StackRadar

coolify 0.0.41 Helm chart

quench-coolifyVerified publisher

Scored 21 Oct 2026

Self-hostable platform-as-a-service and open alternative to Heroku and Netlify. This umbrella chart wires the QuenchWorks Coolify control-plane images (the PHP/Laravel app running php-fpm, nginx, Horizon, and the scheduler under supervisord, plus the realtime tier of soketi and a terminal bridge) over bundled QuenchWorks PostgreSQL 15 and Redis, each a minimal, nonroot, 0-CVE image pinned by digest. Coolify manages external Docker hosts over SSH, so the privileged helper and proxy build tier runs on those managed hosts, not in this cluster.

Version 0.0.41app version 4.3.4 (not verified against the render) 0Artifact Hub

coolify 0.0.41 deploys 4 container images: ghcr.io/quenchworks/images/coolify-app, ghcr.io/quenchworks/images/coolify-realtime, ghcr.io/quenchworks/images/postgresql-15 and ghcr.io/quenchworks/images/redis. Across them, 48 findings — 0 critical, 1 high. The highest contribution is CGA-2hxc-5cc2-6xfq in nodejs-18 18.20.8-r9, with no fix listed.

Radar Score

40401344

48 findings over 4 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
ghcr.io/quenchworks/images/coolify-appdigest-pinned000849
ghcr.io/quenchworks/images/coolify-realtimedigest-pinned01324289
ghcr.io/quenchworks/images/postgresql-15digest-pinned000633
ghcr.io/quenchworks/images/redisdigest-pinned000633

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

3 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumCGA-fw2f-6ppw-fgcqnodejs-18@18.20.8-r9no fix listed
MediumCGA-3pq9-5rq6-qfh6nodejs-18@18.20.8-r9no fix listed
MediumCGA-72rv-6459-558xnodejs-18@18.20.8-r9no fix listed

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.0.44latest—4.3.401346412
0.0.42—4.3.401344404
0.0.41—4.3.401344404
0.0.34—4.3.401778805
0.0.31—4.3.401350440
0.0.29—4.3.401155438
0.0.28—4.3.401154434
0.0.26—4.3.401154434
0.0.23—4.3.401154434
0.0.21—4.3.401463534
0.0.20—4.3.401461525
0.0.18—4.3.401462555
0.0.17—4.3.401459530

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/quench-coolify/coolify.svg)](https://charts.stackradar.io/charts/quench-coolify/coolify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 12 Oct 2026 · scanned 21 Oct 2026 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.