stash-box Helm chart
swuuper-githubVerified publisherScored 14 Sept 2026
Stash App's own OpenSource video indexing and Perceptual Hashing MetaData API
Latest 0.1.1 1 year agodeploys tag latest 0Artifact Hub
stash-box 0.1.1 deploys 2 container images: mikefarah/yq and stashapp/stash-box. Across them, 861 findings — 1 critical, 1 high. The highest contribution is UBUNTU-CVE-2025-6965 in sqlite3 3.45.1-1ubuntu2.3, fixed in 3.45.1-1ubuntu2.4.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
2 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| mikefarah/ | 4 | 0046 | 149 |
| stashapp/ | latest | 11105743 | 8,044 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
861 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GO-2026-4976 | stdlib | 1.25.10 |
| Low | UBUNTU-CVE-2025-53019 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm1 |
| Low | UBUNTU-CVE-2026-55510 | imagemagick | no fix listed |
| Low | UBUNTU-CVE-2026-55597 | imagemagick | no fix listed |
| Low | UBUNTU-CVE-2025-6052 | glib2.0 | 2.80.0-6ubuntu3.6 |
| Low | GO-2026-5031 | golang.org/ | 0.41.0 |
| Low | UBUNTU-CVE-2025-5278 | coreutils | 9.4-3ubuntu6.3 |
| Low | GO-2026-5856 | stdlib | 1.25.12 |
| Low | UBUNTU-CVE-2026-22795 | openssl | 3.0.13-0ubuntu3.7 |
| Low | UBUNTU-CVE-2026-33328 | vips | no fix listed |
| Low | UBUNTU-CVE-2026-35590 | vips | no fix listed |
| Low | UBUNTU-CVE-2026-47714 | libheif | 1.17.6-1ubuntu4.6 |
| Low | GO-2025-4007 | stdlib | 1.24.9 |
| Low | GO-2026-6355 | golang.org/ | 0.56.0 |
| Low | UBUNTU-CVE-2026-62289 | libheif | 1.17.6-1ubuntu4.7 |
| Low | UBUNTU-CVE-2026-25576 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm9 |
| Low | UBUNTU-CVE-2025-28162 | libpng1.6 | 1.6.43-5ubuntu0.4 |
| Low | UBUNTU-CVE-2025-28164 | libpng1.6 | 1.6.43-5ubuntu0.4 |
| Low | UBUNTU-CVE-2026-33902 | imagemagick | no fix listed |
| Low | UBUNTU-CVE-2026-6491 | vips | no fix listed |
| Low | GO-2026-4980 | stdlib | 1.25.10 |
| Low | UBUNTU-CVE-2026-42770 | openssl | 3.0.13-0ubuntu3.11 |
| Low | GO-2026-5039 | stdlib | 1.25.11 |
| Low | UBUNTU-CVE-2025-3360 | glib2.0 | 2.80.0-6ubuntu3.6 |
| Low | UBUNTU-CVE-2026-55059 | openexr | no fix listed |
| Low | UBUNTU-CVE-2026-41254 | lcms2 | 2.14-2ubuntu0.1 |
| Low | UBUNTU-CVE-2025-8114 | libssh | 0.10.6-2ubuntu0.2 |
| Low | UBUNTU-CVE-2026-1484 | glib2.0 | 2.80.0-6ubuntu3.8 |
| Low | GO-2025-4013 | stdlib | 1.24.8 |
| Low | UBUNTU-CVE-2026-30883 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8 |
| Low | GO-2025-3849 | stdlib | 1.23.12 |
| Low | GO-2026-4946 | stdlib | 1.25.9 |
| Low | UBUNTU-CVE-2026-45359 | imagemagick | no fix listed |
| Low | UBUNTU-CVE-2026-86421 | imagemagick | no fix listed |
| Low | UBUNTU-CVE-2026-70654 | vips | no fix listed |
| Low | UBUNTU-CVE-2026-54370 | acl | no fix listed |
| Low | UBUNTU-CVE-2025-5918 | libarchive | 3.7.2-2ubuntu0.6 |
| Low | GO-2026-5066 | golang.org/ | 0.43.0 |
| Low | UBUNTU-CVE-2026-56412 | expat | no fix listed |
| Low | GO-2026-4961 | golang.org/ | 0.42.0 |
| Low | UBUNTU-CVE-2026-42050 | imagemagick | no fix listed |
| Low | UBUNTU-CVE-2026-56131 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-50219 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56367 | imagemagick | no fix listed |
| Low | UBUNTU-CVE-2025-15649 | perl | 5.38.2-3.2ubuntu0.4 |
| Low | GO-2026-4603 | stdlib | 1.25.8 |
| Low | UBUNTU-CVE-2026-23865 | freetype | 2.13.2+dfsg-1ubuntu0.1 |
| Low | UBUNTU-CVE-2026-0988 | glib2.0 | 2.80.0-6ubuntu3.7 |
| Low | GO-2026-6303 | golang.org/ | 0.55.0 |
| Low | UBUNTU-CVE-2026-17573 | hdf5 | no fix listed |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/swuuper-github/stash-box)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.