uptime-kuma Helm chart
pascaliskeVerified publisherScored 14 Sept 2026
A Helm chart for Uptime-Kuma
Latest 3.0.0 8 months agoapp version 2.0.2 1Artifact Hub
uptime-kuma 3.0.0 deploys 1 container image: louislam/uptime-kuma. Across them, 647 findings — 0 critical, 3 high. The highest contribution is DEBIAN-CVE-2025-15467 in openssl 3.0.17-1~deb12u3, fixed in 3.0.18-1~deb12u2.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
1 image
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| louislam/ | 2.0.2-slim-rootless | 0399544 | 6,883 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
647 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-2xpw-w6gg-jr37 | urllib3 | 2.6.0 |
| Medium | GHSA-gm62-xv2j-4w53 | urllib3 | 2.6.0 |
| Medium | DEBIAN-CVE-2024-26461 | krb5 | no fix listed |
| Medium | DEBIAN-CVE-2019-1010024 | glibc | no fix listed |
| Medium | DEBIAN-CVE-2026-5450 | glibc | no fix listed |
| Medium | DEBIAN-CVE-2023-50782 | python-cryptography | no fix listed |
| Medium | GHSA-3ww4-gg4f-jr7f | cryptography | 42.0.0 |
| Medium | GHSA-h75p-j8xm-m278 | github.com/ | 1.14.2 |
| Medium | GHSA-vgwf-h737-ff37 | golang.org/ | 0.52.0 |
| Medium | DEBIAN-CVE-2025-47268 | iputils | no fix listed |
| Medium | DEBIAN-CVE-2026-34182 | openssl | 3.0.20-1~deb12u2 |
| Medium | GHSA-f5wc-c3c7-36mc | golang.org/ | 0.52.0 |
| Medium | GHSA-f23m-r3pf-42rh | lodash | 4.18.0 |
| Medium | GHSA-xxjr-mmjv-4gpg | lodash | 4.17.23 |
| Medium | DEBIAN-CVE-2024-39689 | python-certifi | no fix listed |
| Medium | PYSEC-2024-230 | certifi | 2024.7.4 |
| Medium | DEBIAN-CVE-2026-6100 | python3.11 | 3.11.2-6+deb12u8 |
| Medium | DEBIAN-CVE-2026-31790 | openssl | 3.0.19-1~deb12u2 |
| Medium | DEBIAN-CVE-2026-34180 | openssl | 3.0.20-1~deb12u2 |
| Medium | DEBIAN-CVE-2024-2379 | curl | no fix listed |
| Medium | DEBIAN-CVE-2026-7383 | openssl | 3.0.20-1~deb12u2 |
| Medium | DEBIAN-CVE-2026-8924 | curl | no fix listed |
| Medium | GHSA-8gq3-vp5j-2grp | jsonata | 2.2.0 |
| Medium | DEBIAN-CVE-2026-8376 | perl | no fix listed |
| Medium | PYSEC-2023-254 | cryptography | 41.0.6 |
| Medium | DEBIAN-CVE-2026-5260 | gnutls28 | 3.7.9-2+deb12u7 |
| Medium | GHSA-rm3j-f69w-wqmq | golang.org/ | 0.52.0 |
| Medium | GHSA-37ch-88jc-xwx2 | path-to-regexp | 0.1.13 |
| Medium | DEBIAN-CVE-2026-66046 | expat | no fix listed |
| Medium | DEBIAN-CVE-2026-8927 | curl | no fix listed |
| Medium | DEBIAN-CVE-2026-9669 | python3.11 | no fix listed |
| Medium | DEBIAN-CVE-2026-28388 | openssl | 3.0.19-1~deb12u2 |
| Medium | GHSA-99f4-grh7-6pcq | @grpc/ | 1.9.16 |
| Medium | GHSA-m7jm-9gc2-mpf2 | fast-xml-parser | 5.3.5 |
| Medium | DEBIAN-CVE-2025-69421 | openssl | 3.0.18-1~deb12u2 |
| Medium | GHSA-v9p9-hfj2-hcw8 | undici | 6.24.0 |
| Medium | GHSA-wmfp-5q7x-987x | liquidjs | 10.25.0 |
| Medium | GHSA-3xgq-45jj-v275 | cross-spawn | 7.0.5 |
| Medium | GHSA-p92q-9vqr-4j8v | axios | 0.32.0 |
| Medium | GHSA-w7pp-m8wf-vj6r | cryptography | 39.0.1 |
| Medium | DEBIAN-CVE-2026-28387 | openssl | 3.0.19-1~deb12u2 |
| Medium | DEBIAN-CVE-2026-11940 | python3.11 | no fix listed |
| Medium | GHSA-jmr7-xgp7-cmfj | fast-xml-parser | 5.3.6 |
| Medium | GHSA-6vqw-3v5j-54x4 | cryptography | 42.0.4 |
| Medium | GHSA-2943-5xfg-gq5f | jsonata | 2.2.1 |
| Medium | GHSA-96hv-2xvq-fx4p | ws | 8.21.0 |
| Medium | GHSA-3ppc-4f35-3m26 | minimatch | 9.0.6 |
| Medium | DEBIAN-CVE-2026-28389 | openssl | 3.0.19-1~deb12u2 |
| Medium | DEBIAN-CVE-2026-28390 | openssl | 3.0.19-1~deb12u2 |
| Medium | GHSA-pf86-5x62-jrwf | axios | 0.31.1 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/pascaliske/uptime-kuma)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.