repoflow 0.9.1 Helm chart

Name: repoflow Helm chart 0.9.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

repoflow-helm-public

Scored 14 Sept 2026

RepoFlow is an intuitive package management platform offering advanced search, workspace management, and seamless documentation integration. Ideal for secure, self-hosted solutions.

Version 0.9.1app version 0.9.1 2Artifact Hub

repoflow 0.9.1 deploys 8 container images: api.repoflow.io/repoflow-public/docker-public/library/repoflow-client, library/busybox, library/elasticsearch, hasura/graphql-engine and 4 more. Across the 6 measured, 1,124 findings — 10 critical, 15 high. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.23, fixed in 1.1.1f-1ubuntu2.fips.16.

Radar Score

13,5211015199900

1,124 findings over 6 of 8 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

8 images

Image	Tag	Vulnerabilities	Radar Score
api.repoflow.io/repoflow-public/docker-public/library/repoflow-client	0.9.1	—	unmeasured
library/busybox×2	1.36	0000	0
library/elasticsearch	8.15.0	7968224	4,553
hasura/graphql-engine	v2.48.10	0348220	2,993
minio/minio	RELEASE.2025-07-23T15-54-02Z	009113	1,101
nginxinc/nginx-unprivileged	1.31.3-alpine	00918	370
library/postgres	16.2	3365325	4,504
api.repoflow.io/repoflow-public/docker-public/library/repoflow-server	0.9.1	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

740 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-93wv-jw9v-4972	netty-codec-http2@4.1.109.Final	4.1.136.Final
Low	DEBIAN-CVE-2020-15719	openldap@2.5.13+dfsg-5	no fix listed
Low	UBUNTU-CVE-2025-6395	gnutls28@3.7.3-4ubuntu1.7	no fix listed
Low	GHSA-6jqx-86gh-f27w	netty-codec-http@4.1.109.Final	4.1.136.Final
Low	DEBIAN-CVE-2026-0990	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u6
Low	UBUNTU-CVE-2025-24528	krb5@1.17-6ubuntu4.6	1.17-6ubuntu4.9
Low	ALPINE-CVE-2026-82208	curl@8.21.0-r0	8.22.0-r0
Low	DEBIAN-CVE-2025-7458	sqlite3@3.40.1-2	no fix listed
Low	GHSA-mvh2-crg5-v77c	netty-codec-http@4.1.109.Final	4.1.136.Final
Low	GO-2023-2185	stdlib@go1.18.2	1.20.11
Low	DEBIAN-CVE-2026-54411	pam@1.5.2-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-2219	dpkg@1.21.22	1.21.23
Low	UBUNTU-CVE-2026-42497	perl@5.34.0-3ubuntu1.5	no fix listed
Low	DEBIAN-CVE-2025-24928	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Low	GHSA-h383-gmxw-35v2	log4j-1.2-api@2.19.0	2.25.4
Low	UBUNTU-CVE-2026-41992	gzip@1.10-4ubuntu4.1	1.10-4ubuntu4.2
Low	UBUNTU-CVE-2023-7008	systemd@249.11-0ubuntu3.16	249.11-0ubuntu3.21
Low	GHSA-h749-fxx7-pwpg	github.com/minio/minio@v0.0.0-20250723155402-7ced9663e6a7+dirty	no fix listed
Low	GHSA-558v-64gr-wgg4	netty-codec@4.1.109.Final	4.1.136.Final
Low	GHSA-c3fc-8qff-9hwx	bcprov-jdk18on@1.78.1	1.84
Low	GHSA-mm3m-5497-xggg	elasticsearch@8.15.0	8.16.0
Low	UBUNTU-CVE-2024-4603	openssl@3.0.2-0ubuntu1.19	no fix listed
Low	UBUNTU-CVE-2026-8932	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.27
Low	DEBIAN-CVE-2024-55549	libxslt@1.1.35-1	1.1.35-1+deb12u1
Low	DEBIAN-CVE-2025-24855	libxslt@1.1.35-1	1.1.35-1+deb12u1
Low	UBUNTU-CVE-2024-12133	libtasn1-6@4.16.0-2	4.16.0-2ubuntu0.1
Low	GHSA-xwmg-2g98-w7v9	nimbus-jose-jwt@9.23	9.37.4
Low	UBUNTU-CVE-2026-8286	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.25
Low	GHSA-8xfc-gm6g-vgpv	bc-fips@1.0.2.4	1.0.2.5
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-75803	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.29
Low	GHSA-676x-f7gg-47vc	netty-resolver-dns@4.1.109.Final	4.1.135.Final
Low	DEBIAN-CVE-2024-33602	glibc@2.36-9+deb12u6	2.36-9+deb12u7
Low	UBUNTU-CVE-2026-4046	glibc@2.35-0ubuntu3.10	2.35-0ubuntu3.14
Low	GHSA-wg6q-6289-32hp	bcpkix-jdk18on@1.78.1	1.84
Low	UBUNTU-CVE-2026-0966	libssh@0.9.6-2ubuntu0.22.04.4	0.9.6-2ubuntu0.22.04.6
Low	GO-2022-0537	stdlib@go1.18.2	1.17.13
Low	UBUNTU-CVE-2026-48959	perl@5.34.0-3ubuntu1.5	no fix listed
Low	DEBIAN-CVE-2025-32414	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Low	UBUNTU-CVE-2026-59843	libssh@0.9.6-2ubuntu0.22.04.4	0.9.6-2ubuntu0.22.04.8
Low	UBUNTU-CVE-2026-5928	glibc@2.35-0ubuntu3.10	2.35-0ubuntu3.14
Low	GHSA-pjcq-xvwq-hhpj	github.com/Azure/go-ntlmssp@v0.0.0-20221128193559-754e69321358	0.1.1
Low	UBUNTU-CVE-2026-6791	glibc@2.35-0ubuntu3.10	2.35-0ubuntu3.15
Low	UBUNTU-CVE-2022-27943	gcc-12@12.3.0-1ubuntu1~22.04.2	no fix listed
Low	UBUNTU-CVE-2026-8458	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.25
Low	UBUNTU-CVE-2026-76641	expat@2.4.7-1ubuntu0.6	no fix listed
Low	GHSA-wg65-39gg-5wfj	github.com/prometheus/prometheus@v0.303.0	0.311.3
Low	UBUNTU-CVE-2026-6253	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.24
Low	GHSA-ghfh-p92w-j4mg	elasticsearch@8.15.0	8.15.1
Low	DSA-5949-1	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.9.1latest	—	0.9.1	1015199900	13,521

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/repoflow-helm-public/repoflow.svg)](https://charts.stackradar.io/charts/repoflow-helm-public/repoflow)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.