nextcloud 0.0.19 Helm chart

Name: nextcloud Helm chart 0.0.19: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

quench-nextcloud

Scored 22 Oct 2026

Hardened Nextcloud (self-hosted content collaboration / file-sync platform) on a 0-CVE nonroot php-fpm + nginx image, with a bundled MariaDB backend.

Version 0.0.19app version 34.0.4 (not verified against the render) 0Artifact Hub

nextcloud 0.0.19 deploys 2 container images: ghcr.io/quenchworks/images/nextcloud and ghcr.io/quenchworks/images/mariadb. Across them, 27 findings — 0 critical, 0 high. The highest contribution is CGA-36r3-9m2m-pwvx in python-3.13 3.13.15_git20260925-r0, fixed in 3.13.16_git20261002-r0. Chart.yaml declares kubeVersion >=1.23.0-0; rendered for Kubernetes 1.23.0.

Radar Score

17000027

27 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/quenchworks/images/nextcloud×2	digest-pinned	00019	124
ghcr.io/quenchworks/images/mariadb	digest-pinned	0008	46

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

20 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	CGA-36r3-9m2m-pwvx	python-3.13@3.13.15_git20260925-r0	3.13.16_git20261002-r0
Low	CGA-hrv7-pwqg-466j	python-3.13@3.13.15_git20260925-r0	3.13.16_git20261002-r0
Low	MAL-2022-3033	files_pdfviewer@7.0.0-dev.0	no fix listed
Low	MAL-2022-3056	firstrunwizard@7.0.0-dev.0	no fix listed
Low	GHSA-q97c-8qh3-fpc6	phpseclib/phpseclib@2.0.55	3.0.57
Low	CGA-8fx3-25f8-fh5x	python-3.13@3.13.15_git20260925-r0	no fix listed
Low	CGA-fv7m-5pp8-x296	glibc-2.44@2.44-r6	2.44-r8
Low	CGA-gfxr-7v4h-3mmr	perl@5.44.0-r1	no fix listed
Low	CGA-g73w-6cxg-73cx	python-3.13@3.13.15_git20260925-r0	no fix listed
Low	CGA-5mg5-hvq2-8763	glibc-2.44@2.44-r6	2.44-r8
Low	CGA-3g3j-42jj-77j3	glibc-2.44@2.44-r6	2.44-r8
Low	CGA-4gmv-8mr7-5pxx	glibc-2.44@2.44-r6	no fix listed
Low	CGA-cvw6-9pj6-fx5j	openssl@3.6.4-r8	no fix listed
Low	CGA-ww43-fhm7-mff3	openssl@3.6.4-r8	no fix listed
Low	RUSTSEC-2024-0436	paste@1.0.15	no fix listed
Low	RUSTSEC-2026-0105	core2@0.4.0	no fix listed
Low	RUSTSEC-2026-0190	anyhow@1.0.98	1.0.103
Low	RUSTSEC-2026-0204	crossbeam-epoch@0.9.18	0.9.20
Low	CGA-53q8-cxrp-gx53	glibc-2.44@2.44-r6	2.44-r8
Low	CGA-5p62-38p7-f47c	python-3.13@3.13.15_git20260925-r0	3.13.16_git20261002-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.25latest	—	34.0.4	00024	154
0.0.24	—	34.0.4	00021	131
0.0.22	—	34.0.4	00023	139
0.0.20	—	34.0.4	00024	144
0.0.19	—	34.0.4	00027	170
0.0.17	—	34.0.4	00025	160
0.0.15	—	34.0.4	00025	160
0.0.14	—	34.0.4	00024	154
0.0.13	—	34.0.4	00123	166
0.0.12	—	34.0.3	00332	292

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/quench-nextcloud/nextcloud.svg)](https://charts.stackradar.io/charts/quench-nextcloud/nextcloud)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.