mattermost Helm chart

Name: mattermost Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

phntom

Scored 14 Sept 2026

Mattermost Team Edition server.

Latest 3.24.0 2 years agoapp version 9.3.0 3Artifact Hub

mattermost 3.24.0 deploys 2 container images: appropriate/curl and phntom/mattermost-team-edition. Across them, 788 findings — 4 critical, 16 high — 2 on CISA KEV. The highest contribution is UBUNTU-CVE-2025-27363 in freetype 2.11.1+dfsg-1ubuntu0.2, fixed in 2.11.1+dfsg-1ubuntu0.3.

Radar Score

8,722416117651

788 findings over 2 of 2 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
appropriate/curl	latest	0591	551
phntom/mattermost-team-edition	9.3.0	411108650	8,171

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

788 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2025-5278	coreutils@8.32-4.1ubuntu1	8.32-4.1ubuntu1.4
Low	GO-2026-5856	stdlib@go1.20.7	1.25.12
Low	UBUNTU-CVE-2026-22795	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.21
Low	GO-2025-4007	stdlib@go1.20.7	1.24.9
Low	GO-2026-6355	golang.org/x/crypto@v0.14.0	0.56.0
Low	GHSA-h356-3mfw-x368	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20250411064244-844447fbd57c
Low	GO-2025-3550	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	no fix listed
Low	GO-2026-4980	stdlib@go1.20.7	1.25.10
Low	UBUNTU-CVE-2026-42770	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.25
Low	GO-2026-5039	stdlib@go1.20.7	1.25.11
Low	UBUNTU-CVE-2025-3360	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.7
Low	GO-2024-2635	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	no fix listed
Low	GHSA-6mvp-gh77-7vwh	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20240813135334-8f3a13122f55
Low	UBUNTU-CVE-2026-41254	lcms2@2.12~rc1-2build2	2.12~rc1-2ubuntu0.1
Low	GO-2024-3092	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	no fix listed
Low	UBUNTU-CVE-2025-8114	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.5
Low	GHSA-q8p2-2hwc-jw64	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20250110161910-96195f1bd746
Low	UBUNTU-CVE-2026-1484	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.9
Low	GO-2025-4013	stdlib@go1.20.7	1.24.8
Low	GO-2025-3849	stdlib@go1.20.7	1.23.12
Low	GO-2026-4946	stdlib@go1.20.7	1.25.9
Low	GHSA-2v3w-6g35-5f9v	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20260129181235-1346cf529aef
Low	GHSA-7cr3-38jm-6p45	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20250822090405-e8c7e7d0252b
Low	GHSA-mj2p-v2c2-vh4v	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20250314142426-c049748b8863
Low	GO-2022-0646	github.com/aws/aws-sdk-go@v1.44.293	no fix listed
Low	GHSA-g376-m3h3-mj4r	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20240926115259-20ed58906adc
Low	GO-2024-3094	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	no fix listed
Low	UBUNTU-CVE-2026-54370	acl@2.3.1-1	no fix listed
Low	GO-2024-3091	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	no fix listed
Low	GO-2026-5066	golang.org/x/image@v0.8.0	0.43.0
Low	UBUNTU-CVE-2026-56412	expat@2.4.7-1ubuntu0.2	no fix listed
Low	GO-2024-3028	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	no fix listed
Low	GHSA-4578-6gjh-f2jm	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20250520060012-d0380305ef7a
Low	GO-2026-4961	golang.org/x/image@v0.8.0	0.42.0
Low	GO-2024-3024	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	no fix listed
Low	UBUNTU-CVE-2026-56131	expat@2.4.7-1ubuntu0.2	no fix listed
Low	GHSA-h4rr-f37j-4hh7	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20250314142426-c049748b8863
Low	UBUNTU-CVE-2026-50219	expat@2.4.7-1ubuntu0.2	no fix listed
Low	GHSA-xv2p-wchj-qjhp	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	8.0.0-20260123215601-86797c508c44
Low	GO-2024-2706	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	no fix listed
Low	GO-2025-3551	github.com/mattermost/mattermost/server/v8@v0.0.0-20231206131006-d6edda074a4b	no fix listed
Low	UBUNTU-CVE-2025-15649	perl@5.34.0-3ubuntu1.3	no fix listed
Low	GO-2026-4603	stdlib@go1.20.7	1.25.8
Low	UBUNTU-CVE-2026-0988	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.8
Low	GO-2026-6303	golang.org/x/crypto@v0.14.0	0.55.0
Low	GO-2026-6354	golang.org/x/crypto@v0.14.0	0.56.0
Low	UBUNTU-CVE-2026-29111	systemd@249.11-0ubuntu3.7	249.11-0ubuntu3.19
Low	UBUNTU-CVE-2025-7039	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.7
Low	GO-2026-4982	stdlib@go1.20.7	1.25.10
Low	GO-2026-6091	stdlib@go1.20.7	1.25.13

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.24.0latest	2 years ago	9.3.0	416117651	8,722

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/phntom/mattermost.svg)](https://charts.stackradar.io/charts/phntom/mattermost)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.