grocy 0.1.1 Helm chart

Name: grocy Helm chart 0.1.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

sarab97

Scored 14 Sept 2026

grocy is a web-based self-hosted groceries & household management solution for your home

Version 0.1.1 3 years agoapp version 4.0.1 0Artifact Hub

grocy 0.1.1 deploys 1 container image: linuxserver/grocy. Across them, 105 findings — 8 critical, 10 high — 4 on CISA KEV. The highest contribution is ALPINE-CVE-2024-38475 in apache2 2.4.57-r3, fixed in 2.4.60-r0.

Radar Score

2,4498103849

105 findings over 1 of 1 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
linuxserver/grocy	4.0.1	8103849	2,449

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

105 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	ALPINE-CVE-2024-38475KEV	apache2@2.4.57-r3	2.4.60-r0
Critical	ALPINE-CVE-2023-38545	curl@8.2.1-r0	8.4.0-r0
Critical	ALPINE-CVE-2023-4863KEV	libwebp@1.3.1-r0	1.3.1-r1
Critical	ALPINE-CVE-2023-44487KEV	nghttp2@1.55.1-r0	1.57.0-r0
Critical	ALPINE-CVE-2023-44487KEV	nginx@1.24.0-r6	1.24.0-r7
Critical	ALPINE-CVE-2024-38476	apache2@2.4.57-r3	2.4.60-r0
Critical	ALPINE-CVE-2024-27316	apache2@2.4.57-r3	2.4.59-r0
Critical	ALPINE-CVE-2025-6965	sqlite@3.41.2-r2	3.41.2-r4
High	ALPINE-CVE-2023-43622	apache2@2.4.57-r3	2.4.58-r0
High	ALPINE-CVE-2024-38472	apache2@2.4.57-r3	2.4.60-r0
High	ALPINE-CVE-2024-6119	openssl@3.1.2-r0	3.1.7-r0
High	ALPINE-CVE-2023-38039	curl@8.2.1-r0	8.3.0-r0
High	ALPINE-CVE-2024-2398	curl@8.2.1-r0	8.7.1-r0
High	ALPINE-CVE-2024-32002	git@2.40.1-r0	2.40.3-r0
High	ALPINE-CVE-2024-39573	apache2@2.4.57-r3	2.4.60-r0
High	ALPINE-CVE-2024-38473	apache2@2.4.57-r3	2.4.60-r0
High	GHSA-r5fr-rjxr-66jc	lodash@4.17.21	4.18.0
High	ALPINE-CVE-2024-2511	openssl@3.1.2-r0	3.1.4-r6
Medium	ALPINE-CVE-2024-7264	curl@8.2.1-r0	8.9.1-r0
Medium	ALPINE-CVE-2024-5535	openssl@3.1.2-r0	3.1.6-r0
Medium	ALPINE-CVE-2024-38474	apache2@2.4.57-r3	2.4.60-r0
Medium	ALPINE-CVE-2024-6197	curl@8.2.1-r0	8.9.0-r0
Medium	ALPINE-CVE-2023-38709	apache2@2.4.57-r3	2.4.59-r0
Medium	GHSA-fjxv-7rqg-78g4	form-data@2.3.3	2.5.4
Medium	ALPINE-CVE-2023-5363	openssl@3.1.2-r0	3.1.4-r0
Medium	ALPINE-CVE-2024-38477	apache2@2.4.57-r3	2.4.60-r0
Medium	ALPINE-CVE-2024-45492	expat@2.5.0-r1	2.6.3-r0
Medium	ALPINE-CVE-2023-31122	apache2@2.4.57-r3	2.4.58-r0
Medium	ALPINE-CVE-2024-4741	openssl@3.1.2-r0	3.1.6-r0
Medium	ALPINE-CVE-2024-45491	expat@2.5.0-r1	2.6.3-r0
Medium	ALPINE-CVE-2024-28757	expat@2.5.0-r1	2.6.2-r0
Medium	ALPINE-CVE-2023-52425	expat@2.5.0-r1	2.6.0-r0
Medium	ALPINE-CVE-2024-24795	apache2@2.4.57-r3	2.4.59-r0
Medium	ALPINE-CVE-2024-45490	expat@2.5.0-r1	2.6.3-r0
Medium	GHSA-72xf-g2v4-qvf3	tough-cookie@2.5.0	4.1.3
Medium	ALPINE-CVE-2023-5678	openssl@3.1.2-r0	3.1.4-r1
Medium	ALPINE-CVE-2024-40898	apache2@2.4.57-r3	2.4.62-r0
Medium	ALPINE-CVE-2024-32004	git@2.40.1-r0	2.40.3-r0
Medium	ALPINE-CVE-2023-6129	openssl@3.1.2-r0	3.1.4-r3
Medium	ALPINE-CVE-2023-45802	apache2@2.4.57-r3	2.4.58-r0
Medium	ALPINE-CVE-2024-40725	apache2@2.4.57-r3	2.4.62-r0
Medium	ALPINE-CVE-2024-8176	expat@2.5.0-r1	2.7.0-r0
Medium	ALPINE-CVE-2024-9681	curl@8.2.1-r0	8.11.0-r0
Medium	ALPINE-CVE-2024-0727	openssl@3.1.2-r0	3.1.4-r5
Medium	ALPINE-CVE-2025-0725	curl@8.2.1-r0	8.12.0-r0
Medium	ALPINE-CVE-2024-32465	git@2.40.1-r0	2.40.3-r0
Medium	ALPINE-CVE-2023-7104	sqlite@3.41.2-r2	3.41.2-r3
Medium	ALPINE-CVE-2023-6237	openssl@3.1.2-r0	3.1.4-r4
Medium	ALPINE-CVE-2024-9143	openssl@3.1.2-r0	3.1.7-r1
Medium	ALPINE-CVE-2023-46218	curl@8.2.1-r0	8.5.0-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.1latest	3 years ago	4.0.1	8103849	2,449

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/sarab97/grocy.svg)](https://charts.stackradar.io/charts/sarab97/grocy)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.