cloudreve 2026.10.1 Helm chart

Name: cloudreve Helm chart 2026.10.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

unxwares

Scored 21 Oct 2026

Self-hosted file management and sharing system (Cloudreve v4), supports multiple storage providers.

Version 2026.10.1 yesterdayapp version 4.19.1 1Artifact Hub

cloudreve 2026.10.1 deploys 1 container image: cloudreve/cloudreve. Across them, 292 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-45447 in openssl 3.5.5-r0, fixed in 3.5.7-r0. Chart.yaml declares kubeVersion >=1.27.0-0; rendered for Kubernetes 1.27.0.

Radar Score

3,3560056236

292 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
cloudreve/cloudreve×2	4.19.1	0056236	3,356

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

236 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-5942	golang.org/x/net@v0.55.0	0.56.0
Low	ALPINE-CVE-2026-31789	openssl@3.5.5-r0	3.5.6-r0
Low	ALPINE-CVE-2026-25833	mbedtls@3.6.5-r0	3.6.6-r0
Low	ALPINE-CVE-2026-6475	postgresql18@18.1-r0	18.4-r0
Low	ALPINE-CVE-2026-42766	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-86145	pcre2@10.47-r0	10.48-r0
Low	GO-2026-6355	golang.org/x/crypto@v0.52.0	0.56.0
Low	ALPINE-CVE-2026-3644	python3@3.12.12-r0	3.12.14-r0
Low	ALPINE-CVE-2026-82209	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-85091	zlib@1.3.1-r2	1.3.2-r1
Low	ALPINE-CVE-2026-45186	expat@2.7.3-r0	2.8.1-r0
Low	ALPINE-CVE-2026-80255	curl@8.17.0-r1	8.22.0-r0
Low	GO-2026-5970	golang.org/x/text@v0.37.0	0.39.0
Low	ALPINE-CVE-2026-6471	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-22184	zlib@1.3.1-r2	1.3.2-r0
Low	ALPINE-CVE-2026-13608	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-42011	gnutls@3.8.11-r0	3.8.13-r0
Low	ALPINE-CVE-2026-9080	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-6464	postgresql18@18.1-r0	18.5-r0
Low	GO-2026-6303	golang.org/x/crypto@v0.52.0	0.55.0
Low	GO-2026-6354	golang.org/x/crypto@v0.52.0	0.56.0
Low	ALPINE-CVE-2026-11822	sqlite@3.51.2-r0	3.53.4-r0
Low	ALPINE-CVE-2026-14668	postgresql18@18.1-r0	18.5-r0
Low	GO-2026-6617	golang.org/x/net@v0.55.0	0.60.0
Low	GO-2026-6617	stdlib@go1.26.5	1.26.9
Low	ALPINE-CVE-2026-19553	python3@3.12.12-r0	3.12.15-r0
Low	ALPINE-CVE-2026-75803	openssl@3.5.5-r0	3.5.8-r0
Low	ALPINE-CVE-2026-42012	gnutls@3.8.11-r0	3.8.13-r0
Low	GO-2026-6222	golang.org/x/image@v0.41.0	0.45.0
Low	ALPINE-CVE-2026-9545	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-82208	curl@8.17.0-r1	8.22.0-r0
Low	GO-2026-6608	stdlib@go1.26.5	1.26.9
Low	ALPINE-CVE-2026-12064	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-8932	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-4786	python3@3.12.12-r0	3.12.14-r0
Low	GO-2026-6607	stdlib@go1.26.5	1.26.9
Low	ALPINE-CVE-2026-8286	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-14679	postgresql18@18.1-r0	18.5-r0
Low	GO-2026-6609	stdlib@go1.26.5	1.26.9
Low	ALPINE-CVE-2026-33636	libpng@1.6.54-r0	1.6.56-r0
Low	ALPINE-CVE-2026-17084	python3@3.12.12-r0	3.12.15-r0
Low	ALPINE-CVE-2026-80230	curl@8.17.0-r1	8.22.0-r0
Low	GHSA-259r-337f-4rfw	github.com/klauspost/compress@v1.17.11	1.18.7
Low	ALPINE-CVE-2026-41254	lcms2@2.17-r0	2.19-r0
Low	ALPINE-CVE-2026-6478	postgresql18@18.1-r0	18.4-r0
Low	ALPINE-CVE-2025-68431	libheif@1.20.2-r1	1.21.2-r0
Low	ALPINE-CVE-2026-6253	curl@8.17.0-r1	8.20.0-r0
Low	ALPINE-CVE-2026-6276	curl@8.17.0-r1	8.20.0-r0
Low	ALPINE-CVE-2026-34980	cups@2.4.16-r0	2.4.18-r0
Low	GO-2026-6629	golang.org/x/text@v0.37.0	0.41.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2026.10.1latest	yesterday	4.19.1	0056236	3,356
2026.2.4	7 months ago	3.8.0	—	—

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/unxwares/cloudreve.svg)](https://charts.stackradar.io/charts/unxwares/cloudreve)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.