mattermost Helm chart

Name: mattermost Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

phntom

Scored 15 Sept 2026

Mattermost Team Edition server.

Latest 3.24.0 2 years agoapp version 9.3.0 3Artifact Hub

mattermost 3.24.0 deploys 2 container images: appropriate/curl and phntom/mattermost-team-edition. Across them, 796 findings — 3 critical, 17 high — 2 on CISA KEV. The highest contribution is UBUNTU-CVE-2025-27363 in freetype 2.11.1+dfsg-1ubuntu0.2, fixed in 2.11.1+dfsg-1ubuntu0.3.

Radar Score

8,767317117659

796 findings over 2 of 2 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
appropriate/curl	latest	0591	551
phntom/mattermost-team-edition	9.3.0	312108658	8,216

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

659 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-hc6v-386m-93pq	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20250414110750-c23f44fe8ed0
Low	GO-2026-4962	golang.org/x/image@v0.8.0	0.39.0
Low	UBUNTU-CVE-2026-59846	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.8
Low	UBUNTU-CVE-2026-18477	tar@1.34+dfsg-1ubuntu0.1.22.04.1	no fix listed
Low	GHSA-86jg-35xj-3vv5	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20250414154356-6f33b721de76
Low	GHSA-j639-m367-75cf	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20250314142426-c049748b8863
Low	GHSA-jwhw-xf5v-qgxc	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20250422131222-701ddc896a10
Low	GHSA-58w6-w55x-6wq8	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20250905150616-ba86dfc5876b
Low	UBUNTU-CVE-2025-6141	ncurses@6.3-2	6.3-2ubuntu0.3
Low	GHSA-fpff-wj6m-grvr	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20250411064244-844447fbd57c
Low	GO-2023-2153	google.golang.org/grpc@v1.56.1	1.56.3
Low	GO-2026-5841	github.com/klauspost/compress@v1.16.6	1.18.7
Low	GO-2026-5932	golang.org/x/crypto@v0.14.0	no fix listed
Low	GO-2026-6061	google.golang.org/grpc@v1.56.1	1.82.1
Low	GO-2026-6278	github.com/gorilla/websocket@v1.5.0	1.5.3
Low	USN-5495-2	curl@7.81.0-1ubuntu1.14	7.81.0-1ubuntu1.21
Low	USN-6663-1	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.15
Low	USN-6727-2	nss@2:3.68.2-0ubuntu1.2	2:3.98-0ubuntu0.22.04.2
Low	USN-7034-1	ca-certificates@20230311ubuntu0.22.04.1	20240203~22.04.1
Low	USN-7412-2	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.4
Low	USN-8091-1	util-linux@2.37.2-4ubuntu3	2.37.2-4ubuntu3.5
Low	USN-8436-1	ca-certificates@20230311ubuntu0.22.04.1	20260601~22.04.1
Low	USN-8625-1	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.26
Low	USN-8688-1	pam@1.4.0-11ubuntu2.3	1.4.0-11ubuntu2.8
Low	GHSA-vqp5-2mrp-qqxg	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20260325160634-e738016c5920
Low	GHSA-xfq9-hh5x-xfq9	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20250204211032-f52e08754c49
Low	UBUNTU-CVE-2026-0965	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.6
Low	UBUNTU-CVE-2025-6496	tidy-html5@2:5.6.0-11ubuntu0.22.04.1	no fix listed
Low	UBUNTU-CVE-2025-6497	tidy-html5@2:5.6.0-11ubuntu0.22.04.1	no fix listed
Low	GHSA-mqcj-8c2g-h97q	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20250905150616-ba86dfc5876b
Low	GHSA-hm95-jx66-g2gh	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-202508080704-39bd251fe4f600
Low	GHSA-x3hx-ch7p-8xgg	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20250815165020-c8d66301415d
Low	UBUNTU-CVE-2025-66382	expat@2.4.7-1ubuntu0.2	no fix listed
Low	GHSA-3g35-v53r-gpxc	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.1.9
Low	UBUNTU-CVE-2025-6170	libxml2@2.9.13+dfsg-1ubuntu0.3	2.9.13+dfsg-1ubuntu0.8
Low	GHSA-9hh7-6558-qfp2	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20250905150616-ba86dfc5876b6
Low	GHSA-rv67-7w2g-7976	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20260127144908-ced9a56e3988
Low	UBUNTU-CVE-2026-24515	expat@2.4.7-1ubuntu0.2	2.4.7-1ubuntu0.7
Low	UBUNTU-CVE-2026-40228	systemd@249.11-0ubuntu3.7	no fix listed
Low	UBUNTU-CVE-2026-32778	expat@2.4.7-1ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-6192	openjpeg2@2.4.0-6	2.4.0-6ubuntu0.5
Low	UBUNTU-CVE-2023-4016	procps@2:3.3.17-6ubuntu2	2:3.3.17-6ubuntu2.1
Low	UBUNTU-CVE-2025-30258	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.3
Low	GHSA-jp3f-x449-4q75	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20260318173148-e9ae890a013b
Low	GHSA-9fpw-c9x7-cv3j	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20240604093018-5114c3b7cdb8
Low	UBUNTU-CVE-2025-9165	tiff@4.3.0-6ubuntu0.7	4.3.0-6ubuntu0.12
Low	UBUNTU-CVE-2026-1485	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.9
Low	GHSA-q7pp-wcgr-pffx	github.com/disintegration/imaging@v1.6.2	no fix listed
Low	UBUNTU-CVE-2026-53910	diffutils@1:3.8-0ubuntu2	1:3.8-0ubuntu2.1
Low	UBUNTU-CVE-2025-8534	tiff@4.3.0-6ubuntu0.7	4.3.0-6ubuntu0.11

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.24.0latest	2 years ago	9.3.0	317117659	8,767

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/phntom/mattermost.svg)](https://charts.stackradar.io/charts/phntom/mattermost)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.