cloudreve 2026.10.1 Helm chart

Name: cloudreve Helm chart 2026.10.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

unxwares

Scored 21 Oct 2026

Self-hosted file management and sharing system (Cloudreve v4), supports multiple storage providers.

Version 2026.10.1 yesterdayapp version 4.19.1 1Artifact Hub

cloudreve 2026.10.1 deploys 1 container image: cloudreve/cloudreve. Across them, 292 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-45447 in openssl 3.5.5-r0, fixed in 3.5.7-r0. Chart.yaml declares kubeVersion >=1.27.0-0; rendered for Kubernetes 1.27.0.

Radar Score

3,3560056236

292 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
cloudreve/cloudreve×2	4.19.1	0056236	3,356

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

292 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2026-3833	gnutls@3.8.11-r0	3.8.13-r0
Medium	ALPINE-CVE-2026-28387	openssl@3.5.5-r0	3.5.6-r0
Medium	ALPINE-CVE-2026-33630	c-ares@1.34.6-r0	1.34.8-r0
Medium	ALPINE-CVE-2026-11940	python3@3.12.12-r0	3.12.14-r0
Medium	ALPINE-CVE-2026-28389	openssl@3.5.5-r0	3.5.6-r0
Medium	ALPINE-CVE-2026-28390	openssl@3.5.5-r0	3.5.6-r0
Low	ALPINE-CVE-2026-8926	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-19445	python3@3.12.12-r0	3.12.15-r0
Low	ALPINE-CVE-2026-42764	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-63075	openssl@3.5.5-r0	3.5.8-r0
Low	ALPINE-CVE-2026-11564	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-15741	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-77214	expat@2.7.3-r0	2.9.0-r0
Low	ALPINE-CVE-2026-14662	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-42013	gnutls@3.8.11-r0	3.8.13-r0
Low	ALPINE-CVE-2026-6477	postgresql18@18.1-r0	18.4-r0
Low	ALPINE-CVE-2026-14456	openssl@3.5.5-r0	3.5.8-r0
Low	ALPINE-CVE-2026-2007	postgresql18@18.1-r0	18.2-r0
Low	ALPINE-CVE-2026-9076	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-14664	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-14670	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-14676	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-45445	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-4224	python3@3.12.12-r0	3.12.14-r0
Low	ALPINE-CVE-2026-19385	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-14671	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-14677	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-14680	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-7210	python3@3.12.12-r0	3.12.14-r0
Low	ALPINE-CVE-2026-16238	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-5773	curl@8.17.0-r1	8.20.0-r0
Low	ALPINE-CVE-2026-50142	libheif@1.20.2-r1	1.23.0-r0
Low	ALPINE-CVE-2026-15308	python3@3.12.12-r0	3.12.14-r0
Low	ALPINE-CVE-2026-93990	expat@2.7.3-r0	2.8.5-r0
Low	ALPINE-CVE-2026-4775	tiff@4.7.1-r0	4.7.2-r0
Low	ALPINE-CVE-2026-54874	openssl@3.5.5-r0	3.5.8-r0
Low	GO-2026-4961	golang.org/x/image@v0.41.0	0.42.0
Low	ALPINE-CVE-2026-11586	curl@8.17.0-r1	8.22.0-r0
Low	GO-2026-5061	golang.org/x/image@v0.41.0	0.43.0
Low	GO-2026-5062	golang.org/x/image@v0.41.0	0.43.0
Low	GO-2026-5066	golang.org/x/image@v0.41.0	0.43.0
Low	ALPINE-CVE-2026-6637	postgresql18@18.1-r0	18.4-r0
Low	ALPINE-CVE-2026-6479	postgresql18@18.1-r0	18.4-r0
Low	ALPINE-CVE-2026-18408	postgresql18@18.1-r0	18.5-r0
Low	GO-2026-6603	golang.org/x/net@v0.55.0	0.60.0
Low	GO-2026-6603	stdlib@go1.26.5	1.26.9
Low	GO-2026-5972	stdlib@go1.26.5	1.25.13
Low	GO-2026-6088	stdlib@go1.26.5	1.25.13
Low	GO-2026-6089	stdlib@go1.26.5	1.25.13
Low	GO-2026-6090	stdlib@go1.26.5	1.25.13

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2026.10.1latest	yesterday	4.19.1	0056236	3,356
2026.2.4	7 months ago	3.8.0	—	—

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/unxwares/cloudreve.svg)](https://charts.stackradar.io/charts/unxwares/cloudreve)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.