php Helm chart

Name: php Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

qonstrukt

Scored 14 Sept 2026

A Helm Chart for a generic PHP application

Latest 0.2.0 1 year agoapp version 8.4-v8-apache 1Artifact Hub

php 0.2.0 deploys 1 container image: qonstrukt/php. Across them, 1,417 findings — 37 critical, 28 high — 39 on CISA KEV. The highest contribution is UBUNTU-CVE-2025-24201 in qtwebkit-opensource-src 5.212.0~alpha4-36, with no fix listed.

Radar Score

23,9643728502850

1,417 findings over 1 of 1 images measured

KEV ×39 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
qonstrukt/php	8.4-v8-apache	3728502850	23,964

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

850 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-56410	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-56411	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-78410	util-linux@2.39.3-9ubuntu6.5	no fix listed
Low	GO-2026-5026	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.55.0
Low	GO-2026-5026	stdlib@go1.26.4	1.25.13
Low	UBUNTU-CVE-2025-55005	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	UBUNTU-CVE-2026-86142	libxml2@2.9.14+dfsg-1.3ubuntu3.8	no fix listed
Low	UBUNTU-CVE-2026-42014	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	GO-2025-3420	stdlib@go1.14.2	1.22.11
Low	UBUNTU-CVE-2026-40169	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	GO-2026-4342	stdlib@go1.14.2	1.24.12
Low	GO-2024-2598	stdlib@go1.14.2	1.21.8
Low	GO-2025-3751	stdlib@go1.14.2	1.23.10
Low	UBUNTU-CVE-2026-78409	util-linux@2.39.3-9ubuntu6.5	no fix listed
Low	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.28.0	1.82.2
Low	GHSA-537c-gmf6-5ccf	cryptography@41.0.7	48.0.1
Low	GHSA-m425-mq94-257g	google.golang.org/grpc@v1.28.0	1.56.3
Low	UBUNTU-CVE-2026-40312	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	UBUNTU-CVE-2023-43114	qtbase-opensource-src@5.15.13+dfsg-1ubuntu1	no fix listed
Low	UBUNTU-CVE-2026-4360	python3.12@3.12.3-1ubuntu0.15	3.12.3-1ubuntu0.17
Low	UBUNTU-CVE-2025-43427	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	UBUNTU-CVE-2026-25970	imagemagick@8:6.9.12.98+dfsg1-5.2build2	8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8
Low	GO-2024-2961	golang.org/x/crypto@v0.0.0-20200403201458-baeed622b8d8	0.0.0-20220525230936-793ad666bf5e
Low	UBUNTU-CVE-2026-3446	python3.12@3.12.3-1ubuntu0.15	no fix listed
Low	UBUNTU-CVE-2023-39328	openjpeg2@2.5.0-2ubuntu0.5	no fix listed
Low	GO-2025-4116	golang.org/x/crypto@v0.0.0-20200403201458-baeed622b8d8	0.43.0
Low	GO-2026-4870	stdlib@go1.14.2	1.25.9
Low	GO-2022-0532	stdlib@go1.14.2	1.17.11
Low	UBUNTU-CVE-2026-20608	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	GO-2025-4009	stdlib@go1.14.2	1.24.8
Low	UBUNTU-CVE-2026-86138	libxml2@2.9.14+dfsg-1.3ubuntu3.8	no fix listed
Low	GO-2026-4947	stdlib@go1.14.2	1.25.9
Low	UBUNTU-CVE-2026-86143	libxml2@2.9.14+dfsg-1.3ubuntu3.8	no fix listed
Low	GO-2025-4006	stdlib@go1.14.2	1.24.8
Low	UBUNTU-CVE-2026-28494	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	UBUNTU-CVE-2026-56371	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	UBUNTU-CVE-2026-47023	mysql-8.0@8.0.46-0ubuntu0.24.04.3	8.0.46-0ubuntu0.24.04.4
Low	GO-2026-5037	stdlib@go1.14.2	1.25.11
Low	GO-2026-4971	stdlib@go1.14.2	1.25.10
Low	UBUNTU-CVE-2026-14672	postgresql-16@16.14-0ubuntu0.24.04.1	16.15-0ubuntu0.24.04.1
Low	UBUNTU-CVE-2026-3832	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	UBUNTU-CVE-2025-43392	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	UBUNTU-CVE-2026-56409	expat@2.6.1-2ubuntu0.4	no fix listed
Low	GO-2026-5972	stdlib@go1.26.4	1.25.13
Low	GO-2026-6088	stdlib@go1.26.4	1.25.13
Low	GO-2026-6089	stdlib@go1.26.4	1.25.13
Low	GO-2026-6090	stdlib@go1.26.4	1.25.13
Low	UBUNTU-CVE-2026-28687	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	UBUNTU-CVE-2026-50813	sqlite3@3.45.1-1ubuntu2.6	3.45.1-1ubuntu2.7
Low	GO-2026-5038	stdlib@go1.14.2	1.25.11

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.0latest	1 year ago	8.4-v8-apache	3728502850	23,964

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/qonstrukt/php.svg)](https://charts.stackradar.io/charts/qonstrukt/php)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.