cloudreve 2026.10.1 Helm chart

Name: cloudreve Helm chart 2026.10.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

unxwares

Scored 21 Oct 2026

Self-hosted file management and sharing system (Cloudreve v4), supports multiple storage providers.

Version 2026.10.1 yesterdayapp version 4.19.1 1Artifact Hub

cloudreve 2026.10.1 deploys 1 container image: cloudreve/cloudreve. Across them, 292 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-45447 in openssl 3.5.5-r0, fixed in 3.5.7-r0. Chart.yaml declares kubeVersion >=1.27.0-0; rendered for Kubernetes 1.27.0.

Radar Score

3,3560056236

292 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
cloudreve/cloudreve×2	4.19.1	0056236	3,356

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

236 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-2673	openssl@3.5.5-r0	3.5.6-r0
Low	ALPINE-CVE-2026-42015	gnutls@3.8.11-r0	3.8.13-r0
Low	GO-2026-6613	stdlib@go1.26.5	1.26.9
Low	ALPINE-CVE-2026-76642	util-linux@2.41.2-r0	2.41.6-r0
Low	ALPINE-CVE-2026-9547	curl@8.17.0-r1	8.22.0-r0
Low	GO-2026-6605	stdlib@go1.26.5	1.26.9
Low	ALPINE-CVE-2026-3784	curl@8.17.0-r1	8.19.0-r0
Low	GO-2026-6610	golang.org/x/net@v0.55.0	0.60.0
Low	GO-2026-6610	stdlib@go1.26.5	1.26.9
Low	GO-2026-6180	golang.org/x/mod@v0.35.0	0.40.0
Low	GHSA-8rrh-rw8j-w5fx	wheel@0.45.1	0.46.2
Low	ALPINE-CVE-2026-6638	postgresql18@18.1-r0	18.4-r0
Low	ALPINE-CVE-2026-76956	expat@2.7.3-r0	2.8.4-r0
Low	GHSA-hq88-5x99-x3gf	github.com/cloudreve/Cloudreve/v4@v4.0.0-20260918122518-a8becb9f5b22+dirty	4.17.0
Low	ALPINE-CVE-2026-63074	openssl@3.5.5-r0	3.5.8-r0
Low	ALPINE-CVE-2026-19672	python3@3.12.12-r0	3.12.15-r0
Low	ALPINE-CVE-2026-34978	cups@2.4.16-r0	2.4.18-r0
Low	ALPINE-CVE-2026-42767	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-15806	python3@3.12.12-r0	3.12.15-r0
Low	ALPINE-CVE-2026-5545	curl@8.17.0-r1	8.20.0-r0
Low	ALPINE-CVE-2026-89157	pcre2@10.47-r0	10.48-r0
Low	ALPINE-CVE-2025-14819	curl@8.17.0-r1	8.18.0-r0
Low	ALPINE-CVE-2026-82049	python3@3.12.12-r0	3.12.15-r0
Low	ALPINE-CVE-2026-11824	sqlite@3.51.2-r0	3.53.4-r0
Low	ALPINE-CVE-2026-6476	postgresql18@18.1-r0	18.4-r0
Low	ALPINE-CVE-2026-32739	libheif@1.20.2-r1	1.23.0-r0
Low	ALPINE-CVE-2026-1502	python3@3.12.12-r0	3.12.14-r0
Low	ALPINE-CVE-2026-32738	libheif@1.20.2-r1	1.23.0-r0
Low	ALPINE-CVE-2026-8458	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-25210	expat@2.7.3-r0	2.7.4-r0
Low	ALPINE-CVE-2025-14524	curl@8.17.0-r1	8.18.0-r0
Low	ALPINE-CVE-2025-14831	gnutls@3.8.11-r0	3.8.12-r0
Low	ALPINE-CVE-2026-103111	pcre2@10.47-r0	10.49-r0
Low	ALPINE-CVE-2026-87910	python3@3.12.12-r0	3.12.15-r0
Low	GHSA-h35f-9h28-mq5c	setuptools@80.9.0	83.0.0
Low	ALPINE-CVE-2026-78408	util-linux@2.41.2-r0	2.41.6-r1
Low	ALPINE-CVE-2026-40200	musl@1.2.5-r21	1.2.5-r23
Low	ALPINE-CVE-2026-25835	mbedtls@3.6.5-r0	3.6.6-r0
Low	ALPINE-CVE-2026-3783	curl@8.17.0-r1	8.19.0-r0
Low	ALPINE-CVE-2026-6429	curl@8.17.0-r1	8.20.0-r0
Low	ALPINE-CVE-2026-34743	xz@5.8.2-r0	5.8.3-r0
Low	GO-2026-6179	golang.org/x/mod@v0.35.0	0.40.0
Low	ALPINE-CVE-2026-78410	util-linux@2.41.2-r0	2.41.6-r0
Low	ALPINE-CVE-2026-34181	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-4873	curl@8.17.0-r1	8.20.0-r0
Low	ALPINE-CVE-2026-89160	pcre2@10.47-r0	10.48-r0
Low	ALPINE-CVE-2026-1965	curl@8.17.0-r1	8.19.0-r0
Low	ALPINE-CVE-2026-4360	python3@3.12.12-r0	3.12.14-r0
Low	ALPINE-CVE-2026-102633	expat@2.7.3-r0	2.9.0-r0
Low	GO-2026-6091	stdlib@go1.26.5	1.25.13

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2026.10.1latest	yesterday	4.19.1	0056236	3,356
2026.2.4	7 months ago	3.8.0	—	—

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/unxwares/cloudreve.svg)](https://charts.stackradar.io/charts/unxwares/cloudreve)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.