matomo 1.4.0 Helm chart

Name: matomo Helm chart 1.4.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

pockost

Scored 29 Sept 2026

This Helm Chart deploys a highly secured Matomo instance, optimized for demanding production environments.

Version 1.4.0app version 5.14.0 1Artifact Hub

matomo 1.4.0 deploys 3 container images: pockost/matomo, library/mariadb and library/redis. Across them, 537 findings — 0 critical, 0 high. The highest contribution is DEBIAN-CVE-2018-6951 in patch 2.8-2, with no fix listed.

Radar Score

5,2180066470

537 findings over 3 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
pockost/matomo×3	5.14.0	0023187	2,061
library/mariadb	12.3.3	0026198	2,070
library/redis×2	8.10.1	001785	1,087

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

416 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-80255	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2025-1178	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-42497	perl@5.40.1-6	5.40.1-6+deb13u1
Low	UBUNTU-CVE-2026-53793	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	DEBIAN-CVE-2026-13608	curl@8.14.1-2+deb13u5	no fix listed
Low	UBUNTU-CVE-2026-48962	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
Low	DEBIAN-CVE-2026-9080	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2020-15719	openldap@2.6.10+dfsg-1	no fix listed
Low	UBUNTU-CVE-2026-60316	mariadb@1:12.3.3+maria~ubu2404	no fix listed
Low	UBUNTU-CVE-2026-61094	mariadb@1:12.3.3+maria~ubu2404	no fix listed
Low	DEBIAN-CVE-2026-11822	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2
Low	UBUNTU-CVE-2025-13699	mariadb@1:12.3.3+maria~ubu2404	no fix listed
Low	UBUNTU-CVE-2026-42012	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	DEBIAN-CVE-2026-9545	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-82208	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-12064	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-8932	curl@8.14.1-2+deb13u5	no fix listed
Low	UBUNTU-CVE-2026-75803	openssl@3.0.13-0ubuntu3.12	3.0.13-0ubuntu3.15
Low	DEBIAN-CVE-2025-66863	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-66865	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-48961	perl@5.40.1-6	5.40.1-6+deb13u1
Low	DEBIAN-CVE-2026-80230	curl@8.14.1-2+deb13u5	no fix listed
Low	DEBIAN-CVE-2025-66862	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-5435	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2008-0456	apache2@2.4.68-1~deb13u1	no fix listed
Low	GO-2026-4341	stdlib@go1.24.6	1.24.12
Low	UBUNTU-CVE-2026-53789	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	UBUNTU-CVE-2026-7017	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
Low	UBUNTU-CVE-2026-70457	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	UBUNTU-CVE-2026-42015	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	DEBIAN-CVE-2026-19499	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-76642	util-linux@2.41.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2025-5245	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-5244	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-66866	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2021-45346	sqlite3@3.46.1-7+deb13u2	no fix listed
Low	DEBIAN-CVE-2025-8941	pam@1.7.0-5	no fix listed
Low	DEBIAN-CVE-2025-7545	binutils@2.44-3	no fix listed
Low	UBUNTU-CVE-2026-35549	mariadb@1:12.3.3+maria~ubu2404	no fix listed
Low	DEBIAN-CVE-2025-70873	sqlite3@3.46.1-7+deb13u2	no fix listed
Low	UBUNTU-CVE-2026-70454	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	UBUNTU-CVE-2026-53792	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	UBUNTU-CVE-2026-70462	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	DEBIAN-CVE-2026-6238	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2024-26458	krb5@1.21.3-5+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-76956	expat@2.8.3-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2025-11083	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-11082	binutils@2.44-3	no fix listed
Low	UBUNTU-CVE-2016-2781	coreutils@9.4-3ubuntu6.2	no fix listed
Low	DEBIAN-CVE-2021-45261	patch@2.8-2	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.4.0latest	—	5.14.0	0066470	5,218
1.3.0	—	5.13.0	0071496	5,597

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/pockost/matomo.svg)](https://charts.stackradar.io/charts/pockost/matomo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.