StackRadar

espocrm 2.0.6 Helm chart

twenty20-helm-chartsVerified publisher

Scored 2 Oct 2026

A Helm chart for deploying EspoCRM on Kubernetes

Version 2.0.6 yesterdayapp version 10.0.9 1Artifact Hub

espocrm 2.0.6 deploys 2 container images: espocrm/espocrm and library/nginx. Across them, 14 findings — 0 critical, 0 high. The highest contribution is GHSA-2mrg-gjxq-2gvr in phpoffice/phpspreadsheet 5.7.0, fixed in 5.8.1.

Radar Score

13300014

14 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
espocrm/espocrm×410.0.9-fpm-alpine00013123
library/nginx1.31.6-alpine-slim000110

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

14 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGHSA-2mrg-gjxq-2gvrphpoffice/phpspreadsheet@5.7.05.8.1
LowGHSA-xh5m-36r6-47m3phpoffice/phpspreadsheet@5.7.05.8.1
LowGHSA-6hq5-7373-42rgphpoffice/phpspreadsheet@5.7.05.8.1
LowGHSA-v5mv-p594-2x33guzzlehttp/guzzle@7.12.17.15.2
LowALPINE-CVE-2026-103111pcre2@10.48-r010.49-r0
LowGHSA-q97c-8qh3-fpc6phpseclib/phpseclib@3.0.553.0.57
LowGHSA-h95v-h523-3mw8guzzlehttp/guzzle@7.12.17.15.1
LowGHSA-wm3w-8rrp-j577guzzlehttp/guzzle@7.12.17.15.1
LowGHSA-f283-ghqc-fg79guzzlehttp/guzzle@7.12.17.15.1
LowGHSA-94pj-82f3-465wguzzlehttp/guzzle@7.12.17.14.2
LowGHSA-f7vp-7xgx-4w4rguzzlehttp/guzzle@7.12.17.15.2
LowGHSA-c2w2-prh8-qm98guzzlehttp/psr7@2.12.12.12.3
LowGHSA-g446-98w2-8p5wguzzlehttp/guzzle@7.12.17.12.3
LowGHSA-cxf4-7mrp-vvprleague/flysystem@3.30.23.35.3

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
2.0.6latestyesterday10.0.900014133
2.0.522 days ago10.0.800933533
2.0.41 month ago10.0.6001444686

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/twenty20-helm-charts/espocrm.svg)](https://charts.stackradar.io/charts/twenty20-helm-charts/espocrm)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 1 Oct 2026 · scanned 2 Oct 2026 · advisories as of 2 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.