homepage Helm chart

Name: homepage Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

unknowniq

Scored 14 Sept 2026

A modern, fully static, fast, secure fully proxied, highly customizable application dashboard with integrations for over 100 services and translations into multiple languages.

Latest 1.8.8 5 days agoapp version v2.2.0 0Artifact Hub

homepage 1.8.8 deploys 2 container images: library/busybox and ghcr.io/gethomepage/homepage. Across them, 30 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-63073 in openssl 3.5.7-r0, fixed in 3.5.8-r0.

Radar Score

35200426

30 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.37	0000	0
ghcr.io/gethomepage/homepage	v2.2.0	00426	352

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

30 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2026-63073	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-18798	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-63076	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-14457	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-rgw5-rvv9-x895	brace-expansion@2.0.2	2.1.4
Low	ALPINE-CVE-2026-63072	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-23hp-3jrh-7fpw	tar@7.5.11	7.5.19
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-mh99-v99m-4gvg	brace-expansion@2.0.2	2.1.3
Low	GHSA-8x88-c5mf-7j5w	tar@7.5.11	7.5.18
Low	GHSA-c2c7-rcm5-vvqj	picomatch@4.0.3	4.0.4
Low	GHSA-mwp4-54f8-5fhr	ip-address@10.1.0	10.3.1
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-r292-9mhp-454m	tar@7.5.11	7.5.21
Low	GHSA-w4pp-8pjf-rmxw	pacote@20.0.1	21.5.1
Low	GHSA-f886-m6hf-6m8v	brace-expansion@2.0.2	2.0.3
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-w8wr-v893-vjvp	tar@7.5.11	7.5.18
Low	GHSA-52v5-jr5w-gjxr	sigstore@3.1.0	4.1.1
Low	GHSA-82fw-gwwq-j7x9	vitest@4.1.10	4.1.11
Low	GHSA-gvwx-54wh-qm9j	tar@7.5.11	7.5.17
Low	GHSA-rgj7-g3m4-5g8c	sharp@0.35.3	0.35.4
Low	GHSA-v2v4-37r5-5v8g	ip-address@10.1.0	10.1.1
Low	GHSA-3v7f-55p6-f55p	picomatch@4.0.3	4.0.4
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@2.0.2	2.1.2
Low	GHSA-vmf3-w455-68vh	tar@7.5.11	7.5.16
Low	GHSA-jfc7-64v2-mr8c	@sigstore/core@2.0.0	3.2.1
Low	GHSA-w9m9-85wc-3x92	postcss-selector-parser@7.1.1	7.1.3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.8.8latest	5 days ago	v2.2.0	00426	352
1.8.7	27 days ago	v2.0.0	00430	383

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/unknowniq/homepage.svg)](https://charts.stackradar.io/charts/unknowniq/homepage)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.