retrom Helm chart
retsamedocVerified publisherScored 14 Sept 2026
A centralized game library/collection management service with a focus on emulation
Latest 2026.2.5 7 days agodeploys tag retrom-v0.7.14 0Artifact Hub
retrom 2026.2.5 deploys 1 container image: ghcr.io/jmberesford/retrom-service. Across them, 646 findings — 2 critical, 4 high — 2 on CISA KEV. The highest contribution is DEBIAN-CVE-2025-27363 in freetype 2.12.1+dfsg-5+deb12u3, fixed in 2.12.1+dfsg-5+deb12u4. Chart.yaml declares kubeVersion >=1.25.0-0; rendered for Kubernetes 1.25.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | retrom-v0.7.14 | 24101539 | 7,084 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-859w-5945-r5v3 | vite | 5.4.19 |
| Low | GHSA-6g55-p6wh-862q | postcss | 8.5.12 |
| Low | DEBIAN-CVE-2026-18408 | postgresql-15 | 15.19-0+deb12u1 |
| Low | GHSA-fx2h-pf6j-xcff | vite | 6.4.3 |
| Low | GHSA-qffp-2rhf-9h96 | tar | 7.5.10 |
| Low | DEBIAN-CVE-2026-15741 | postgresql-15 | 15.19-0+deb12u1 |
| Low | DEBIAN-CVE-2026-50142 | libheif | no fix listed |
| Low | GHSA-23hp-3jrh-7fpw | tar | 7.5.19 |
| Low | DEBIAN-CVE-2026-42013 | gnutls28 | 3.7.9-2+deb12u7 |
| Low | DEBIAN-CVE-2026-0861 | glibc | 2.36-9+deb12u14 |
| Low | GHSA-52cp-r559-cp3m | js-yaml | 4.3.0 |
| Low | DEBIAN-CVE-2026-3833 | gnutls28 | 3.7.9-2+deb12u7 |
| Low | DEBIAN-CVE-2024-2236 | libgcrypt20 | no fix listed |
| Low | DEBIAN-CVE-2026-31789 | openssl | 3.0.19-1~deb12u2 |
| Low | DEBIAN-CVE-2025-69419 | openssl | 3.0.18-1~deb12u2 |
| Low | GHSA-4w7w-66w2-5vf9 | vite | 6.4.2 |
| Low | DEBIAN-CVE-2023-45322 | libxml2 | 2.9.14+dfsg-1.3~deb12u2 |
| Low | DEBIAN-CVE-2026-54874 | openssl | no fix listed |
| Low | DEBIAN-CVE-2026-6475 | postgresql-15 | 15.18-0+deb12u1 |
| Low | GHSA-93m4-6634-74q7 | vite | 5.4.21 |
| Low | GHSA-7r86-cg39-jmmj | minimatch | 3.1.3 |
| Low | DEBIAN-CVE-2026-42766 | openssl | 3.0.20-1~deb12u2 |
| Low | DEBIAN-CVE-2026-74860 | libxml2 | no fix listed |
| Low | GHSA-c27g-q93r-2cwf | vite | 5.4.9 |
| Low | DEBIAN-CVE-2024-50602 | expat | 2.5.0-1+deb12u2 |
| Low | DEBIAN-CVE-2025-69720 | ncurses | no fix listed |
| Low | GHSA-8qq5-rm4j-mr97 | tar | 7.5.3 |
| Low | DEBIAN-CVE-2025-6020 | pam | 1.5.2-6+deb12u2 |
| Low | DEBIAN-CVE-2026-47247 | libheif | no fix listed |
| Low | DEBIAN-CVE-2023-39615 | libxml2 | 2.9.14+dfsg-1.3~deb12u2 |
| Low | DEBIAN-CVE-2026-86145 | pcre2 | 10.42-1+deb12u1 |
| Low | GHSA-q4h4-gmj2-qvw2 | golang.org/ | 0.52.0 |
| Low | GHSA-23c5-xmqv-rm74 | minimatch | 3.1.4 |
| Low | DEBIAN-CVE-2026-6479 | postgresql-15 | 15.18-0+deb12u1 |
| Low | GHSA-w879-237q-wc7r | golang.org/ | 0.52.0 |
| Low | DEBIAN-CVE-2025-15281 | glibc | 2.36-9+deb12u14 |
| Low | GHSA-mh99-v99m-4gvg | brace-expansion | 1.1.17 |
| Low | GHSA-47m2-4cr7-mhcw | github.com/ | 0.49.1 |
| Low | DEBIAN-CVE-2025-6297 | dpkg | 1.21.23 |
| Low | GHSA-gcx4-mw62-g8wm | rollup | 4.22.4 |
| Low | DEBIAN-CVE-2026-45186 | expat | no fix listed |
| Low | GHSA-wcpc-wj8m-hjx6 | protobufjs | 7.6.1 |
| Low | DEBIAN-CVE-2026-42011 | gnutls28 | 3.7.9-2+deb12u7 |
| Low | GHSA-73rr-hh4g-fpgx | diff | 5.2.2 |
| Low | DEBIAN-CVE-2025-32989 | gnutls28 | 3.7.9-2+deb12u5 |
| Low | DEBIAN-CVE-2026-6464 | postgresql-15 | 15.19-0+deb12u1 |
| Low | DEBIAN-CVE-2026-9538 | perl | no fix listed |
| Low | DEBIAN-CVE-2020-15719 | openldap | no fix listed |
| Low | GHSA-66ff-xgx4-vchm | protobufjs | 7.5.6 |
| Low | DEBIAN-CVE-2025-6395 | gnutls28 | 3.7.9-2+deb12u5 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 2026.2.5latest | 7 days ago | retrom-v0.7.14 | 24101539 | 7,084 |
| 2026.2.3 | 7 months ago | 0.7.14 | — | — |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.