repoflow 0.9.1 Helm chart

Name: repoflow Helm chart 0.9.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

repoflow-helm-public

Scored 14 Sept 2026

RepoFlow is an intuitive package management platform offering advanced search, workspace management, and seamless documentation integration. Ideal for secure, self-hosted solutions.

Version 0.9.1app version 0.9.1 2Artifact Hub

repoflow 0.9.1 deploys 8 container images: api.repoflow.io/repoflow-public/docker-public/library/repoflow-client, library/busybox, library/elasticsearch, hasura/graphql-engine and 4 more. Across the 6 measured, 1,124 findings — 10 critical, 15 high. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.23, fixed in 1.1.1f-1ubuntu2.fips.16.

Radar Score

13,5211015199900

1,124 findings over 6 of 8 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

8 images

Image	Tag	Vulnerabilities	Radar Score
api.repoflow.io/repoflow-public/docker-public/library/repoflow-client	0.9.1	—	unmeasured
library/busybox×2	1.36	0000	0
library/elasticsearch	8.15.0	7968224	4,553
hasura/graphql-engine	v2.48.10	0348220	2,993
minio/minio	RELEASE.2025-07-23T15-54-02Z	009113	1,101
nginxinc/nginx-unprivileged	1.31.3-alpine	00918	370
library/postgres	16.2	3365325	4,504
api.repoflow.io/repoflow-public/docker-public/library/repoflow-server	0.9.1	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

740 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2024-33600	glibc@2.36-9+deb12u6	2.36-9+deb12u7
Low	UBUNTU-CVE-2026-66046	expat@2.4.7-1ubuntu0.6	no fix listed
Low	UBUNTU-CVE-2026-11972	python3.10@3.10.12-1~22.04.11	no fix listed
Low	GO-2023-2102	stdlib@go1.18.2	1.20.10
Low	UBUNTU-CVE-2025-5318	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm1
Low	UBUNTU-CVE-2023-0466	openssl@1.1.1f-1ubuntu2.23	1.1.1f-1ubuntu2.fips.18
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.109.Final	4.1.137.Final
Low	ALPINE-CVE-2026-80230	curl@8.21.0-r0	8.22.0-r0
Low	UBUNTU-CVE-2025-69534	python3.10@3.10.12-1~22.04.11	3.10.12-1~22.04.16
Low	UBUNTU-CVE-2026-80230	curl@7.81.0-1ubuntu1.20	no fix listed
Low	UBUNTU-CVE-2023-0465	openssl@1.1.1f-1ubuntu2.23	1.1.1f-1ubuntu2.fips.18
Low	UBUNTU-CVE-2026-42013	gnutls28@3.7.3-4ubuntu1.7	3.7.3-4ubuntu1.9
Low	ALPINE-CVE-2026-76641	expat@2.8.2-r0	2.8.4-r0
Low	UBUNTU-CVE-2026-0861	glibc@2.35-0ubuntu3.10	2.35-0ubuntu3.13
Low	GHSA-9c4q-hq6p-c237	github.com/minio/minio@v0.0.0-20250723155402-7ced9663e6a7+dirty	no fix listed
Low	DEBIAN-CVE-2026-3833	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7
Low	UBUNTU-CVE-2024-2236	libgcrypt20@1.9.4-3ubuntu3	1.9.4-3ubuntu3.3
Low	UBUNTU-CVE-2026-31789	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.23
Low	UBUNTU-CVE-2025-69419	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.21
Low	DEBIAN-CVE-2023-45322	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Low	GHSA-6c5v-hqjr-5xxp	github.com/rabbitmq/amqp091-go@v1.10.0	1.13.0
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-54874	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.29
Low	UBUNTU-CVE-2026-42766	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.25
Low	DEBIAN-CVE-2026-74860	libxml2@2.9.14+dfsg-1.3~deb12u1	no fix listed
Low	GHSA-5pvg-856g-cp85	netty-resolver-dns@4.1.109.Final	4.1.135.Final
Low	GO-2022-0969	stdlib@go1.18.2	1.18.6
Low	UBUNTU-CVE-2025-6020	pam@1.3.1-5ubuntu4.7	no fix listed
Low	DEBIAN-CVE-2023-39615	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Low	UBUNTU-CVE-2026-86145	pcre2@10.39-3ubuntu0.1	no fix listed
Low	DEBIAN-CVE-2024-31852	llvm-toolchain-16@1:16.0.6-15~deb12u1	no fix listed
Low	GHSA-qv9r-c865-cp47	log4j-api@2.19.0	2.25.5
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-3644	python3.10@3.10.12-1~22.04.11	3.10.12-1~22.04.16
Low	UBUNTU-CVE-2024-8096	curl@7.68.0-1ubuntu2.23	7.68.0-1ubuntu2.24
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.40.0	0.52.0
Low	GHSA-gmg8-593g-7mv3	poi-ooxml@5.2.5	5.4.0
Low	UBUNTU-CVE-2023-47039	perl@5.34.0-3ubuntu1.5	no fix listed
Low	GHSA-3p8m-j85q-pgmj	netty-codec@4.1.109.Final	4.1.125.Final
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.40.0	0.52.0
Low	UBUNTU-CVE-2025-15281	glibc@2.35-0ubuntu3.10	2.35-0ubuntu3.13
Low	UBUNTU-CVE-2025-6297	dpkg@1.21.1ubuntu2.3	1.21.1ubuntu2.6
Low	GHSA-mj4r-2hfc-f8p6	netty-codec@4.1.109.Final	4.1.133.Final
Low	UBUNTU-CVE-2026-42011	gnutls28@3.7.3-4ubuntu1.7	3.7.3-4ubuntu1.9
Low	GHSA-hv4r-mvr4-25vw	github.com/minio/minio@v0.0.0-20250723155402-7ced9663e6a7+dirty	no fix listed
Low	GHSA-c653-97m9-rcg9	netty-handler@4.1.109.Final	4.1.135.Final
Low	UBUNTU-CVE-2024-12243	gnutls28@3.7.3-4ubuntu1.7	no fix listed
Low	GHSA-vc5p-v9hr-52mj	log4j-core@2.12.4	2.25.3
Low	UBUNTU-CVE-2025-32989	gnutls28@3.7.3-4ubuntu1.7	no fix listed
Low	UBUNTU-CVE-2026-9538	perl@5.34.0-3ubuntu1.5	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.9.1latest	—	0.9.1	1015199900	13,521

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/repoflow-helm-public/repoflow.svg)](https://charts.stackradar.io/charts/repoflow-helm-public/repoflow)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.