repoflow 0.9.1 Helm chart

Name: repoflow Helm chart 0.9.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

repoflow-helm-public

Scored 14 Sept 2026

RepoFlow is an intuitive package management platform offering advanced search, workspace management, and seamless documentation integration. Ideal for secure, self-hosted solutions.

Version 0.9.1app version 0.9.1 2Artifact Hub

repoflow 0.9.1 deploys 8 container images: api.repoflow.io/repoflow-public/docker-public/library/repoflow-client, library/busybox, library/elasticsearch, hasura/graphql-engine and 4 more. Across the 6 measured, 1,124 findings — 10 critical, 15 high. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.23, fixed in 1.1.1f-1ubuntu2.fips.16.

Radar Score

13,5211015199900

1,124 findings over 6 of 8 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

8 images

Image	Tag	Vulnerabilities	Radar Score
api.repoflow.io/repoflow-public/docker-public/library/repoflow-client	0.9.1	—	unmeasured
library/busybox×2	1.36	0000	0
library/elasticsearch	8.15.0	7968224	4,553
hasura/graphql-engine	v2.48.10	0348220	2,993
minio/minio	RELEASE.2025-07-23T15-54-02Z	009113	1,101
nginxinc/nginx-unprivileged	1.31.3-alpine	00918	370
library/postgres	16.2	3365325	4,504
api.repoflow.io/repoflow-public/docker-public/library/repoflow-server	0.9.1	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

591 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2023-1751	stdlib@go1.18.2	1.19.9
Low	GO-2023-1753	stdlib@go1.18.2	1.19.9
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.15.0	2.18.8
Low	GHSA-389x-839f-4rhx	netty-common@4.1.109.Final	4.1.118.Final
Low	DEBIAN-CVE-2026-3184	util-linux@2.38.1-5+deb12u1	no fix listed
Low	UBUNTU-CVE-2026-84366	python3.10@3.10.12-1~22.04.11	no fix listed
Low	UBUNTU-CVE-2026-25210	expat@2.4.7-1ubuntu0.6	2.4.7-1ubuntu0.7
Low	GHSA-cp6g-7hqx-qxhp	go.mongodb.org/mongo-driver@v1.17.3	1.17.7
Low	RHSA-2026:33226	glibc@2.34-168.el9_6.20	0:2.34-272.el9_8
Low	DEBIAN-CVE-2026-7010	perl@5.36.0-7+deb12u1	no fix listed
Low	GHSA-4mp9-239f-g9hg	netty-codec-http@4.1.109.Final	4.1.136.Final
Low	UBUNTU-CVE-2026-19487	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.9
Low	RHSA-2026:12441	libcap@2.48-9.el9_2	0:2.48-10.el9_7.1
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.40.0	0.52.0
Low	DEBIAN-CVE-2026-89158	pcre2@10.42-1	10.42-1+deb12u1
Low	GHSA-m9gh-789g-q5pv	elasticsearch@8.15.0	8.19.8
Low	GO-2023-2041	stdlib@go1.18.2	1.20.8
Low	DEBIAN-CVE-2025-27587	openssl@3.0.11-1~deb12u2	no fix listed
Low	GHSA-vffh-x6r8-xx99	github.com/prometheus/prometheus@v0.303.0	0.311.2-0.20260410083055-07c6232d159b
Low	GO-2023-2043	stdlib@go1.18.2	1.20.8
Low	DEBIAN-CVE-2013-4392	systemd@252.22-1~deb12u1	no fix listed
Low	GO-2022-0515	stdlib@go1.18.2	1.17.12
Low	GO-2023-2186	stdlib@go1.18.2	1.20.11
Low	GHSA-32fw-gq77-f2f2	github.com/eclipse/paho.mqtt.golang@v1.5.0	1.5.1
Low	GHSA-9h8m-3fm2-qjrq	go.opentelemetry.io/otel/sdk@v1.35.0	1.40.0
Low	ALPINE-CVE-2026-78408	util-linux@2.42.1-r0	2.42.3-r1
Low	UBUNTU-CVE-2026-78408	util-linux@2.37.2-4ubuntu3.4	no fix listed
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.15.0	2.18.8
Low	RHSA-2026:42736	acl@2.3.1-4.el9	0:2.4.0-1.el9_8
Low	UBUNTU-CVE-2026-41989	libgcrypt20@1.9.4-3ubuntu3	1.9.4-3ubuntu3.2
Low	UBUNTU-CVE-2024-11053	curl@7.68.0-1ubuntu2.23	7.68.0-1ubuntu2.25
Low	UBUNTU-CVE-2025-5372	libssh@0.9.3-2ubuntu2.5	no fix listed
Low	GO-2024-3105	stdlib@go1.18.2	1.22.7
Low	GO-2022-1095	stdlib@go1.18.2	1.18.8
Low	UBUNTU-CVE-2026-13595	util-linux@2.37.2-4ubuntu3.4	2.37.2-4ubuntu3.6
Low	GO-2023-1621	stdlib@go1.18.2	1.19.7
Low	GO-2026-4981	stdlib@go1.18.2	1.25.10
Low	UBUNTU-CVE-2026-6019	python3.10@3.10.12-1~22.04.11	3.10.12-1~22.04.16
Low	DEBIAN-CVE-2023-31439	systemd@252.22-1~deb12u1	no fix listed
Low	GO-2025-3563	stdlib@go1.18.2	1.23.8
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.15.0	2.18.9
Low	GO-2026-4977	stdlib@go1.18.2	1.25.10
Low	UBUNTU-CVE-2026-0964	libssh@0.9.6-2ubuntu0.22.04.4	0.9.6-2ubuntu0.22.04.6
Low	GO-2024-2610	stdlib@go1.18.2	1.21.8
Low	ALPINE-CVE-2026-76957	expat@2.8.2-r0	2.8.4-r0
Low	DEBIAN-CVE-2023-31437	systemd@252.22-1~deb12u1	no fix listed
Low	UBUNTU-CVE-2026-59848	libssh@0.9.6-2ubuntu0.22.04.4	0.9.6-2ubuntu0.22.04.8
Low	GO-2026-4986	stdlib@go1.18.2	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.39.0	0.53.0
Low	GO-2026-4918	stdlib@go1.18.2	1.25.10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.9.1latest	—	0.9.1	1015199900	13,521

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/repoflow-helm-public/repoflow.svg)](https://charts.stackradar.io/charts/repoflow-helm-public/repoflow)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.