friendica 0.0.4 Helm chart

Name: friendica Helm chart 0.0.4: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

quench-friendica

Scored 23 Oct 2026

Hardened Friendica federated social network (PHP-FPM + nginx + worker daemon) on a 0-CVE nonroot image, installed by its CLI installer into a bundled MariaDB.

Version 0.0.4app version 2026.05 (not verified against the render) 0Artifact Hub

friendica 0.0.4 deploys 2 container images: ghcr.io/quenchworks/images/friendica and ghcr.io/quenchworks/images/mariadb. Across them, 16 findings — 0 critical, 0 high. The highest contribution is GHSA-cg2g-xh64-v4q7 in dompurify 3.4.16, fixed in 3.4.17. Chart.yaml declares kubeVersion >=1.23.0-0; rendered for Kubernetes 1.23.0.

Radar Score

10100016

16 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/quenchworks/images/friendica×2	digest-pinned	00010	64
ghcr.io/quenchworks/images/mariadb	digest-pinned	0006	37

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

11 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-cg2g-xh64-v4q7	dompurify@3.4.16	3.4.17
Low	CGA-8fx3-25f8-fh5x	python-3.13@3.13.16_git20261016-r1	no fix listed
Low	CGA-gfxr-7v4h-3mmr	perl@5.44.0-r2	no fix listed
Low	CGA-3p64-pj6v-586c	glibc-2.44@2.44-r9	no fix listed
Low	GHSA-mrv2-3pqr-j5jr	dompurify@3.4.16	3.4.17
Low	CGA-g73w-6cxg-73cx	python-3.13@3.13.16_git20261016-r1	no fix listed
Low	CGA-84qm-pxw8-f58f	glibc-2.44@2.44-r9	no fix listed
Low	CGA-2727-9j94-3x3p	glibc-2.44@2.44-r9	no fix listed
Low	CGA-4gmv-8mr7-5pxx	glibc-2.44@2.44-r9	no fix listed
Low	CGA-37wc-rr96-hm3f	glibc-2.44@2.44-r9	no fix listed
Low	GHSA-c6gr-qvv4-5v3f	dompurify@3.4.16	3.4.17

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.4latest	—	2026.05	00016	101
0.0.2	—	2026.05	00117	126

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/quench-friendica/friendica.svg)](https://charts.stackradar.io/charts/quench-friendica/friendica)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.