rybbit 1.3.2 Helm chart

Name: rybbit Helm chart 1.3.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

rybbit-helm

Scored 20 Sept 2026

A Helm chart for Rybbit self-hosted analytics

Version 1.3.2deploys tag 9.1.1 0Artifact Hub

rybbit 1.3.2 deploys 7 container images: valkey/valkey, library/busybox, library/postgres, ghcr.io/rybbit-io/rybbit-backend and 2 more. Across them, 633 findings — 0 critical, 1 high. The highest contribution is GHSA-4v7x-pqxf-cx7m in golang.org/x/net v0.19.0, fixed in 0.23.0. Chart.yaml declares kubeVersion >=1.19.0-0; rendered for Kubernetes 1.19.0.

Radar Score

6,2250169563

633 findings over 7 of 7 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
valkey/valkey×2	9.1.1	00881	861
valkey/valkey	9.1.1-alpine	0004	34
library/busybox	1.35	0000	0
library/postgres	15-alpine	00046	311
ghcr.io/rybbit-io/rybbit-backend	latest	0014163	1,721
ghcr.io/rybbit-io/rybbit-client	latest	00923	417
alpine/k8s	1.32.12	0138246	2,881

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

443 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-28wg-ghj8-5hjv	nanoid@3.3.11	3.3.16
Low	ALPINE-CVE-2026-56404	expat@2.7.4-r0	2.8.2-r0
Low	ALPINE-CVE-2026-3783	curl@8.18.0-r0	8.19.0-r0
Low	ALPINE-CVE-2026-4873	curl@8.18.0-r0	8.20.0-r0
Low	ALPINE-CVE-2026-56410	expat@2.7.4-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56411	expat@2.7.4-r0	2.8.2-r0
Low	GO-2024-2609	stdlib@go1.20.7	1.21.8
Low	ALPINE-CVE-2026-34743	xz@5.8.2-r0	5.8.3-r0
Low	GO-2024-3107	stdlib@go1.20.7	1.22.7
Low	DEBIAN-CVE-2026-5704	tar@1.35+dfsg-3.1	no fix listed
Low	GHSA-9h5v-pfqq-x599	ua-parser-js@2.0.3	2.0.10
Low	GHSA-2v37-7h3g-55p8	nanoid@3.3.11	3.3.18
Low	DEBIAN-CVE-2026-3184	util-linux@2.41.5-0+deb13u1	no fix listed
Low	GHSA-cp6g-7hqx-qxhp	go.mongodb.org/mongo-driver@v1.17.6	1.17.7
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.63.1	1.65.0
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/service/s3@v1.96.0	1.97.3
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.4	1.7.8
Low	GHSA-58qx-3vcg-4xpx	ws@8.18.3	8.20.1
Low	DEBIAN-CVE-2026-7010	perl@5.40.1-6	5.40.1-6+deb13u1
Low	DEBIAN-CVE-2026-19487	perl@5.40.1-6	no fix listed
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.46.0	0.52.0
Low	GHSA-pwhc-rpq9-4c8w	github.com/containerd/containerd@v1.7.28	1.7.29
Low	GHSA-3v7f-55p6-f55p	picomatch@4.0.3	4.0.4
Low	DEBIAN-CVE-2026-89158	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	GHSA-7jxh-36q5-gcqv	github.com/containerd/containerd@v1.7.28	1.7.35
Low	DEBIAN-CVE-2011-3374	apt@3.0.3	no fix listed
Low	GO-2023-2041	stdlib@go1.20.7	1.20.8
Low	ALPINE-CVE-2026-42769	openssl@3.5.5-r0	3.5.7-r0
Low	GO-2023-2043	stdlib@go1.20.7	1.20.8
Low	DEBIAN-CVE-2013-4392	systemd@257.13-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-89160	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	GO-2023-2186	stdlib@go1.20.7	1.20.11
Low	GHSA-g6gw-c38x-mqfc	hono@4.12.30	4.13.5
Low	GHSA-h67p-54hq-rp68	js-yaml@4.1.1	4.2.0
Low	DEBIAN-CVE-2026-89161	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	GO-2024-3333	golang.org/x/net@v0.19.0	0.33.0
Low	GHSA-9h8m-3fm2-qjrq	go.opentelemetry.io/otel/sdk@v1.39.0	1.40.0
Low	ALPINE-CVE-2026-78408	util-linux@2.42.1-r0	2.42.3-r1
Low	DEBIAN-CVE-2026-78408	util-linux@2.41.5-0+deb13u1	no fix listed
Low	GHSA-6v7q-wjvx-w8wg	basic-ftp@5.1.0	5.2.2
Low	GHSA-8pvw-jcv7-9cmj	@fastify/static@9.1.3	10.1.2
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@5.0.6	5.0.7
Low	GHSA-gh4j-gqv2-49f6	fast-xml-parser@5.2.5	5.7.0
Low	GO-2024-3105	stdlib@go1.20.7	1.22.7
Low	ALPINE-CVE-2026-49839	jq@1.8.1-r0	1.8.2-r0
Low	GHSA-m6hq-p25p-ffr2	github.com/containerd/containerd@v1.7.28	1.7.29
Low	GO-2026-4981	stdlib@go1.24.6	1.25.10
Low	DEBIAN-CVE-2023-31439	systemd@257.13-1~deb13u1	no fix listed
Low	GO-2025-3563	stdlib@go1.20.7	1.23.8
Low	GO-2026-4977	stdlib@go1.24.6	1.25.10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.3.2latest	—	9.1.1	0169563	6,225
1.3.0	—	9.1.1	0169517	5,914

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/rybbit-helm/rybbit.svg)](https://charts.stackradar.io/charts/rybbit-helm/rybbit)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.