rybbit 1.3.2 Helm chart

Name: rybbit Helm chart 1.3.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

rybbit-helm

Scored 20 Sept 2026

A Helm chart for Rybbit self-hosted analytics

Version 1.3.2deploys tag 9.1.1 0Artifact Hub

rybbit 1.3.2 deploys 7 container images: valkey/valkey, library/busybox, library/postgres, ghcr.io/rybbit-io/rybbit-backend and 2 more. Across them, 633 findings — 0 critical, 1 high. The highest contribution is GHSA-4v7x-pqxf-cx7m in golang.org/x/net v0.19.0, fixed in 0.23.0. Chart.yaml declares kubeVersion >=1.19.0-0; rendered for Kubernetes 1.19.0.

Radar Score

6,2250169563

633 findings over 7 of 7 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
valkey/valkey×2	9.1.1	00881	861
valkey/valkey	9.1.1-alpine	0004	34
library/busybox	1.35	0000	0
library/postgres	15-alpine	00046	311
ghcr.io/rybbit-io/rybbit-backend	latest	0014163	1,721
ghcr.io/rybbit-io/rybbit-client	latest	00923	417
alpine/k8s	1.32.12	0138246	2,881

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

443 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-c7q8-3ch8-vqpv	@xmldom/xmldom@0.8.13	0.8.15
Low	GHSA-w2rr-34g9-rvrj	@xmldom/xmldom@0.8.13	0.8.14
Low	ALPINE-CVE-2026-31789	openssl@3.5.5-r0	3.5.6-r0
Low	GHSA-4w7w-66w2-5vf9	vite@7.2.7	7.3.2
Low	GHSA-8344-3jmq-59r6	@xmldom/xmldom@0.8.13	0.8.15
Low	GHSA-hmw2-7cc7-3qxx	form-data@4.0.5	4.0.6
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-65xw-vw82-r86x	github.com/antchfx/xpath@v1.3.5	1.3.6
Low	ALPINE-CVE-2026-42766	openssl@3.5.5-r0	3.5.7-r0
Low	GHSA-v39h-62p7-jpjc	fast-uri@3.1.0	3.1.2
Low	DEBIAN-CVE-2025-69720	ncurses@6.5+20250216-2	no fix listed
Low	GHSA-7w5x-hrqm-74c2	smol-toml@1.5.2	1.7.1
Low	ALPINE-CVE-2026-9546	curl@8.18.0-r0	8.21.0-r0
Low	GHSA-jmr9-qjv8-65gv	extract-zip@2.0.1	no fix listed
Low	DEBIAN-CVE-2026-86145	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	GHSA-4c8g-83qw-93j6	fast-uri@3.1.0	3.1.3
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-3644	python3@3.12.12-r0	3.14.5-r0
Low	ALPINE-CVE-2026-22184	zlib@1.3.1-r2	1.3.2-r0
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.46.0	0.52.0
Low	GHSA-x4fp-j954-r2f4	@xmldom/xmldom@0.8.13	0.8.15
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.46.0	0.52.0
Low	ALPINE-CVE-2026-7774	python3@3.12.12-r0	3.14.7-r0
Low	GHSA-rpmf-866q-6p89	basic-ftp@5.1.0	5.3.1
Low	ALPINE-CVE-2026-45186	expat@2.7.4-r0	2.8.1-r0
Low	ALPINE-CVE-2026-33630	c-ares@1.34.6-r0	1.34.8-r0
Low	DEBIAN-CVE-2026-9538	perl@5.40.1-6	no fix listed
Low	ALPINE-CVE-2026-82208	curl@8.18.0-r0	8.22.0-r0
Low	GO-2023-2185	stdlib@go1.20.7	1.20.11
Low	DEBIAN-CVE-2026-54411	pam@1.7.0-5	no fix listed
Low	DEBIAN-CVE-2026-42497	perl@5.40.1-6	5.40.1-6+deb13u1
Low	DEBIAN-CVE-2026-41992	gzip@1.13-1	1.13-1+deb13u1
Low	DEBIAN-CVE-2026-19499	glibc@2.41-12+deb13u3	no fix listed
Low	GHSA-c2c7-rcm5-vvqj	picomatch@4.0.3	4.0.4
Low	GHSA-q8wf-6r8g-63ch	next@16.2.6	16.2.11
Low	ALPINE-CVE-2026-12064	curl@8.18.0-r0	8.21.0-r0
Low	GHSA-737v-mqg7-c878	defu@6.1.4	6.1.5
Low	ALPINE-CVE-2026-8932	curl@8.18.0-r0	8.21.0-r0
Low	GHSA-8xwf-rjm4-xvhv	oras.land/oras-go/v2@v2.6.0	2.6.1
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-2g4f-4pwh-qvx6	ajv@8.17.1	8.18.0
Low	ALPINE-CVE-2026-8286	curl@8.18.0-r0	8.21.0-r0
Low	GHSA-wf93-45jw-7689	pip@26.0.1	26.1.2
Low	GHSA-2883-xcg3-v3hh	js-yaml@4.1.1	4.3.2
Low	GHSA-p436-gjf2-799p	github.com/docker/cli@v28.2.2+incompatible	29.2.0
Low	GHSA-jxpm-75mh-9fp7	oras.land/oras-go/v2@v2.6.0	2.6.1
Low	GHSA-r292-9mhp-454m	tar@7.5.19	7.5.21
Low	GHSA-r28c-9q8g-f849	postcss@8.5.6	8.5.18
Low	DEBIAN-CVE-2026-48959	perl@5.40.1-6	5.40.1-6+deb13u1
Low	GHSA-fj3w-jwp8-x2g3	fast-xml-parser@5.2.5	5.3.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.3.2latest	—	9.1.1	0169563	6,225
1.3.0	—	9.1.1	0169517	5,914

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/rybbit-helm/rybbit.svg)](https://charts.stackradar.io/charts/rybbit-helm/rybbit)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.