mattermost 0.0.30 Helm chart

Name: mattermost Helm chart 0.0.30: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

quench-mattermost

Scored 21 Oct 2026

Open-source, self-hosted team collaboration and messaging platform (Team Edition) — channels, direct messages, and file sharing. Hardened by QuenchWorks as a minimal, nonroot, 0-CVE image, cosign-signed and pinned by digest. Bundles PostgreSQL.

Version 0.0.30app version 11.11.1 (not verified against the render) 0Artifact Hub

mattermost 0.0.30 deploys 2 container images: ghcr.io/quenchworks/images/postgresql and ghcr.io/quenchworks/images/mattermost. Across them, 33 findings — 0 critical, 0 high. The highest contribution is GO-2026-6612 in golang.org/x/net v0.58.0, fixed in 0.60.0.

Radar Score

28900231

33 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/quenchworks/images/postgresql	digest-pinned	0009	54
ghcr.io/quenchworks/images/mattermost	digest-pinned	00222	235

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

26 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-6603	golang.org/x/net@v0.58.0	0.60.0
Low	GO-2026-6603	stdlib@go1.26.8	1.26.9
Low	GO-2026-6611	stdlib@go1.26.8	1.26.9
Low	GO-2026-6611	golang.org/x/net@v0.58.0	0.60.0
Low	GO-2026-6608	stdlib@go1.26.8	1.26.9
Low	GO-2026-6607	stdlib@go1.26.8	1.26.9
Low	GO-2026-6609	stdlib@go1.26.8	1.26.9
Low	GO-2026-6613	stdlib@go1.26.8	1.26.9
Low	GO-2026-6605	stdlib@go1.26.8	1.26.9
Low	GO-2026-6610	stdlib@go1.26.8	1.26.9
Low	GO-2026-6610	golang.org/x/net@v0.58.0	0.60.0
Low	GO-2026-6604	stdlib@go1.26.8	1.26.9
Low	CGA-8fx3-25f8-fh5x	python-3.13@3.13.16_git20261002-r1	no fix listed
Low	CGA-fv7m-5pp8-x296	glibc-2.44@2.44-r7	2.44-r8
Low	CGA-g73w-6cxg-73cx	python-3.13@3.13.16_git20261002-r1	no fix listed
Low	CGA-5mg5-hvq2-8763	glibc-2.44@2.44-r7	2.44-r8
Low	GO-2026-6599	stdlib@go1.26.8	1.26.9
Low	GO-2026-6600	stdlib@go1.26.8	1.26.9
Low	GO-2026-6617	stdlib@go1.26.8	1.26.9
Low	GO-2026-6617	golang.org/x/net@v0.58.0	0.60.0
Low	CGA-3g3j-42jj-77j3	glibc-2.44@2.44-r7	2.44-r8
Low	CGA-4gmv-8mr7-5pxx	glibc-2.44@2.44-r7	no fix listed
Low	CGA-cvw6-9pj6-fx5j	openssl@3.6.5-r1	no fix listed
Low	CGA-ww43-fhm7-mff3	openssl@3.6.5-r1	no fix listed
Low	GO-2026-5932	golang.org/x/crypto@v0.57.0	no fix listed
Low	CGA-53q8-cxrp-gx53	glibc-2.44@2.44-r7	2.44-r8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.35latest	—	11.11.2	00016	95
0.0.34	—	11.11.1	00015	91
0.0.33	—	11.11.1	00015	91
0.0.30	—	11.11.1	00231	289
0.0.28	—	11.11.1	00234	314
0.0.27	—	11.11.1	00234	314
0.0.26	—	11.11.1	00232	297
0.0.24	—	11.11.1	00232	297
0.0.23	—	11.11.1	00334	341
0.0.22	—	11.11.0	00114	115
0.0.21	—	11.10.1	00113	110
0.0.20	—	11.10.1	00117	134

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/quench-mattermost/mattermost.svg)](https://charts.stackradar.io/charts/quench-mattermost/mattermost)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.