mattermost 3.24.0 Helm chart

Name: mattermost Helm chart 3.24.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

phntom

Scored 14 Sept 2026

Mattermost Team Edition server.

Version 3.24.0 2 years agoapp version 9.3.0 3Artifact Hub

mattermost 3.24.0 deploys 2 container images: appropriate/curl and phntom/mattermost-team-edition. Across them, 788 findings — 4 critical, 16 high — 2 on CISA KEV. The highest contribution is UBUNTU-CVE-2025-27363 in freetype 2.11.1+dfsg-1ubuntu0.2, fixed in 2.11.1+dfsg-1ubuntu0.3.

Radar Score

8,722416117651

788 findings over 2 of 2 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
appropriate/curl	latest	0591	551
phntom/mattermost-team-edition	9.3.0	411108650	8,171

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

651 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.14.0	0.52.0
Low	UBUNTU-CVE-2024-22365	pam@1.4.0-11ubuntu2.3	1.4.0-11ubuntu2.4
Low	UBUNTU-CVE-2026-22796	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.21
Low	GHSA-5gmf-x7hg-97wf	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20260407102538-faa7d75b4ea0
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.14.0	0.45.0
Low	GHSA-69j8-prx2-vx98	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20250731063404-9eebaadf8f72
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.14.0	0.52.0
Low	GO-2024-2599	stdlib@go1.20.7	1.21.8
Low	GO-2024-3106	stdlib@go1.20.7	1.22.7
Low	UBUNTU-CVE-2025-50952	openjpeg2@2.4.0-6	2.4.0-6ubuntu0.4
Low	GHSA-3vcm-c42p-3hhf	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20250729073403-517ae758cd02
Low	UBUNTU-CVE-2026-1965	curl@7.81.0-1ubuntu1.14	7.81.0-1ubuntu1.23
Low	UBUNTU-CVE-2025-3576	krb5@1.19.2-2ubuntu0.1	1.19.2-2ubuntu0.7
Low	UBUNTU-CVE-2025-68973	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.5
Low	UBUNTU-CVE-2026-11979	libxml2@2.9.13+dfsg-1ubuntu0.3	no fix listed
Low	UBUNTU-CVE-2026-7168	curl@7.81.0-1ubuntu1.14	7.81.0-1ubuntu1.24
Low	UBUNTU-CVE-2026-86140	libxml2@2.9.13+dfsg-1ubuntu0.3	no fix listed
Low	GO-2024-2600	stdlib@go1.20.7	1.21.8
Low	UBUNTU-CVE-2026-59847	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.8
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.56.1	1.82.1
Low	UBUNTU-CVE-2026-3783	curl@7.81.0-1ubuntu1.14	7.81.0-1ubuntu1.23
Low	UBUNTU-CVE-2026-4873	curl@7.81.0-1ubuntu1.14	7.81.0-1ubuntu1.24
Low	UBUNTU-CVE-2023-39804	tar@1.34+dfsg-1ubuntu0.1.22.04.1	1.34+dfsg-1ubuntu0.1.22.04.2
Low	GO-2024-2609	stdlib@go1.20.7	1.21.8
Low	UBUNTU-CVE-2026-34743	xz-utils@5.2.5-2ubuntu1	5.2.5-2ubuntu1.1
Low	GO-2024-3107	stdlib@go1.20.7	1.22.7
Low	UBUNTU-CVE-2026-54411	pam@1.4.0-11ubuntu2.3	1.4.0-11ubuntu2.7
Low	GHSA-qgwx-rffp-6cx9	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20250415054241-76ab3867b785
Low	UBUNTU-CVE-2025-32414	libxml2@2.9.13+dfsg-1ubuntu0.3	2.9.13+dfsg-1ubuntu0.7
Low	UBUNTU-CVE-2026-25210	expat@2.4.7-1ubuntu0.2	2.4.7-1ubuntu0.7
Low	GHSA-wvgv-4fc3-2rcp	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20260311102650-3057ae7e83e9
Low	UBUNTU-CVE-2026-19487	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.9
Low	UBUNTU-CVE-2026-4878	libcap2@1:2.44-1build3	1:2.44-1ubuntu0.22.04.3
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.14.0	0.52.0
Low	GHSA-jc7w-c686-c4v9	github.com/ulikunitz/xz@v0.5.11	0.5.15
Low	GHSA-pj6f-rc94-gw53	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20250708173752-d6b35c41f0ae5
Low	GHSA-vg67-chm7-8m3j	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20240619142046-8181a9ddffc0
Low	GO-2023-2041	stdlib@go1.20.7	1.20.8
Low	GHSA-r67m-mf7v-qp7j	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20230825233148-f787fd63368a
Low	GO-2023-2043	stdlib@go1.20.7	1.20.8
Low	UBUNTU-CVE-2025-4373	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.5
Low	GO-2023-2186	stdlib@go1.20.7	1.20.11
Low	GHSA-c37r-v8jx-7cv2	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.1.4
Low	GHSA-j4c3-3h73-74m9	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.1.4
Low	UBUNTU-CVE-2023-6135	nss@2:3.68.2-0ubuntu1.2	2:3.98-0ubuntu0.22.04.1
Low	GHSA-8r89-8w26-cq32	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20260401090745-f4d1abe7e8f5
Low	GO-2024-3333	golang.org/x/net@v0.17.0	0.33.0
Low	GHSA-9w9f-6mg8-jp7w	github.com/blevesearch/bleve/v2@v2.3.8	2.5.0
Low	UBUNTU-CVE-2026-78408	util-linux@2.37.2-4ubuntu3	no fix listed
Low	GHSA-rwvp-r38j-9rgg	github.com/nwaples/rardecode@v1.1.3	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.24.0latest	2 years ago	9.3.0	416117651	8,722

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/phntom/mattermost.svg)](https://charts.stackradar.io/charts/phntom/mattermost)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.