cloudreve 2026.10.1 Helm chart

Name: cloudreve Helm chart 2026.10.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

unxwares

Scored 21 Oct 2026

Self-hosted file management and sharing system (Cloudreve v4), supports multiple storage providers.

Version 2026.10.1 yesterdayapp version 4.19.1 1Artifact Hub

cloudreve 2026.10.1 deploys 1 container image: cloudreve/cloudreve. Across them, 292 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-45447 in openssl 3.5.5-r0, fixed in 3.5.7-r0. Chart.yaml declares kubeVersion >=1.27.0-0; rendered for Kubernetes 1.27.0.

Radar Score

3,3560056236

292 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
cloudreve/cloudreve×2	4.19.1	0056236	3,356

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

236 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-6470	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-45446	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-42770	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-2003	postgresql18@18.1-r0	18.2-r0
Low	ALPINE-CVE-2026-6472	postgresql18@18.1-r0	18.4-r0
Low	ALPINE-CVE-2026-34990	cups@2.4.16-r0	2.4.18-r0
Low	ALPINE-CVE-2026-0864	python3@3.12.12-r0	3.12.14-r0
Low	ALPINE-CVE-2026-56131	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-6042	musl@1.2.5-r21	1.2.5-r22
Low	ALPINE-CVE-2026-6192	openjpeg@2.5.4-r1	2.5.4-r2
Low	ALPINE-CVE-2026-6469	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-6474	postgresql18@18.1-r0	18.4-r0
Low	ALPINE-CVE-2026-6575	postgresql18@18.1-r0	18.4-r0
Low	ALPINE-CVE-2026-14678	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-18024	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-4519	python3@3.12.12-r0	3.12.14-r0
Low	ALPINE-CVE-2026-25832	mbedtls@3.6.5-r0	3.6.7-r0
Low	ALPINE-CVE-2026-34757	libpng@1.6.54-r0	1.6.57-r0
Low	ALPINE-CVE-2026-14666	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-27456	util-linux@2.41.2-r0	2.41.4-r0
Low	ALPINE-CVE-2026-16241	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-41080	expat@2.7.3-r0	2.8.1-r0
Low	ALPINE-CVE-2026-14673	postgresql18@18.1-r0	18.5-r0
Low	GO-2026-5932	golang.org/x/crypto@v0.52.0	no fix listed
Low	GO-2026-6809	stdlib@go1.26.5	1.26.10
Low	RUSTSEC-2024-0436	paste@1.0.15	no fix listed
Low	RUSTSEC-2026-0105	core2@0.4.0	no fix listed
Low	RUSTSEC-2026-0190	anyhow@1.0.98	1.0.103
Low	RUSTSEC-2026-0204	crossbeam-epoch@0.9.18	0.9.20
Low	ALPINE-CVE-2026-89162	pcre2@10.47-r0	10.48-r0
Low	ALPINE-CVE-2026-14681	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-15310	python3@3.12.12-r0	3.12.15-r0
Low	GO-2022-0635	github.com/aws/aws-sdk-go@v1.34.0	no fix listed
Low	ALPINE-CVE-2026-24515	expat@2.7.3-r0	2.7.4-r0
Low	GO-2026-6289	github.com/cloudreve/Cloudreve/v4@v4.0.0-20260918122518-a8becb9f5b22+dirty	no fix listed
Low	GHSA-cq8v-f236-94qc	rand@0.9.1	0.9.3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2026.10.1latest	yesterday	4.19.1	0056236	3,356
2026.2.4	7 months ago	3.8.0	—	—

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/unxwares/cloudreve.svg)](https://charts.stackradar.io/charts/unxwares/cloudreve)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.