mattermost/server/v8@v0.0.0-20250821100404-2a35a97a1877+dirty	8.0.0-20251022210333-acda1fb5dd46
Low	GHSA-qx3f-6vq3-8j8m	github.com/mattermost/mattermost/server/v8@v0.0.0-20250821100404-2a35a97a1877+dirty	8.0.0-20250707221302-a8fa77f107ef
Low	DLA-2976-1	gzip@1.6-5+b1	1.6-5+deb9u1
Low	DLA-2977-1	xz-utils@5.2.2-1.2+b1	5.2.2-1.2+deb9u1
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.38.0	0.52.0
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.38.0	0.52.0
Low	DEBIAN-CVE-2026-9076	openssl@3.0.17-1~deb12u2	3.0.20-1~deb12u2
Low	DSA-4666-1	openldap@2.4.44+dfsg-5+deb9u3	2.4.44+dfsg-5+deb9u4
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.72.0	1.83.1
Low	DEBIAN-CVE-2026-0915	glibc@2.36-9+deb12u10	2.36-9+deb12u14
Low	DEBIAN-CVE-2025-4802	glibc@2.36-9+deb12u10	2.36-9+deb12u11
Low	DLA-2931-1	cyrus-sasl2@2.1.27~101-g0780600+dfsg-3+deb9u1	2.1.27~101-g0780600+dfsg-3+deb9u2
Low	DEBIAN-CVE-2026-63072	openssl@3.0.17-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2026-45445	openssl@3.0.17-1~deb12u2	3.0.20-1~deb12u2
Low	DLA-2837-1	gmp@2:6.1.2+dfsg-1	2:6.1.2+dfsg-1+deb9u1
Low	DEBIAN-CVE-2026-0861	glibc@2.36-9+deb12u10	2.36-9+deb12u14
Low	DLA-2340-2	sqlite3@3.16.2-5+deb9u1	3.16.2-5+deb9u3
Low	GHSA-7664-hcp7-f497	github.com/mattermost/mattermost/server/v8@v0.0.0-20250821100404-2a35a97a1877+dirty	8.1.5
Low	DEBIAN-CVE-2026-31789	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2
Low	DEBIAN-CVE-2025-69419	openssl@3.0.17-1~deb12u2	3.0.18-1~deb12u2
Low	DEBIAN-CVE-2026-54874	openssl@3.0.17-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2026-42766	openssl@3.0.17-1~deb12u2	3.0.20-1~deb12u2
Low	DLA-2513-1	p11-kit@0.23.3-2	0.23.3-2+deb9u1
Low	DLA-3022-1	dpkg@1.18.25	1.18.26
Low	GHSA-6q7m-p8cc-998r	github.com/mattermost/mattermost/server/v8@v0.0.0-20250821100404-2a35a97a1877+dirty	8.0.0-20250807174701-e14175eb6539
Low	DLA-2657-1	lz4@0.0~r131-2+b1	0.0~r131-2+deb9u1
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.38.0	0.52.0
Low	GHSA-9p64-jpc7-m2rp	github.com/mattermost/mattermost/server/v8@v0.0.0-20250821100404-2a35a97a1877+dirty	8.0.0-20260326202606-fac92f4a71f3
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.38.0	0.52.0
Low	DEBIAN-CVE-2025-15281	glibc@2.36-9+deb12u10	2.36-9+deb12u14
Low	DLA-2481-1	openldap@2.4.44+dfsg-5+deb9u3	2.4.44+dfsg-5+deb9u6
Low	DLA-2760-1	nettle@3.3-1+b2	3.3-1+deb9u1
Low	DLA-2596-1	shadow@1:4.4-4.1	1:4.4-4.1+deb9u1
Low	GHSA-r6qj-894f-5hr2	github.com/mattermost/mattermost/server/v8@v0.0.0-20250821100404-2a35a97a1877+dirty	8.0.0-20250815100400-2d5cdc6e217e
Low	DEBIAN-CVE-2026-75803	openssl@3.0.17-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2026-4046	glibc@2.36-9+deb12u10	2.36-9+deb12u14
Low	DEBIAN-CVE-2026-5928	glibc@2.36-9+deb12u10	no fix listed
Low	GHSA-gq3r-5833-5532	github.com/mattermost/mattermost/server/v8@v0.0.0-20250821100404-2a35a97a1877+dirty	8.0.0-20250619095651-9dd0b3943e55
Low	GHSA-45v9-w9fh-33j6	github.com/mattermost/mattermost/server/v8@v0.0.0-20250821100404-2a35a97a1877+dirty	8.0.0-20241127161322-25ff7a3779a5
Low	GHSA-8j3q-gc9x-7972	github.com/mattermost/mattermost/server/v8@v0.0.0-20250821100404-2a35a97a1877+dirty	8.0.0-20241127161322-25ff7a3779a5
Low	DEBIAN-CVE-2026-6791	glibc@2.36-9+deb12u10	no fix listed
Low	GHSA-q675-qj96-32m9	golang.org/x/image@v0.27.0	0.41.0
Low	GHSA-w9m8-p4cc-4qj9	github.com/mattermost/mattermost/server/v8@v0.0.0-20250821100404-2a35a97a1877+dirty	8.0.0-20260410202636-17939826efa2
Low	DLA-2425-1	openldap@2.4.44+dfsg-5+deb9u3	2.4.44+dfsg-5+deb9u5
Low	DEBIAN-CVE-2026-4437	glibc@2.36-9+deb12u10	2.36-9+deb12u14
Low	GO-2026-4341	stdlib@go1.24.5	1.24.12
Low	GHSA-3g36-gf7c-75qw	github.com/mattermost/mattermost/server/v8@v0.0.0-20250821100404-2a35a97a1877+dirty	8.0.0-20250218121836-2b5275d87136
Low	DSA-6015-1	openssl@3.0.17-1~deb12u2	3.0.17-1~deb12u3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
6.6.83latest	—	10.11.2	0749345	4,089

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/openshift/mattermost-team-edition.svg)](https://charts.stackradar.io/charts/openshift/mattermost-team-edition)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.