nextcloud 0.0.19 Helm chart

Name: nextcloud Helm chart 0.0.19: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

quench-nextcloud

Scored 22 Oct 2026

Hardened Nextcloud (self-hosted content collaboration / file-sync platform) on a 0-CVE nonroot php-fpm + nginx image, with a bundled MariaDB backend.

Version 0.0.19app version 34.0.4 (not verified against the render) 0Artifact Hub

nextcloud 0.0.19 deploys 2 container images: ghcr.io/quenchworks/images/nextcloud and ghcr.io/quenchworks/images/mariadb. Across them, 27 findings — 0 critical, 0 high. The highest contribution is CGA-36r3-9m2m-pwvx in python-3.13 3.13.15_git20260925-r0, fixed in 3.13.16_git20261002-r0. Chart.yaml declares kubeVersion >=1.23.0-0; rendered for Kubernetes 1.23.0.

Radar Score

17000027

27 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/quenchworks/images/nextcloud×2	digest-pinned	00019	124
ghcr.io/quenchworks/images/mariadb	digest-pinned	0008	46

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

20 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	CGA-36r3-9m2m-pwvx	python-3.13@3.13.15_git20260925-r0	3.13.16_git20261002-r0
Low	CGA-hrv7-pwqg-466j	python-3.13@3.13.15_git20260925-r0	3.13.16_git20261002-r0
Low	MAL-2022-3033	files_pdfviewer@7.0.0-dev.0	no fix listed
Low	MAL-2022-3056	firstrunwizard@7.0.0-dev.0	no fix listed
Low	GHSA-q97c-8qh3-fpc6	phpseclib/phpseclib@2.0.55	3.0.57
Low	CGA-8fx3-25f8-fh5x	python-3.13@3.13.15_git20260925-r0	no fix listed
Low	CGA-fv7m-5pp8-x296	glibc-2.44@2.44-r6	2.44-r8
Low	CGA-gfxr-7v4h-3mmr	perl@5.44.0-r1	no fix listed
Low	CGA-g73w-6cxg-73cx	python-3.13@3.13.15_git20260925-r0	no fix listed
Low	CGA-5mg5-hvq2-8763	glibc-2.44@2.44-r6	2.44-r8
Low	CGA-3g3j-42jj-77j3	glibc-2.44@2.44-r6	2.44-r8
Low	CGA-4gmv-8mr7-5pxx	glibc-2.44@2.44-r6	no fix listed
Low	CGA-cvw6-9pj6-fx5j	openssl@3.6.4-r8	no fix listed
Low	CGA-ww43-fhm7-mff3	openssl@3.6.4-r8	no fix listed
Low	RUSTSEC-2024-0436	paste@1.0.15	no fix listed
Low	RUSTSEC-2026-0105	core2@0.4.0	no fix listed
Low	RUSTSEC-2026-0190	anyhow@1.0.98	1.0.103
Low	RUSTSEC-2026-0204	crossbeam-epoch@0.9.18	0.9.20
Low	CGA-53q8-cxrp-gx53	glibc-2.44@2.44-r6	2.44-r8
Low	CGA-5p62-38p7-f47c	python-3.13@3.13.15_git20260925-r0	3.13.16_git20261002-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.25latest	—	34.0.4	00024	154
0.0.24	—	34.0.4	00021	131
0.0.22	—	34.0.4	00023	139
0.0.20	—	34.0.4	00024	144
0.0.19	—	34.0.4	00027	170
0.0.17	—	34.0.4	00025	160
0.0.15	—	34.0.4	00025	160
0.0.14	—	34.0.4	00024	154
0.0.13	—	34.0.4	00123	166
0.0.12	—	34.0.3	00332	292

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/quench-nextcloud/nextcloud.svg)](https://charts.stackradar.io/charts/quench-nextcloud/nextcloud)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.