php Helm chart

Name: php Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

qonstrukt

Scored 14 Sept 2026

A Helm Chart for a generic PHP application

Latest 0.2.0 1 year agoapp version 8.4-v8-apache 1Artifact Hub

php 0.2.0 deploys 1 container image: qonstrukt/php. Across them, 1,417 findings — 37 critical, 28 high — 39 on CISA KEV. The highest contribution is UBUNTU-CVE-2025-24201 in qtwebkit-opensource-src 5.212.0~alpha4-36, with no fix listed.

Radar Score

23,9643728502850

1,417 findings over 1 of 1 images measured

KEV ×39 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
qonstrukt/php	8.4-v8-apache	3728502850	23,964

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

850 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2023-1568	stdlib@go1.14.2	1.19.6
Low	UBUNTU-CVE-2026-28902	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	UBUNTU-CVE-2026-28903	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	UBUNTU-CVE-2026-6471	postgresql-16@16.14-0ubuntu0.24.04.1	16.15-0ubuntu0.24.04.1
Low	GO-2022-1037	stdlib@go1.14.2	1.18.7
Low	PYSEC-2026-3554	cryptography@41.0.7	49.0.0
Low	UBUNTU-CVE-2026-10822	bind9@1:9.18.39-0ubuntu0.24.04.5	1:9.18.39-0ubuntu0.24.04.6
Low	UBUNTU-CVE-2025-31205	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	UBUNTU-CVE-2026-60178	mysql-8.0@8.0.46-0ubuntu0.24.04.3	8.0.46-0ubuntu0.24.04.4
Low	UBUNTU-CVE-2026-60585	mysql-8.0@8.0.46-0ubuntu0.24.04.3	8.0.46-0ubuntu0.24.04.4
Low	UBUNTU-CVE-2026-53466	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	UBUNTU-CVE-2026-64728	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	UBUNTU-CVE-2026-19672	python3.12@3.12.3-1ubuntu0.15	no fix listed
Low	UBUNTU-CVE-2024-44296	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	GO-2023-1987	stdlib@go1.14.2	1.19.12
Low	UBUNTU-CVE-2024-7553	php-mongodb@2.1.4-4+ubuntu24.04.1+deb.sury.org+1	no fix listed
Low	UBUNTU-CVE-2026-39872	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	UBUNTU-CVE-2026-43663	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	UBUNTU-CVE-2026-63074	openssl@3.0.13-0ubuntu3.11	3.0.13-0ubuntu3.15
Low	UBUNTU-CVE-2026-18295	gstreamer1.0@1.24.2-1ubuntu0.1	no fix listed
Low	GO-2023-1752	stdlib@go1.14.2	1.19.9
Low	UBUNTU-CVE-2024-27834	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	UBUNTU-CVE-2024-52616	avahi@0.8-13ubuntu6.2	no fix listed
Low	UBUNTU-CVE-2019-8769	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	UBUNTU-CVE-2026-43726	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	UBUNTU-CVE-2026-6238	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8
Low	UBUNTU-CVE-2026-18299	gstreamer1.0@1.24.2-1ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2026-43727	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	UBUNTU-CVE-2025-43434	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	UBUNTU-CVE-2026-25898	imagemagick@8:6.9.12.98+dfsg1-5.2build2	8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm7
Low	GO-2023-1705	stdlib@go1.14.2	1.19.8
Low	UBUNTU-CVE-2025-68618	imagemagick@8:6.9.12.98+dfsg1-5.2build2	8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm5
Low	UBUNTU-CVE-2025-55160	imagemagick@8:6.9.12.98+dfsg1-5.2build2	8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2
Low	GO-2023-1878	stdlib@go1.14.2	1.19.11
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.0.0-20200403201458-baeed622b8d8	0.52.0
Low	UBUNTU-CVE-2026-5435	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8
Low	UBUNTU-CVE-2026-59890	setuptools@68.1.2-2ubuntu1.2	no fix listed
Low	GO-2022-1039	stdlib@go1.14.2	1.18.7
Low	GO-2024-2963	stdlib@go1.14.2	1.21.12
Low	GO-2023-1702	stdlib@go1.14.2	1.19.8
Low	UBUNTU-CVE-2025-43211	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.55.0
Low	UBUNTU-CVE-2026-33900	imagemagick@8:6.9.12.98+dfsg1-5.2build2	8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11
Low	UBUNTU-CVE-2026-7017	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
Low	UBUNTU-CVE-2026-15806	python3.12@3.12.3-1ubuntu0.15	no fix listed
Low	UBUNTU-CVE-2026-16118	glib2.0@2.80.0-6ubuntu3.8	no fix listed
Low	GO-2022-0525	stdlib@go1.14.2	1.17.12
Low	UBUNTU-CVE-2025-69204	imagemagick@8:6.9.12.98+dfsg1-5.2build2	8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm5
Low	GO-2022-0520	stdlib@go1.14.2	1.17.12
Low	UBUNTU-CVE-2026-10723	bind9@1:9.18.39-0ubuntu0.24.04.5	1:9.18.39-0ubuntu0.24.04.6

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.0latest	1 year ago	8.4-v8-apache	3728502850	23,964

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/qonstrukt/php.svg)](https://charts.stackradar.io/charts/qonstrukt/php)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.