cloudreve 2026.10.1 Helm chart

Name: cloudreve Helm chart 2026.10.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

unxwares

Scored 21 Oct 2026

Self-hosted file management and sharing system (Cloudreve v4), supports multiple storage providers.

Version 2026.10.1 yesterdayapp version 4.19.1 1Artifact Hub

cloudreve 2026.10.1 deploys 1 container image: cloudreve/cloudreve. Across them, 292 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-45447 in openssl 3.5.5-r0, fixed in 3.5.7-r0. Chart.yaml declares kubeVersion >=1.27.0-0; rendered for Kubernetes 1.27.0.

Radar Score

3,3560056236

292 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
cloudreve/cloudreve×2	4.19.1	0056236	3,356

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

292 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2026-45447	openssl@3.5.5-r0	3.5.7-r0
Medium	ALPINE-CVE-2021-27219	glib@2.86.3-r0	2.66.6-r0
Medium	ALPINE-CVE-2026-63073	openssl@3.5.5-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-8925	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-2005	postgresql18@18.1-r0	18.2-r0
Medium	ALPINE-CVE-2026-2004	postgresql18@18.1-r0	18.2-r0
Medium	ALPINE-CVE-2026-42010	gnutls@3.8.11-r0	3.8.13-r0
Medium	ALPINE-CVE-2026-34182	openssl@3.5.5-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-2006	postgresql18@18.1-r0	18.2-r0
Medium	ALPINE-CVE-2026-19931	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-6473	postgresql18@18.1-r0	18.4-r0
Medium	ALPINE-CVE-2026-63076	openssl@3.5.5-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-33845	gnutls@3.8.11-r0	3.8.13-r0
Medium	ALPINE-CVE-2026-18798	openssl@3.5.5-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-11856	curl@8.17.0-r1	8.22.0-r0
Medium	GO-2026-5026	stdlib@go1.26.5	1.25.13
Medium	ALPINE-CVE-2026-6100	python3@3.12.12-r0	3.12.14-r0
Medium	ALPINE-CVE-2026-10536	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-1584	gnutls@3.8.11-r0	3.8.12-r0
Medium	ALPINE-CVE-2026-9079	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-2100	p11-kit@0.25.5-r2	0.26.2-r0
Medium	ALPINE-CVE-2026-5260	gnutls@3.8.11-r0	3.8.13-r0
Medium	ALPINE-CVE-2026-32740	libheif@1.20.2-r1	1.23.0-r0
Medium	ALPINE-CVE-2026-8924	curl@8.17.0-r1	8.22.0-r0
Medium	GO-2026-6612	stdlib@go1.26.5	1.26.9
Medium	GO-2026-6612	golang.org/x/net@v0.55.0	0.60.0
Medium	ALPINE-CVE-2026-66046	expat@2.7.3-r0	2.8.4-r0
Medium	ALPINE-CVE-2026-42009	gnutls@3.8.11-r0	3.8.13-r0
Medium	ALPINE-CVE-2026-33846	gnutls@3.8.11-r0	3.8.13-r0
Medium	ALPINE-CVE-2026-16239	postgresql18@18.1-r0	18.5-r0
Medium	GO-2026-6604	stdlib@go1.26.5	1.26.9
Medium	ALPINE-CVE-2026-14669	postgresql18@18.1-r0	18.5-r0
Medium	ALPINE-CVE-2026-33416	libpng@1.6.54-r0	1.6.56-r0
Medium	ALPINE-CVE-2026-34183	openssl@3.5.5-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-18924	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-31790	openssl@3.5.5-r0	3.5.6-r0
Medium	ALPINE-CVE-2026-34180	openssl@3.5.5-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-14457	openssl@3.5.5-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-7383	openssl@3.5.5-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-3805	curl@8.17.0-r1	8.19.0-r0
Medium	GHSA-58pv-8j8x-9vj2	jaraco-context@5.3.0	6.1.0
Medium	ALPINE-CVE-2026-6732	libxml2@2.13.9-r0	2.13.9-r1
Medium	ALPINE-CVE-2026-11972	python3@3.12.12-r0	3.12.14-r0
Medium	ALPINE-CVE-2026-27135	nghttp2@1.68.0-r0	1.68.1
Medium	ALPINE-CVE-2026-63072	openssl@3.5.5-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-25646	libpng@1.6.54-r0	1.6.55-r0
Medium	ALPINE-CVE-2026-80231	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-15742	postgresql18@18.1-r0	18.5-r0
Medium	ALPINE-CVE-2026-8927	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-28388	openssl@3.5.5-r0	3.5.6-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2026.10.1latest	yesterday	4.19.1	0056236	3,356
2026.2.4	7 months ago	3.8.0	—	—

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/unxwares/cloudreve.svg)](https://charts.stackradar.io/charts/unxwares/cloudreve)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.