cloudreve 2026.10.1 Helm chart
unxwaresVerified publisherScored 21 Oct 2026
Self-hosted file management and sharing system (Cloudreve v4), supports multiple storage providers.
Version 2026.10.1 yesterdayapp version 4.19.1 1Artifact Hub
cloudreve 2026.10.1 deploys 1 container image: cloudreve/cloudreve. Across them, 292 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-45447 in openssl 3.5.5-r0, fixed in 3.5.7-r0. Chart.yaml declares kubeVersion >=1.27.0-0; rendered for Kubernetes 1.27.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| cloudreve/ | 4.19.1 | 0056236 | 3,356 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | ALPINE-CVE-2026-8926 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-19445 | python3 | 3.12.15-r0 |
| Low | ALPINE-CVE-2026-42764 | openssl | 3.5.7-r0 |
| Low | ALPINE-CVE-2026-63075 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2026-11564 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-15741 | postgresql18 | 18.5-r0 |
| Low | ALPINE-CVE-2026-77214 | expat | 2.9.0-r0 |
| Low | ALPINE-CVE-2026-14662 | postgresql18 | 18.5-r0 |
| Low | ALPINE-CVE-2026-42013 | gnutls | 3.8.13-r0 |
| Low | ALPINE-CVE-2026-6477 | postgresql18 | 18.4-r0 |
| Low | ALPINE-CVE-2026-14456 | openssl | 3.5.8-r0 |
| Low | ALPINE-CVE-2026-2007 | postgresql18 | 18.2-r0 |
| Low | ALPINE-CVE-2026-9076 | openssl | 3.5.7-r0 |
| Low | ALPINE-CVE-2026-14664 | postgresql18 | 18.5-r0 |
| Low | ALPINE-CVE-2026-14670 | postgresql18 | 18.5-r0 |
| Low | ALPINE-CVE-2026-14676 | postgresql18 | 18.5-r0 |
| Low | ALPINE-CVE-2026-45445 | openssl | 3.5.7-r0 |
| Low | ALPINE-CVE-2026-4224 | python3 | 3.12.14-r0 |
| Low | ALPINE-CVE-2026-19385 | postgresql18 | 18.5-r0 |
| Low | ALPINE-CVE-2026-14671 | postgresql18 | 18.5-r0 |
| Low | ALPINE-CVE-2026-14677 | postgresql18 | 18.5-r0 |
| Low | ALPINE-CVE-2026-14680 | postgresql18 | 18.5-r0 |
| Low | ALPINE-CVE-2026-7210 | python3 | 3.12.14-r0 |
| Low | ALPINE-CVE-2026-16238 | postgresql18 | 18.5-r0 |
| Low | ALPINE-CVE-2026-5773 | curl | 8.20.0-r0 |
| Low | ALPINE-CVE-2026-50142 | libheif | 1.23.0-r0 |
| Low | ALPINE-CVE-2026-15308 | python3 | 3.12.14-r0 |
| Low | ALPINE-CVE-2026-93990 | expat | 2.8.5-r0 |
| Low | ALPINE-CVE-2026-4775 | tiff | 4.7.2-r0 |
| Low | ALPINE-CVE-2026-54874 | openssl | 3.5.8-r0 |
| Low | GO-2026-4961 | golang.org/ | 0.42.0 |
| Low | ALPINE-CVE-2026-11586 | curl | 8.22.0-r0 |
| Low | GO-2026-5061 | golang.org/ | 0.43.0 |
| Low | GO-2026-5062 | golang.org/ | 0.43.0 |
| Low | GO-2026-5066 | golang.org/ | 0.43.0 |
| Low | ALPINE-CVE-2026-6637 | postgresql18 | 18.4-r0 |
| Low | ALPINE-CVE-2026-6479 | postgresql18 | 18.4-r0 |
| Low | ALPINE-CVE-2026-18408 | postgresql18 | 18.5-r0 |
| Low | GO-2026-6603 | golang.org/ | 0.60.0 |
| Low | GO-2026-6603 | stdlib | 1.26.9 |
| Low | GO-2026-5972 | stdlib | 1.25.13 |
| Low | GO-2026-6088 | stdlib | 1.25.13 |
| Low | GO-2026-6089 | stdlib | 1.25.13 |
| Low | GO-2026-6090 | stdlib | 1.25.13 |
| Low | GO-2026-6611 | stdlib | 1.26.9 |
| Low | GO-2026-6611 | golang.org/ | 0.60.0 |
| Low | ALPINE-CVE-2026-80229 | curl | 8.22.0-r0 |
| Low | ALPINE-CVE-2026-76641 | expat | 2.8.4-r0 |
| Low | GO-2026-6218 | stdlib | 1.25.13 |
| Low | GO-2026-5942 | golang.org/ | 0.56.0 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 2026.10.1latest | yesterday | 4.19.1 | 0056236 | 3,356 |
| 2026.2.4 | 7 months ago | 3.8.0 | — | — |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.