retrom Helm chart
retsamedocVerified publisherScored 14 Sept 2026
A centralized game library/collection management service with a focus on emulation
Latest 2026.2.5 7 days agodeploys tag retrom-v0.7.14 0Artifact Hub
retrom 2026.2.5 deploys 1 container image: ghcr.io/jmberesford/retrom-service. Across them, 646 findings — 2 critical, 4 high — 2 on CISA KEV. The highest contribution is DEBIAN-CVE-2025-27363 in freetype 2.12.1+dfsg-5+deb12u3, fixed in 2.12.1+dfsg-5+deb12u4. Chart.yaml declares kubeVersion >=1.25.0-0; rendered for Kubernetes 1.25.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | retrom-v0.7.14 | 24101539 | 7,084 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GO-2024-3107 | stdlib | 1.22.7 |
| Low | DEBIAN-CVE-2026-5704 | tar | no fix listed |
| Low | GHSA-2v37-7h3g-55p8 | nanoid | 3.3.18 |
| Low | DEBIAN-CVE-2026-3184 | util-linux | no fix listed |
| Low | GHSA-2pr8-phx7-x9h3 | protobufjs | 7.5.6 |
| Low | GHSA-58qx-3vcg-4xpx | ws | 8.20.1 |
| Low | DEBIAN-CVE-2026-7010 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-19487 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-22801 | libpng1.6 | 1.6.39-2+deb12u2 |
| Low | DEBIAN-CVE-2023-52426 | expat | no fix listed |
| Low | DEBIAN-CVE-2026-52492 | tiff | no fix listed |
| Low | GHSA-9m57-25v3-79x9 | golang.org/ | 0.52.0 |
| Low | GHSA-pwhc-rpq9-4c8w | github.com/ | 1.7.29 |
| Low | GHSA-3v7f-55p6-f55p | picomatch | 2.3.2 |
| Low | GHSA-mh29-5h37-fv8m | js-yaml | 4.1.1 |
| Low | DEBIAN-CVE-2026-89158 | pcre2 | 10.42-1+deb12u1 |
| Low | GHSA-x86f-5xw2-fm2r | github.com/ | no fix listed |
| Low | DEBIAN-CVE-2025-27587 | openssl | no fix listed |
| Low | GHSA-f38q-mgvj-vph7 | protobufjs | 7.6.3 |
| Low | GHSA-vvgj-x9jq-8cj9 | github.com/ | 0.59.1 |
| Low | DEBIAN-CVE-2013-4392 | systemd | no fix listed |
| Low | GHSA-h67p-54hq-rp68 | js-yaml | 4.2.0 |
| Low | GO-2024-3333 | golang.org/ | 0.33.0 |
| Low | GHSA-9h8m-3fm2-qjrq | go.opentelemetry.io/ | 1.40.0 |
| Low | DEBIAN-CVE-2026-78408 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-41989 | libgcrypt20 | 1.10.1-3+deb12u1 |
| Low | DEBIAN-CVE-2026-49271 | libheif | no fix listed |
| Low | GHSA-3jxr-9vmj-r5cp | brace-expansion | 1.1.16 |
| Low | GHSA-g754-hx8w-x2g6 | github.com/ | 0.57.0 |
| Low | GHSA-mwcw-c2x4-8c55 | nanoid | 3.3.8 |
| Low | GO-2024-3105 | stdlib | 1.22.7 |
| Low | DEBIAN-CVE-2023-3164 | tiff | no fix listed |
| Low | GHSA-m6hq-p25p-ffr2 | github.com/ | 1.7.29 |
| Low | GO-2026-4981 | stdlib | 1.25.10 |
| Low | DEBIAN-CVE-2023-31439 | systemd | no fix listed |
| Low | GO-2025-3563 | stdlib | 1.23.8 |
| Low | GHSA-vmf3-w455-68vh | tar | 7.5.16 |
| Low | GO-2026-4977 | stdlib | 1.25.10 |
| Low | GO-2024-2610 | stdlib | 1.21.8 |
| Low | DEBIAN-CVE-2026-76957 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2023-31437 | systemd | no fix listed |
| Low | DEBIAN-CVE-2025-68973 | gnupg2 | 2.2.40-1.1+deb12u2 |
| Low | GO-2026-4986 | stdlib | 1.25.10 |
| Low | GO-2026-4918 | stdlib | 1.25.10 |
| Low | GO-2026-4918 | golang.org/ | 0.53.0 |
| Low | GO-2026-4337 | stdlib | 1.24.13 |
| Low | DEBIAN-CVE-2026-4438 | glibc | 2.36-9+deb12u14 |
| Low | DEBIAN-CVE-2023-31438 | systemd | no fix listed |
| Low | DEBIAN-CVE-2026-1757 | libxml2 | 2.9.14+dfsg-1.3~deb12u6 |
| Low | GO-2026-4601 | stdlib | 1.25.8 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 2026.2.5latest | 7 days ago | retrom-v0.7.14 | 24101539 | 7,084 |
| 2026.2.3 | 7 months ago | 0.7.14 | — | — |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.