mattermost Helm chart

Name: mattermost Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

phntom

Scored 15 Sept 2026

Mattermost Team Edition server.

Latest 3.24.0 2 years agoapp version 9.3.0 3Artifact Hub

mattermost 3.24.0 deploys 2 container images: appropriate/curl and phntom/mattermost-team-edition. Across them, 796 findings — 3 critical, 17 high — 2 on CISA KEV. The highest contribution is UBUNTU-CVE-2025-27363 in freetype 2.11.1+dfsg-1ubuntu0.2, fixed in 2.11.1+dfsg-1ubuntu0.3.

Radar Score

8,767317117659

796 findings over 2 of 2 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
appropriate/curl	latest	0591	551
phntom/mattermost-team-edition	9.3.0	312108658	8,216

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

659 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2024-3024	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	no fix listed
Low	UBUNTU-CVE-2026-56131	expat@2.4.7-1ubuntu0.2	no fix listed
Low	GHSA-h4rr-f37j-4hh7	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20250314142426-c049748b8863
Low	UBUNTU-CVE-2026-50219	expat@2.4.7-1ubuntu0.2	no fix listed
Low	GHSA-xv2p-wchj-qjhp	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20260123215601-86797c508c44
Low	GO-2024-2706	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	no fix listed
Low	GO-2025-3551	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	no fix listed
Low	UBUNTU-CVE-2025-15649	perl@5.34.0-3ubuntu1.3	no fix listed
Low	GO-2026-4603	stdlib@go1.20.7	1.25.8
Low	UBUNTU-CVE-2026-0988	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.8
Low	GO-2026-6303	golang.org/x/crypto@v0.14.0	0.55.0
Low	GO-2026-6354	golang.org/x/crypto@v0.14.0	0.56.0
Low	UBUNTU-CVE-2026-29111	systemd@249.11-0ubuntu3.7	249.11-0ubuntu3.19
Low	UBUNTU-CVE-2025-7039	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.7
Low	GO-2026-4982	stdlib@go1.20.7	1.25.10
Low	GO-2026-6091	stdlib@go1.20.7	1.25.13
Low	UBUNTU-CVE-2026-15059	systemd@249.11-0ubuntu3.7	249.11-0ubuntu3.22
Low	UBUNTU-CVE-2024-56433	shadow@1:4.8.1-2ubuntu2.1	no fix listed
Low	GO-2025-3549	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	no fix listed
Low	GHSA-r7r2-m3vr-c8qc	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20250415054241-76ab3867b785
Low	UBUNTU-CVE-2026-41991	gzip@1.10-4ubuntu4.1	1.10-4ubuntu4.2
Low	GHSA-cjm8-jxpw-g43m	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20260325191733-fb11968f8798
Low	GHSA-4r67-4x4p-fprg	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20250414112942-77892234944b
Low	GHSA-jr9x-3x7m-4j75	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20240628125750-70b218839fa7
Low	GO-2024-3025	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	no fix listed
Low	UBUNTU-CVE-2026-89157	pcre2@10.39-3ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2026-40226	systemd@249.11-0ubuntu3.7	249.11-0ubuntu3.21
Low	UBUNTU-CVE-2025-61143	tiff@4.3.0-6ubuntu0.7	4.3.0-6ubuntu0.13
Low	GO-2025-3750	stdlib@go1.20.7	1.23.10
Low	GO-2026-4864	stdlib@go1.20.7	1.25.9
Low	GO-2025-3447	stdlib@go1.20.7	1.22.12
Low	GO-2026-4865	stdlib@go1.20.7	1.25.9
Low	GO-2026-4869	stdlib@go1.20.7	1.25.9
Low	GO-2026-5320	github.com/yuin/goldmark@v1.5.4	1.7.17
Low	GO-2026-4340	stdlib@go1.20.7	1.24.12
Low	GHSA-qwwm-c582-82rx	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20250520060012-d0380305ef7a
Low	GO-2025-4175	stdlib@go1.20.7	1.24.11
Low	UBUNTU-CVE-2025-4877	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.4
Low	UBUNTU-CVE-2026-89092	glibc@2.35-0ubuntu3.1	no fix listed
Low	GO-2024-3089	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	no fix listed
Low	GO-2024-3030	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	no fix listed
Low	UBUNTU-CVE-2026-18374	glibc@2.35-0ubuntu3.1	no fix listed
Low	GHSA-44mv-jq72-gj49	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20260115183946-38b413a27604
Low	GHSA-qj47-w9f2-qg44	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20250708065844-b38e2eccda18
Low	GHSA-3rhr-jr63-hwq5	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20260127062706-c6b205f0d770
Low	GHSA-xpvf-6qcc-9jqc	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20260107144005-c7f6efdfb035
Low	UBUNTU-CVE-2026-16742	systemd@249.11-0ubuntu3.7	249.11-0ubuntu3.22
Low	GHSA-4g87-9x45-cx2h	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20251015091448-abbf01b9db45
Low	UBUNTU-CVE-2025-32364	poppler@22.02.0-2ubuntu0.3	22.02.0-2ubuntu0.7
Low	UBUNTU-CVE-2026-86469	glib2.0@2.72.4-0ubuntu2.2	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.24.0latest	2 years ago	9.3.0	317117659	8,767

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/phntom/mattermost.svg)](https://charts.stackradar.io/charts/phntom/mattermost)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.