StackRadar

mastodon 3.1.2 Helm chart

rivals-spaceVerified publisher

Scored 14 Sept 2026

Rivals.space Mastodon helm chart

Version 3.1.2 3 years agoapp version 1.6.1 0Artifact Hub

mastodon 3.1.2 deploys 3 container images: ghcr.io/rivals-space/rivals-nginx, ghcr.io/rivals-space/rivals-mastodon and bitnami/redis. Across the 2 measured, 456 findings1 critical, 14 high 4 on CISA KEV. The highest contribution is GHSA-754f-8gm6-c4r2 in ruby-saml 1.13.0, fixed in 1.18.0.

Radar Score

6,02611490351

456 findings over 2 of 3 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
ghcr.io/rivals-space/rivals-nginx1.6.1061918929
ghcr.io/rivals-space/rivals-mastodon×81.6.118713335,097
bitnami/redis7.0.5-debian-11-r15unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

351 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowALPINE-CVE-2023-42366busybox@1.35.0-r291.35.0-r30
LowGHSA-977x-g7h5-7qgwelliptic@6.5.46.5.7
LowGHSA-28wg-ghj8-5hjvnanoid@3.3.43.3.16
LowGHSA-m6fv-jmcg-4jfgsend@0.18.00.19.0
LowGHSA-w9j2-pvgh-6h63axios@1.3.21.15.1
LowDLA-4145-1expat@2.2.10-2+deb11u52.2.10-2+deb11u7
LowALPINE-CVE-2023-42365busybox@1.35.0-r291.35.0-r31
LowGHSA-2v37-7h3g-55p8nanoid@3.3.43.3.18
LowGHSA-58qx-3vcg-4xpxws@8.12.08.20.1
LowGHSA-4vpr-x523-8j87svgo@1.3.22.8.4
LowDLA-4481-1libpng1.6@1.6.37-31.6.37-3+deb11u2
LowGHSA-fc9h-whq2-v747elliptic@6.5.46.6.0
LowGHSA-3v7f-55p6-f55ppicomatch@2.3.12.3.2
LowDSA-5408-1libwebp@0.6.1-2.10.6.1-2.1+deb11u1
LowGHSA-qw6h-vgh9-j6wxexpress@4.18.24.20.0
LowGHSA-mh29-5h37-fv8mjs-yaml@3.14.13.14.2
LowGHSA-7q8q-rj6j-mhjqaxios@1.3.21.18.0
LowDLA-3945-1libheif@1.11.0-11.11.0-1+deb11u2
LowGHSA-pxvg-2qj5-37jqnokogiri@1.14.11.14.3
LowGHSA-qcfx-2mfw-w4cgactivestorage@6.1.7.27.2.3.1
LowGHSA-h67p-54hq-rp68js-yaml@3.14.13.15.0
LowGHSA-xc9x-jj77-9p9jnokogiri@1.14.11.15.6
LowGHSA-x8cg-fq8g-mxfxrack@2.2.6.22.2.23
LowDLA-4490-1openssl@1.1.1n-0+deb11u41.1.1w-0+deb11u5
LowGHSA-jp94-3292-c3xvdevise@4.8.15.0.4
LowGHSA-3jxr-9vmj-r5cpbrace-expansion@2.0.12.1.2
LowGHSA-mwcw-c2x4-8c55nanoid@3.3.43.3.8
LowGHSA-5c6j-r48x-rmvqserialize-javascript@2.1.27.0.3
LowGHSA-7w2c-w47h-789wdoorkeeper@5.6.45.6.6
LowDLA-4412-1glib2.0@2.66.8-12.66.8-1+deb11u7
LowGHSA-cj75-f6xr-r4g7rails-html-sanitizer@1.5.01.7.1
LowDSA-5500-1flac@1.3.3-2+deb11u11.3.3-2+deb11u2
LowDSA-5722-1libvpx@1.9.0-11.9.0-1+deb11u3
LowDLA-4449-1zvbi@0.2.35-180.2.35-18+deb11u1
LowDLA-3934-1libheif@1.11.0-11.11.0-1+deb11u1
LowGHSA-vmf3-w455-68vhtar@6.1.117.5.16
LowDLA-4315-1tiff@4.2.0-1+deb11u34.2.0-1+deb11u7
LowDLA-4259-1systemd@247.3-7+deb11u1247.3-7+deb11u7
LowGHSA-mvxr-6m87-mv2qmail@2.8.0.12.9.1
LowGHSA-5c9x-8gcm-mpgxaxios@1.3.21.15.1
LowGHSA-89vf-4333-qx8vactivesupport@6.1.7.27.2.3.1
LowGHSA-vf2m-468p-8v99axios@1.3.21.15.1
LowDSA-5682-1glib2.0@2.66.8-12.66.8-1+deb11u2
LowDLA-4339-1imagemagick@8:6.9.11.60+dfsg-1.38:6.9.11.60+dfsg-1.3+deb11u7
LowGHSA-mhwm-jh88-3gjfcgi@0.2.10.3.5.1
LowDLA-4273-1postgresql-13@13.9-0+deb11u113.22-0+deb11u1
LowGHSA-qx2v-qp2m-jg93postcss@7.0.328.5.10
LowDLA-4159-1postgresql-13@13.9-0+deb11u113.21-0+deb11u1
LowDLA-3875-1gnutls28@3.7.1-5+deb11u23.7.1-5+deb11u6
LowGHSA-cr5q-6q9f-rq6qactivesupport@6.1.7.26.1.7.5

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
3.1.2latest3 years ago1.6.1114903516,026

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/rivals-space/mastodon.svg)](https://charts.stackradar.io/charts/rivals-space/mastodon)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.