php Helm chart

Name: php Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

qonstrukt

Scored 14 Sept 2026

A Helm Chart for a generic PHP application

Latest 0.2.0 1 year agoapp version 8.4-v8-apache 1Artifact Hub

php 0.2.0 deploys 1 container image: qonstrukt/php. Across them, 1,417 findings — 37 critical, 28 high — 39 on CISA KEV. The highest contribution is UBUNTU-CVE-2025-24201 in qtwebkit-opensource-src 5.212.0~alpha4-36, with no fix listed.

Radar Score

23,9643728502850

1,417 findings over 1 of 1 images measured

KEV ×39 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
qonstrukt/php	8.4-v8-apache	3728502850	23,964

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

850 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-20644	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	UBUNTU-CVE-2026-76642	util-linux@2.39.3-9ubuntu6.5	no fix listed
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.0.0-20200403201458-baeed622b8d8	0.45.0
Low	UBUNTU-CVE-2024-52615	avahi@0.8-13ubuntu6.2	no fix listed
Low	UBUNTU-CVE-2025-1352	elfutils@0.190-1.1ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2026-25897	imagemagick@8:6.9.12.98+dfsg1-5.2build2	8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm7
Low	UBUNTU-CVE-2025-43438	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	UBUNTU-CVE-2025-43430	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	UBUNTU-CVE-2026-64787	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	UBUNTU-CVE-2021-42762	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	GO-2023-2375	stdlib@go1.14.2	1.20.0
Low	UBUNTU-CVE-2024-40776	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	UBUNTU-CVE-2026-60001	openssh@1:9.6p1-3ubuntu13.18	1:9.6p1-3ubuntu13.18+Fips1
Low	GHSA-vvgc-356p-c3xw	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.38.0
Low	GO-2023-1569	stdlib@go1.14.2	1.19.6
Low	UBUNTU-CVE-2025-12781	python3.12@3.12.3-1ubuntu0.15	no fix listed
Low	UBUNTU-CVE-2025-15366	python3.12@3.12.3-1ubuntu0.15	no fix listed
Low	UBUNTU-CVE-2026-26066	imagemagick@8:6.9.12.98+dfsg1-5.2build2	8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.28.0	1.83.1
Low	UBUNTU-CVE-2022-46705	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	GO-2023-2382	stdlib@go1.14.2	1.20.12
Low	GO-2022-1143	stdlib@go1.14.2	1.18.9
Low	UBUNTU-CVE-2025-4211	qtbase-opensource-src@5.15.13+dfsg-1ubuntu1	no fix listed
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.0.0-20200403201458-baeed622b8d8	0.52.0
Low	UBUNTU-CVE-2025-31206	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.0.0-20200403201458-baeed622b8d8	0.45.0
Low	UBUNTU-CVE-2026-9499	qtbase-opensource-src@5.15.13+dfsg-1ubuntu1	no fix listed
Low	UBUNTU-CVE-2024-44244	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.0.0-20200403201458-baeed622b8d8	0.52.0
Low	UBUNTU-CVE-2026-55577	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	GO-2024-2599	stdlib@go1.14.2	1.21.8
Low	UBUNTU-CVE-2026-45031	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	GO-2022-1038	stdlib@go1.14.2	1.18.7
Low	UBUNTU-CVE-2026-47064	mysql-8.0@8.0.46-0ubuntu0.24.04.3	8.0.46-0ubuntu0.24.04.4
Low	UBUNTU-CVE-2024-44192	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	UBUNTU-CVE-2026-6811	php-mongodb@2.1.4-4+ubuntu24.04.1+deb.sury.org+1	no fix listed
Low	GO-2024-3106	stdlib@go1.14.2	1.22.7
Low	UBUNTU-CVE-2026-46523	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed
Low	UBUNTU-CVE-2025-43228	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	UBUNTU-CVE-2025-43441	qtwebkit-opensource-src@5.212.0~alpha4-36	no fix listed
Low	GO-2023-1570	stdlib@go1.14.2	1.19.6
Low	UBUNTU-CVE-2026-32636	imagemagick@8:6.9.12.98+dfsg1-5.2build2	8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8
Low	UBUNTU-CVE-2026-11979	libxml2@2.9.14+dfsg-1.3ubuntu3.8	no fix listed
Low	UBUNTU-CVE-2026-86140	libxml2@2.9.14+dfsg-1.3ubuntu3.8	no fix listed
Low	UBUNTU-CVE-2025-30348	qtbase-opensource-src@5.15.13+dfsg-1ubuntu1	no fix listed
Low	GO-2022-0531	stdlib@go1.14.2	1.17.11
Low	GO-2024-2600	stdlib@go1.14.2	1.21.8
Low	UBUNTU-CVE-2026-25986	imagemagick@8:6.9.12.98+dfsg1-5.2build2	8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm7
Low	UBUNTU-CVE-2025-15367	python3.12@3.12.3-1ubuntu0.15	no fix listed
Low	UBUNTU-CVE-2026-59847	libssh@0.10.6-2ubuntu0.4	0.10.6-2ubuntu0.5

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.0latest	1 year ago	8.4-v8-apache	3728502850	23,964

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/qonstrukt/php.svg)](https://charts.stackradar.io/charts/qonstrukt/php)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.