php Helm chart

Name: php Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

qonstrukt

Scored 14 Sept 2026

A Helm Chart for a generic PHP application

Latest 0.2.0 1 year agoapp version 8.4-v8-apache 1Artifact Hub

php 0.2.0 deploys 1 container image: qonstrukt/php. Across them, 1,417 findings — 37 critical, 28 high — 39 on CISA KEV. The highest contribution is UBUNTU-CVE-2025-24201 in qtwebkit-opensource-src 5.212.0~alpha4-36, with no fix listed.

Radar Score

23,9643728502850

1,417 findings over 1 of 1 images measured

KEV ×39 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
qonstrukt/php	8.4-v8-apache	3728502850	23,964

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

850 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-45358	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	UBUNTU-CVE-2026-28686	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	UBUNTU-CVE-2026-86139	libxml2@2.9.14+dfsg-1.3ubuntu3.8	no fix listed
Low	UBUNTU-CVE-2026-13757	p11-kit@0.25.3-4ubuntu2.1	0.25.3-4ubuntu2.2
Low	GO-2026-5942	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.56.0
Low	GO-2026-5942	stdlib@go1.26.4	1.26.6
Low	UBUNTU-CVE-2026-20676	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	GHSA-qxp5-gwg8-xv66	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.36.0
Low	UBUNTU-CVE-2026-11850	krb5@1.20.1-6ubuntu2.6	1.20.1-6ubuntu2.7
Low	UBUNTU-CVE-2026-56132	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2020-3894	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	GO-2025-4012	stdlib@go1.14.2	1.24.8
Low	UBUNTU-CVE-2026-15146	wget@1.21.4-1ubuntu4.3	1.21.4-1ubuntu4.4
Low	UBUNTU-CVE-2023-27932	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	GO-2025-3956	stdlib@go1.14.2	1.23.12
Low	UBUNTU-CVE-2026-15588	glib2.0@2.80.0-6ubuntu3.8	no fix listed
Low	GO-2026-4440	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.45.0
Low	GO-2025-4011	stdlib@go1.14.2	1.24.8
Low	GO-2025-4015	stdlib@go1.14.2	1.24.8
Low	GO-2026-6218	stdlib@go1.26.4	1.25.13
Low	UBUNTU-CVE-2022-46692	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	UBUNTU-CVE-2025-48174	libavif@1.0.4-1ubuntu3	no fix listed
Low	UBUNTU-CVE-2025-53014	imagemagick@8:6.9.12.98+dfsg1-5.2build2	8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm1
Low	UBUNTU-CVE-2026-59999	openssh@1:9.6p1-3ubuntu13.18	1:9.6p1-3ubuntu13.18+Fips1
Low	UBUNTU-CVE-2026-33905	imagemagick@8:6.9.12.98+dfsg1-5.2build2	8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11
Low	GO-2026-4441	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.45.0
Low	UBUNTU-CVE-2026-28690	imagemagick@8:6.9.12.98+dfsg1-5.2build2	8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10
Low	UBUNTU-CVE-2026-40310	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	UBUNTU-CVE-2026-30937	imagemagick@8:6.9.12.98+dfsg1-5.2build2	8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12
Low	UBUNTU-CVE-2026-28901	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	UBUNTU-CVE-2026-15534	perl@5.38.2-3.2ubuntu0.3	no fix listed
Low	UBUNTU-CVE-2026-40311	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	GO-2025-3373	stdlib@go1.14.2	1.22.11
Low	GO-2026-5970	golang.org/x/text@v0.3.0	0.39.0
Low	UBUNTU-CVE-2026-47012	mysql-8.0@8.0.46-0ubuntu0.24.04.3	8.0.46-0ubuntu0.24.04.4
Low	UBUNTU-CVE-2026-60177	mysql-8.0@8.0.46-0ubuntu0.24.04.3	8.0.46-0ubuntu0.24.04.4
Low	UBUNTU-CVE-2026-60182	mysql-8.0@8.0.46-0ubuntu0.24.04.3	8.0.46-0ubuntu0.24.04.4
Low	UBUNTU-CVE-2026-60184	mysql-8.0@8.0.46-0ubuntu0.24.04.3	8.0.46-0ubuntu0.24.04.4
Low	UBUNTU-CVE-2026-60185	mysql-8.0@8.0.46-0ubuntu0.24.04.3	8.0.46-0ubuntu0.24.04.4
Low	UBUNTU-CVE-2026-60186	mysql-8.0@8.0.46-0ubuntu0.24.04.3	8.0.46-0ubuntu0.24.04.4
Low	UBUNTU-CVE-2026-60187	mysql-8.0@8.0.46-0ubuntu0.24.04.3	8.0.46-0ubuntu0.24.04.4
Low	UBUNTU-CVE-2026-25797	imagemagick@8:6.9.12.98+dfsg1-5.2build2	8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm9
Low	UBUNTU-CVE-2025-59529	avahi@0.8-13ubuntu6.2	no fix listed
Low	UBUNTU-CVE-2026-64685	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	UBUNTU-CVE-2026-49219	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	UBUNTU-CVE-2026-84968	php-mongodb@2.1.4-4+ubuntu24.04.1+deb.sury.org+1	no fix listed
Low	UBUNTU-CVE-2025-48175	libavif@1.0.4-1ubuntu3	no fix listed
Low	GO-2025-4155	stdlib@go1.14.2	1.24.11
Low	UBUNTU-CVE-2026-32259	imagemagick@8:6.9.12.98+dfsg1-5.2build2	8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12
Low	UBUNTU-CVE-2025-10911	libxslt@1.1.39-0exp1ubuntu0.24.04.3	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.0latest	1 year ago	8.4-v8-apache	3728502850	23,964

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/qonstrukt/php.svg)](https://charts.stackradar.io/charts/qonstrukt/php)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.