StackRadar

firefly-iii 0.2.10 Helm chart

phntom

Scored 14 Sept 2026

Firefly III: a personal finances manager

Version 0.2.10 3 years agodeploys tag 7.2.0 0Artifact Hub

firefly-iii 0.2.10 deploys 2 container images: bitnami/oauth2-proxy and phntom/fireflyiii. Across the 1 measured, 144 findings0 critical, 1 high 1 on CISA KEV. The highest contribution is DLA-3621-1 in nghttp2 1.36.0-2+deb10u1, fixed in 1.36.0-2+deb10u2.

Radar Score

1,8130132110

144 findings over 1 of 2 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
bitnami/oauth2-proxy7.2.0unmeasured
phntom/fireflyiii×2version-5.7.501321101,813

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

110 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowDLA-3167-1ncurses@6.1+20181013-2+deb10u26.1+20181013-2+deb10u3
LowGHSA-3qpq-r242-jqj7phpseclib/phpseclib@3.0.143.0.52
LowDLA-3850-1glibc@2.28-10+deb10u12.28-10+deb10u4
LowDLA-3660-1gnutls28@3.6.7-4+deb10u73.6.7-4+deb10u11
LowGHSA-v5mv-p594-2x33guzzlehttp/guzzle@7.4.27.15.2
LowDLA-3107-1sqlite3@3.27.2-3+deb10u13.27.2-3+deb10u2
LowDLA-3422-1postgresql-11@11.14-0+deb10u111.20-0+deb10u1
LowGHSA-5v5v-ww74-355vtwig/twig@v3.3.103.27.0
LowDLA-3405-1libxml2@2.9.4+dfsg1-7+deb10u32.9.4+dfsg1-7+deb10u6
LowGHSA-h8vq-8gpg-mhcgtwig/twig@v3.3.103.27.0
LowDLA-3377-1systemd@241-7~deb10u8241-7~deb10u9
LowGHSA-8x9c-rmqh-456ctwig/twig@v3.3.103.27.0
LowGHSA-hh8v-hgvp-g3f5league/commonmark@2.3.02.8.2
LowGHSA-72xp-p242-47p9symfony/routing@v6.0.86.4.40
LowGHSA-29pj-957v-52mcleague/commonmark@2.3.02.9.0
LowGHSA-h95v-h523-3mw8guzzlehttp/guzzle@7.4.27.15.1
LowDLA-3583-1glib2.0@2.58.3-2+deb10u32.58.3-2+deb10u5
LowDLA-3814-1glib2.0@2.58.3-2+deb10u32.58.3-2+deb10u6
LowGHSA-wm3w-8rrp-j577guzzlehttp/guzzle@7.4.27.15.1
LowGHSA-4j38-f5cw-54h7twig/twig@v3.3.103.26.0
LowGHSA-g2gp-3wwq-f4phleague/commonmark@2.3.02.9.0
LowGHSA-jfm3-95jq-q3rfleague/commonmark@2.3.02.9.0
LowGHSA-mh25-x5hq-wrqpleague/commonmark@2.3.02.9.0
LowGHSA-m557-wrgg-6rp4phpseclib/phpseclib@3.0.143.0.54
LowGHSA-cwxw-98qj-8qjxguzzlehttp/guzzle@7.4.27.12.1
LowGHSA-2x45-7fc3-mxwqfirebase/php-jwt@v6.1.27.0.0
LowGHSA-f7vp-7xgx-4w4rguzzlehttp/guzzle@7.4.27.15.2
LowGHSA-f283-ghqc-fg79guzzlehttp/guzzle@7.4.27.15.1
LowDLA-3110-1glib2.0@2.58.3-2+deb10u32.58.3-2+deb10u4
LowGHSA-94pj-82f3-465wguzzlehttp/guzzle@7.4.27.14.2
LowGHSA-wpwq-4j6v-78m3guzzlehttp/guzzle@7.4.27.12.1
LowGHSA-34xg-wgjx-8xphguzzlehttp/psr7@2.2.12.10.2
LowGHSA-4v6x-c7xx-hw9fleague/commonmark@2.3.02.8.1
LowGHSA-hq7v-mx3g-29hwguzzlehttp/psr7@2.2.12.10.2
LowDLA-3474-1systemd@241-7~deb10u8241-7~deb10u10
LowGHSA-vm85-hxw5-5432guzzlehttp/psr7@2.2.12.12.1
LowGHSA-c2w2-prh8-qm98guzzlehttp/psr7@2.2.12.12.3
LowGHSA-r854-jrxh-36qxphpseclib/phpseclib@3.0.143.0.51
LowDLA-3755-1tar@1.30+dfsg-61.30+dfsg-6+deb10u1
LowGHSA-g446-98w2-8p5wguzzlehttp/guzzle@7.4.27.12.3
LowGHSA-mrqx-rp3w-jpjpsymfony/http-foundation@v6.0.86.4.14
LowGHSA-mj63-m3rc-8pprleague/commonmark@2.3.02.9.0
LowGHSA-wjfc-pgfp-pv9cnyholm/psr7@1.5.01.6.1
LowGHSA-9c3x-r3wp-mgxmsymfony/http-client@v6.0.86.4.15
LowGHSA-crmm-hgp2-wgrplaravel/framework@v9.11.012.61.1
LowDLA-3112-1bzip2@1.0.6-9.2~deb10u11.0.6-9.2~deb10u2
LowDLA-3134-1tzdata@2021a-0+deb10u42021a-0+deb10u7
LowDLA-3161-1tzdata@2021a-0+deb10u42021a-0+deb10u8
LowDLA-3189-1postgresql-11@11.14-0+deb10u111.18-0+deb10u1
LowDLA-3316-1postgresql-11@11.14-0+deb10u111.19-0+deb10u1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.2.10latest3 years ago7.2.001321101,813

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/phntom/firefly-iii.svg)](https://charts.stackradar.io/charts/phntom/firefly-iii)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.