rybbit 1.3.2 Helm chart
rybbit-helmScored 20 Sept 2026
A Helm chart for Rybbit self-hosted analytics
Version 1.3.2deploys tag 9.1.1 0Artifact Hub
rybbit 1.3.2 deploys 7 container images: valkey/valkey, library/busybox, library/postgres, ghcr.io/rybbit-io/rybbit-backend and 2 more. Across them, 633 findings — 0 critical, 1 high. The highest contribution is GHSA-4v7x-pqxf-cx7m in golang.org/x/net v0.19.0, fixed in 0.23.0. Chart.yaml declares kubeVersion >=1.19.0-0; rendered for Kubernetes 1.19.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| valkey/ | 9.1.1 | 00881 | 861 |
| valkey/ | 9.1.1-alpine | 0004 | 34 |
| library/ | 1.35 | 0000 | 0 |
| library/ | 15-alpine | 00046 | 311 |
| ghcr.io/ | latest | 0014163 | 1,721 |
| ghcr.io/ | latest | 00923 | 417 |
| alpine/ | 1.32.12 | 0138246 | 2,881 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-jqff-g426-hqxp | fast-uri | 3.1.6 |
| Low | ALPINE-CVE-2026-34181 | openssl | 3.5.7-r0 |
| Low | GHSA-fw7p-63qq-7hpr | filippo.io/ | 1.1.1 |
| Low | ALPINE-CVE-2026-8328 | python3 | 3.14.7-r0 |
| Low | GHSA-7p8r-x3mc-p8w7 | fast-uri | 3.1.5 |
| Low | GHSA-f65p-4m7j-42xc | fast-uri | 3.1.6 |
| Low | GHSA-45gg-vh54-h5m9 | golang.org/ | 0.52.0 |
| Low | GHSA-jp2q-39xq-3w4g | fast-xml-parser | 5.5.7 |
| Low | DEBIAN-CVE-2026-5435 | glibc | no fix listed |
| Low | GHSA-h35f-9h28-mq5c | setuptools | 83.0.0 |
| Low | GHSA-hqvf-45jj-mccq | awscli | 1.45.28 |
| Low | DEBIAN-CVE-2026-54369 | acl | no fix listed |
| Low | GO-2024-2963 | stdlib | 1.21.12 |
| Low | GHSA-gqvv-2mrq-wpjv | hono | 4.13.5 |
| Low | GHSA-5cv4-jp36-h3mw | golang.org/ | 0.55.0 |
| Low | GHSA-6gmq-8vp8-gcm6 | @xmldom/ | 0.8.15 |
| Low | DEBIAN-CVE-2026-7017 | perl | 5.40.1-6+deb13u1 |
| Low | ALPINE-CVE-2026-40200 | musl | 1.2.6-r2 |
| Low | GHSA-4633-3j49-mh5q | next | 16.2.11 |
| Low | GHSA-jpcc-p29g-p8mq | github.com/ | 1.7.33 |
| Low | DEBIAN-CVE-2026-89157 | pcre2 | 10.46-1~deb13u2 |
| Low | ALPINE-CVE-2025-15366 | python3 | 3.14.7-r0 |
| Low | DEBIAN-CVE-2026-54371 | attr | no fix listed |
| Low | GHSA-2xp9-vwfh-vxw4 | next | 16.3.3 |
| Low | DEBIAN-CVE-2026-77117 | glibc | no fix listed |
| Low | DEBIAN-CVE-2026-80489 | glibc | no fix listed |
| Low | GHSA-j5w8-q4qc-rx2x | golang.org/ | 0.45.0 |
| Low | PYSEC-2026-3721 | pip | 26.2 |
| Low | GHSA-vvgc-356p-c3xw | golang.org/ | 0.38.0 |
| Low | GHSA-qc2q-p7wx-3px3 | google.golang.org/ | 1.83.1 |
| Low | GHSA-fqw6-gf59-qr4w | github.com/ | 1.7.32 |
| Low | GO-2023-2382 | stdlib | 1.20.12 |
| Low | ALPINE-CVE-2026-6429 | curl | 8.20.0-r0 |
| Low | GHSA-82fw-gwwq-j7x9 | vitest | 4.1.11 |
| Low | GHSA-82fw-gwwq-j7x9 | @vitest/ | 4.1.11 |
| Low | GHSA-qpw4-5x99-6vjp | golang.org/ | 0.52.0 |
| Low | GHSA-f6x5-jh6r-wrfv | golang.org/ | 0.45.0 |
| Low | GHSA-78mq-xcr3-xm33 | golang.org/ | 0.52.0 |
| Low | GO-2024-2599 | stdlib | 1.21.8 |
| Low | GHSA-8j4g-w8fx-2239 | hono | 4.12.34 |
| Low | GHSA-68g3-v927-f742 | next | 16.2.11 |
| Low | GO-2024-3106 | stdlib | 1.22.7 |
| Low | GHSA-v6wh-96g9-6wx3 | vite | 7.3.5 |
| Low | ALPINE-CVE-2026-1965 | curl | 8.19.0-r0 |
| Low | DEBIAN-CVE-2022-0563 | util-linux | no fix listed |
| Low | GHSA-crvj-82cr-hjcx | hono | 4.13.5 |
| Low | GHSA-rgj7-g3m4-5g8c | sharp | 0.35.4 |
| Low | ALPINE-CVE-2026-7168 | curl | 8.20.0-r0 |
| Low | GO-2024-2600 | stdlib | 1.21.8 |
| Low | GHSA-hrxh-6v49-42gf | google.golang.org/ | 1.82.1 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 1.3.2latest | — | 9.1.1 | 0169563 | 6,225 |
| 1.3.0 | — | 9.1.1 | 0169517 | 5,914 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.