StackRadar

joomla 0.0.2 Helm chart

quench-joomla

Scored 22 Oct 2026

Hardened Joomla CMS (PHP-FPM + nginx) on a 0-CVE nonroot image, installed by its CLI installer into a bundled MariaDB.

Version 0.0.2app version 6.1.4 (not verified against the render) 0Artifact Hub

joomla 0.0.2 deploys 2 container images: ghcr.io/quenchworks/images/joomla and ghcr.io/quenchworks/images/mariadb. Across them, 23 findings — 0 critical, 0 high. The highest contribution is GHSA-qcv6-h33g-hvrc in joomla/filter dev-4.x-sept26-release, fixed in 1.4.4. Chart.yaml declares kubeVersion >=1.23.0-0; rendered for Kubernetes 1.23.0.

Radar Score

15200023

23 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
ghcr.io/quenchworks/images/joomla×2digest-pinned00015106
ghcr.io/quenchworks/images/mariadbdigest-pinned000846

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

16 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGHSA-qcv6-h33g-hvrcjoomla/filter@dev-4.x-sept26-release1.4.4
LowCGA-36r3-9m2m-pwvxpython-3.13@3.13.15_git20260925-r03.13.16_git20261002-r0
LowCGA-hrv7-pwqg-466jpython-3.13@3.13.15_git20260925-r03.13.16_git20261002-r0
LowCGA-8fx3-25f8-fh5xpython-3.13@3.13.15_git20260925-r0no fix listed
LowGHSA-875x-g8p7-5w27web-auth/webauthn-lib@4.5.24.9.0
LowCGA-fv7m-5pp8-x296glibc-2.44@2.44-r62.44-r8
LowCGA-gfxr-7v4h-3mmrperl@5.44.0-r1no fix listed
LowCGA-g73w-6cxg-73cxpython-3.13@3.13.15_git20260925-r0no fix listed
LowGHSA-fm22-g2q9-j3pwjoomla/filter@dev-4.x-sept26-release2.0.6
LowCGA-5mg5-hvq2-8763glibc-2.44@2.44-r62.44-r8
LowCGA-3g3j-42jj-77j3glibc-2.44@2.44-r62.44-r8
LowCGA-4gmv-8mr7-5pxxglibc-2.44@2.44-r6no fix listed
LowCGA-cvw6-9pj6-fx5jopenssl@3.6.4-r8no fix listed
LowCGA-ww43-fhm7-mff3openssl@3.6.4-r8no fix listed
LowCGA-53q8-cxrp-gx53glibc-2.44@2.44-r62.44-r8
LowCGA-5p62-38p7-f47cpython-3.13@3.13.15_git20260925-r03.13.16_git20261002-r0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.0.10latest—6.1.400020137
0.0.8—6.1.400017113
0.0.7—6.1.400017114
0.0.5—6.1.400022145
0.0.3—6.1.400023150
0.0.2—6.1.400023152

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/quench-joomla/joomla.svg)](https://charts.stackradar.io/charts/quench-joomla/joomla)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 1 Oct 2026 · scanned 7 Oct 2026 · advisories as of 7 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.