StackRadar

coolify 0.0.17 Helm chart

quench-coolifyVerified publisher

Scored 14 Sept 2026

Self-hostable platform-as-a-service and open alternative to Heroku and Netlify. This umbrella chart wires the QuenchWorks Coolify control-plane images (the PHP/Laravel app running php-fpm, nginx, Horizon, and the scheduler under supervisord, plus the realtime tier of soketi and a terminal bridge) over bundled QuenchWorks PostgreSQL 15 and Redis, each a minimal, nonroot, 0-CVE image pinned by digest. Coolify manages external Docker hosts over SSH, so the privileged helper and proxy build tier runs on those managed hosts, not in this cluster.

Version 0.0.17app version 4.3.4 (not verified against the render) 0Artifact Hub

coolify 0.0.17 deploys 4 container images: ghcr.io/quenchworks/images/coolify-app, ghcr.io/quenchworks/images/coolify-realtime, ghcr.io/quenchworks/images/postgresql-15 and ghcr.io/quenchworks/images/redis. Across them, 52 findings0 critical, 1 high. The highest contribution is CGA-2hxc-5cc2-6xfq in nodejs-18 18.20.8-r9, with no fix listed.

Radar Score

43301150

52 findings over 4 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
ghcr.io/quenchworks/images/coolify-appdigest-pinned0001388
ghcr.io/quenchworks/images/coolify-realtimedigest-pinned01130306
ghcr.io/quenchworks/images/postgresql-15digest-pinned000426
ghcr.io/quenchworks/images/redisdigest-pinned000313

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

1 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumCGA-fw2f-6ppw-fgcqnodejs-18@18.20.8-r9no fix listed

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.0.17latest4.3.401150433

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/quench-coolify/coolify.svg)](https://charts.stackradar.io/charts/quench-coolify/coolify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 13 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.