php Helm chart

Name: php Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

qonstrukt

Scored 15 Sept 2026

A Helm Chart for a generic PHP application

Latest 0.2.0 1 year agoapp version 8.4-v8-apache 1Artifact Hub

php 0.2.0 deploys 1 container image: qonstrukt/php. Across them, 1,428 findings — 37 critical, 28 high — 39 on CISA KEV. The highest contribution is UBUNTU-CVE-2025-24201 in qtwebkit-opensource-src 5.212.0~alpha4-36, with no fix listed.

Radar Score

24,0383728502861

1,428 findings over 1 of 1 images measured

KEV ×39 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
qonstrukt/php	8.4-v8-apache	3728502861	24,038

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

861 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-5027	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.55.0
Low	UBUNTU-CVE-2026-42250	bzip2@1.0.8-5.1build0.1	1.0.8-5.1ubuntu0.1
Low	UBUNTU-CVE-2026-32777	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2025-43531	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	UBUNTU-CVE-2026-39113	sqlite3@3.45.1-1ubuntu2.6	no fix listed
Low	UBUNTU-CVE-2025-43965	imagemagick@8:6.9.12.98+dfsg1-5.2build2	8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm5
Low	UBUNTU-CVE-2026-61857	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	UBUNTU-CVE-2026-56368	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	UBUNTU-CVE-2026-35414	openssh@1:9.6p1-3ubuntu13.18	no fix listed
Low	UBUNTU-CVE-2026-14666	postgresql-16@16.14-0ubuntu0.24.04.1	16.15-0ubuntu0.24.04.1
Low	UBUNTU-CVE-2026-59997	openssh@1:9.6p1-3ubuntu13.18	1:9.6p1-3ubuntu13.18+Fips1
Low	UBUNTU-CVE-2020-29623	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	GO-2026-4602	stdlib@go1.14.2	1.25.8
Low	UBUNTU-CVE-2026-55595	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	UBUNTU-CVE-2026-76957	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-60191	mysql-8.0@8.0.46-0ubuntu0.24.04.3	8.0.46-0ubuntu0.24.04.4
Low	UBUNTU-CVE-2026-28688	imagemagick@8:6.9.12.98+dfsg1-5.2build2	8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11
Low	UBUNTU-CVE-2026-27456	util-linux@2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
Low	UBUNTU-CVE-2026-18508	tar@1.35+dfsg-3ubuntu0.3	no fix listed
Low	UBUNTU-CVE-2026-62946	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	UBUNTU-CVE-2025-68950	imagemagick@8:6.9.12.98+dfsg1-5.2build2	8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11
Low	UBUNTU-CVE-2026-56373	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	UBUNTU-CVE-2026-62363	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	UBUNTU-CVE-2026-56378	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	UBUNTU-CVE-2026-41990	libgcrypt20@1.10.3-2ubuntu0.1	1.12.0-2ubuntu0.1~Fips1~rc11
Low	UBUNTU-CVE-2026-61860	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	UBUNTU-CVE-2026-61868	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	UBUNTU-CVE-2026-45186	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-89160	pcre2@10.42-4ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2026-16241	postgresql-16@16.14-0ubuntu0.24.04.1	16.15-0ubuntu0.24.04.1
Low	UBUNTU-CVE-2022-3219	gnupg2@2.4.4-2ubuntu17.4	no fix listed
Low	UBUNTU-CVE-2026-87876	cups@2.4.7-1.2ubuntu7.14	no fix listed
Low	UBUNTU-CVE-2026-32776	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-6469	postgresql-16@16.14-0ubuntu0.24.04.1	16.15-0ubuntu0.24.04.1
Low	UBUNTU-CVE-2026-41080	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-48733	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	UBUNTU-CVE-2026-14673	postgresql-16@16.14-0ubuntu0.24.04.1	16.15-0ubuntu0.24.04.1
Low	UBUNTU-CVE-2022-0987	packagekit@1.2.8-2ubuntu1.5	no fix listed
Low	UBUNTU-CVE-2026-62343	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	UBUNTU-CVE-2026-33535	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	UBUNTU-CVE-2026-61858	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	UBUNTU-CVE-2026-27798	imagemagick@8:6.9.12.98+dfsg1-5.2build2	8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10
Low	UBUNTU-CVE-2025-11731	libxslt@1.1.39-0exp1ubuntu0.24.04.3	no fix listed
Low	UBUNTU-CVE-2024-0217	packagekit@1.2.8-2ubuntu1.5	no fix listed
Low	UBUNTU-CVE-2026-27799	imagemagick@8:6.9.12.98+dfsg1-5.2build2	8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10
Low	UBUNTU-CVE-2025-6498	tidy-html5@2:5.6.0-11ubuntu2	no fix listed
Low	UBUNTU-CVE-2026-47165	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	UBUNTU-CVE-2025-68469	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.0latest	1 year ago	8.4-v8-apache	3728502861	24,038

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/qonstrukt/php.svg)](https://charts.stackradar.io/charts/qonstrukt/php)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.