repoflow 0.9.1 Helm chart

Name: repoflow Helm chart 0.9.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

repoflow-helm-public

Scored 14 Sept 2026

RepoFlow is an intuitive package management platform offering advanced search, workspace management, and seamless documentation integration. Ideal for secure, self-hosted solutions.

Version 0.9.1app version 0.9.1 2Artifact Hub

repoflow 0.9.1 deploys 8 container images: api.repoflow.io/repoflow-public/docker-public/library/repoflow-client, library/busybox, library/elasticsearch, hasura/graphql-engine and 4 more. Across the 6 measured, 1,124 findings — 10 critical, 15 high. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.23, fixed in 1.1.1f-1ubuntu2.fips.16.

Radar Score

13,5211015199900

1,124 findings over 6 of 8 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

8 images

Image	Tag	Vulnerabilities	Radar Score
api.repoflow.io/repoflow-public/docker-public/library/repoflow-client	0.9.1	—	unmeasured
library/busybox×2	1.36	0000	0
library/elasticsearch	8.15.0	7968224	4,553
hasura/graphql-engine	v2.48.10	0348220	2,993
minio/minio	RELEASE.2025-07-23T15-54-02Z	009113	1,101
nginxinc/nginx-unprivileged	1.31.3-alpine	00918	370
library/postgres	16.2	3365325	4,504
api.repoflow.io/repoflow-public/docker-public/library/repoflow-server	0.9.1	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

591 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2025-69420	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.21
Low	UBUNTU-CVE-2026-57433	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8
Low	DEBIAN-CVE-2026-6653	libxml2@2.9.14+dfsg-1.3~deb12u1	no fix listed
Low	RHSA-2026:2786	glibc@2.34-168.el9_6.20	0:2.34-231.el9_7.10
Low	GHSA-jv87-32hw-hh99	github.com/minio/minio@v0.0.0-20250723155402-7ced9663e6a7+dirty	no fix listed
Low	UBUNTU-CVE-2026-27135	nghttp2@1.43.0-1ubuntu0.2	1.43.0-1ubuntu0.3
Low	GHSA-9342-92gg-6v29	jakarta.mail@1.6.4	1.6.8
Low	UBUNTU-CVE-2026-13221	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8
Low	UBUNTU-CVE-2026-42496	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.7
Low	GHSA-3pxv-7cmr-fjr4	log4j-core@2.12.4	2.25.4
Low	GHSA-5cx5-wh4m-82fh	github.com/minio/minio@v0.0.0-20250723155402-7ced9663e6a7+dirty	no fix listed
Low	DEBIAN-CVE-2024-56406	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u2
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.40.0	0.52.0
Low	GHSA-6g7g-w4f8-9c9x	github.com/buger/jsonparser@v1.1.1	1.1.2
Low	DEBIAN-CVE-2024-37370	krb5@1.20.1-2+deb12u1	1.20.1-2+deb12u2
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.40.0	0.52.0
Low	UBUNTU-CVE-2026-6100	python3.10@3.10.12-1~22.04.11	3.10.12-1~22.04.16
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r0	3.5.8-r0
Low	RHSA-2025:12876	ncurses@6.2-10.20210508.el9	0:6.2-10.20210508.el9_6.2
Low	GHSA-57rv-r2g8-2cj3	netty-codec-http@4.1.109.Final	4.1.133.Final
Low	DEBIAN-CVE-2023-40403	libxslt@1.1.35-1	1.1.35-1+deb12u2
Low	UBUNTU-CVE-2026-9076	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.25
Low	ALPINE-CVE-2026-82209	curl@8.21.0-r0	8.22.0-r0
Low	UBUNTU-CVE-2026-82209	curl@7.81.0-1ubuntu1.20	no fix listed
Low	UBUNTU-CVE-2021-40528	libgcrypt20@1.8.5-5ubuntu1.1	1.8.5-5ubuntu1.fips.1.1
Low	GO-2023-1571	stdlib@go1.18.2	1.19.6
Low	UBUNTU-CVE-2026-4224	python3.10@3.10.12-1~22.04.11	3.10.12-1~22.04.16
Low	ALPINE-CVE-2026-80255	curl@8.21.0-r0	8.22.0-r0
Low	UBUNTU-CVE-2026-7210	python3.10@3.10.12-1~22.04.11	no fix listed
Low	UBUNTU-CVE-2026-12087	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8
Low	GHSA-78h2-9frx-2jm8	github.com/go-jose/go-jose/v4@v4.1.0	4.1.4
Low	GHSA-jjjj-jwhf-8rgr	github.com/minio/minio@v0.0.0-20250723155402-7ced9663e6a7+dirty	0.0.0-20251015170045-c1a49490c78e
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.72.0	1.83.1
Low	GHSA-pwqr-wmgm-9rr8	netty-codec-http@4.1.109.Final	4.1.132.Final
Low	UBUNTU-CVE-2026-15308	python3.10@3.10.12-1~22.04.11	3.10.12-1~22.04.18
Low	GHSA-45q3-82m4-75jr	netty-handler-proxy@4.1.109.Final	4.1.133.Final
Low	DEBIAN-CVE-2025-32415	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Low	UBUNTU-CVE-2026-0915	glibc@2.35-0ubuntu3.10	2.35-0ubuntu3.13
Low	UBUNTU-CVE-2025-4802	glibc@2.31-0ubuntu9.16	2.31-0ubuntu9.18
Low	UBUNTU-CVE-2023-50495	ncurses@6.3-2ubuntu0.1	no fix listed
Low	ALPINE-CVE-2026-13608	curl@8.21.0-r0	8.22.0-r0
Low	UBUNTU-CVE-2026-5773	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.24
Low	GHSA-3wrr-7qpf-2prh	jackson-databind@2.13.4.2	2.14.0
Low	ALPINE-CVE-2026-63072	openssl@3.5.7-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-63072	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.29
Low	DEBIAN-CVE-2026-40355	krb5@1.20.1-2+deb12u1	1.20.1-2+deb12u5
Low	GHSA-8wv5-x4w7-5gww	github.com/apache/thrift@v0.21.0	0.24.0
Low	DEBIAN-CVE-2026-40356	krb5@1.20.1-2+deb12u1	1.20.1-2+deb12u5
Low	UBUNTU-CVE-2026-45445	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.25
Low	DEBIAN-CVE-2026-85091	zlib@1:1.2.13.dfsg-1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.9.1latest	—	0.9.1	1015199900	13,521

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/repoflow-helm-public/repoflow.svg)](https://charts.stackradar.io/charts/repoflow-helm-public/repoflow)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.