immich 2.0.7 Helm chart
secustorVerified publisherScored 30 Sept 2026
A Immich Helm chart targeted at advanced users
Version 2.0.7 yesterdayapp version v3.2.4 1Artifact Hub
immich 2.0.7 deploys 1 container image: ghcr.io/immich-app/immich-server. Across them, 301 findings — 0 critical, 0 high. The highest contribution is DEBIAN-CVE-2019-1010022 in glibc 2.41-12+deb13u3, with no fix listed.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | v3.2.4 | 0046254 | 3,160 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2026-13757 | p11-kit | no fix listed |
| Low | DEBIAN-CVE-2026-15534 | perl | no fix listed |
| Low | GHSA-q2hr-2g5m-vwhr | brace-expansion | 5.0.12 |
| Low | DEBIAN-CVE-2023-39327 | openjpeg2 | no fix listed |
| Low | DEBIAN-CVE-2025-48074 | openexr | no fix listed |
| Low | DEBIAN-CVE-2026-56392 | coreutils | no fix listed |
| Low | DEBIAN-CVE-2026-72897 | openssl | no fix listed |
| Low | DEBIAN-CVE-2026-84784 | openssl | no fix listed |
| Low | GHSA-2gc4-cqfq-p2gv | engine.io | 6.6.10 |
| Low | GHSA-5p4m-2wfm-xmqj | js-yaml | 4.3.1 |
| Low | DEBIAN-CVE-2026-86137 | libxml2 | no fix listed |
| Low | DEBIAN-CVE-2026-54370 | acl | no fix listed |
| Low | DEBIAN-CVE-2023-39328 | openjpeg2 | no fix listed |
| Low | DEBIAN-CVE-2026-19542 | glibc | no fix listed |
| Low | DEBIAN-CVE-2026-56391 | coreutils | no fix listed |
| Low | DEBIAN-CVE-2025-1371 | elfutils | no fix listed |
| Low | DEBIAN-CVE-2026-18090 | gdk-pixbuf | no fix listed |
| Low | DEBIAN-CVE-2026-55373 | openexr | no fix listed |
| Low | DEBIAN-CVE-2017-14159 | openldap | no fix listed |
| Low | DEBIAN-CVE-2026-18938 | p11-kit | no fix listed |
| Low | DEBIAN-CVE-2026-50813 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2017-18018 | coreutils | no fix listed |
| Low | DEBIAN-CVE-2026-16768 | gdk-pixbuf | no fix listed |
| Low | DEBIAN-CVE-2026-11850 | krb5 | no fix listed |
| Low | DEBIAN-CVE-2025-66382 | expat | no fix listed |
| Low | DEBIAN-CVE-2026-55059 | openexr | no fix listed |
| Low | DEBIAN-CVE-2026-88384 | openexr | no fix listed |
| Low | DEBIAN-CVE-2025-1376 | elfutils | no fix listed |
| Low | DEBIAN-CVE-2005-2541 | tar | no fix listed |
| Low | DEBIAN-CVE-2025-10966 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-27171 | zlib | no fix listed |
| Low | DEBIAN-CVE-2026-86805 | glibc | no fix listed |
| Low | DEBIAN-CVE-2025-14017 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-59183 | openexr | no fix listed |
| Low | DEBIAN-CVE-2026-59983 | openexr | no fix listed |
| Low | DEBIAN-CVE-2026-59984 | openexr | no fix listed |
| Low | DEBIAN-CVE-2026-59985 | openexr | no fix listed |
| Low | DEBIAN-CVE-2026-61555 | openexr | no fix listed |
| Low | GHSA-hrr3-gc8f-f4qj | fast-uri | 3.1.8 |
| Low | DEBIAN-CVE-2026-76781 | libxml2 | no fix listed |
| Low | GHSA-x5fp-wj9c-mxmx | qs | 6.16.0 |
| Low | DEBIAN-CVE-2026-50812 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2026-18495 | tiff | no fix listed |
| Low | DEBIAN-CVE-2026-15059 | systemd | no fix listed |
| Low | DEBIAN-CVE-2025-5278 | coreutils | no fix listed |
| Low | GHSA-6vj9-mwq6-2f5v | nodemailer | 10.0.2 |
| Low | DEBIAN-CVE-2025-6141 | ncurses | no fix listed |
| Low | GHSA-v3r7-h72x-cjcm | undici | 6.28.0 |
| Low | DEBIAN-CVE-2026-86469 | glib2.0 | no fix listed |
| Low | DEBIAN-CVE-2010-4756 | glibc | no fix listed |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 2.0.7latest | yesterday | v3.2.4 | 0046254 | 3,160 |
| 2.0.6 | 13 days ago | v3.2.2 | 0057254 | 3,427 |
| 2.0.5 | 15 days ago | v3.2.1 | 0047243 | 3,081 |
| 2.0.4 | 19 days ago | v3.2.0 | 0047243 | 3,059 |
| 2.0.3 | 2 months ago | v3.1.0 | 0073380 | 4,816 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.