cloudreve 2026.10.1 Helm chart

Name: cloudreve Helm chart 2026.10.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

unxwares

Scored 21 Oct 2026

Self-hosted file management and sharing system (Cloudreve v4), supports multiple storage providers.

Version 2026.10.1 yesterdayapp version 4.19.1 1Artifact Hub

cloudreve 2026.10.1 deploys 1 container image: cloudreve/cloudreve. Across them, 292 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-45447 in openssl 3.5.5-r0, fixed in 3.5.7-r0. Chart.yaml declares kubeVersion >=1.27.0-0; rendered for Kubernetes 1.27.0.

Radar Score

3,3560056236

292 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
cloudreve/cloudreve×2	4.19.1	0056236	3,356

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

292 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2026-6611	golang.org/x/net@v0.55.0	0.60.0
Low	GO-2026-6611	stdlib@go1.26.5	1.26.9
Low	ALPINE-CVE-2026-80229	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-76641	expat@2.7.3-r0	2.8.4-r0
Low	GO-2026-6218	stdlib@go1.26.5	1.25.13
Low	GO-2026-5942	stdlib@go1.26.5	1.26.6
Low	GO-2026-5942	golang.org/x/net@v0.55.0	0.56.0
Low	ALPINE-CVE-2026-31789	openssl@3.5.5-r0	3.5.6-r0
Low	ALPINE-CVE-2026-25833	mbedtls@3.6.5-r0	3.6.6-r0
Low	ALPINE-CVE-2026-6475	postgresql18@18.1-r0	18.4-r0
Low	ALPINE-CVE-2026-42766	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-86145	pcre2@10.47-r0	10.48-r0
Low	GO-2026-6355	golang.org/x/crypto@v0.52.0	0.56.0
Low	ALPINE-CVE-2026-3644	python3@3.12.12-r0	3.12.14-r0
Low	ALPINE-CVE-2026-82209	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-85091	zlib@1.3.1-r2	1.3.2-r1
Low	ALPINE-CVE-2026-45186	expat@2.7.3-r0	2.8.1-r0
Low	ALPINE-CVE-2026-80255	curl@8.17.0-r1	8.22.0-r0
Low	GO-2026-5970	golang.org/x/text@v0.37.0	0.39.0
Low	ALPINE-CVE-2026-6471	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-22184	zlib@1.3.1-r2	1.3.2-r0
Low	ALPINE-CVE-2026-13608	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-42011	gnutls@3.8.11-r0	3.8.13-r0
Low	ALPINE-CVE-2026-9080	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-6464	postgresql18@18.1-r0	18.5-r0
Low	GO-2026-6303	golang.org/x/crypto@v0.52.0	0.55.0
Low	GO-2026-6354	golang.org/x/crypto@v0.52.0	0.56.0
Low	ALPINE-CVE-2026-11822	sqlite@3.51.2-r0	3.53.4-r0
Low	ALPINE-CVE-2026-14668	postgresql18@18.1-r0	18.5-r0
Low	GO-2026-6617	golang.org/x/net@v0.55.0	0.60.0
Low	GO-2026-6617	stdlib@go1.26.5	1.26.9
Low	ALPINE-CVE-2026-19553	python3@3.12.12-r0	3.12.15-r0
Low	ALPINE-CVE-2026-75803	openssl@3.5.5-r0	3.5.8-r0
Low	ALPINE-CVE-2026-42012	gnutls@3.8.11-r0	3.8.13-r0
Low	GO-2026-6222	golang.org/x/image@v0.41.0	0.45.0
Low	ALPINE-CVE-2026-9545	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-82208	curl@8.17.0-r1	8.22.0-r0
Low	GO-2026-6608	stdlib@go1.26.5	1.26.9
Low	ALPINE-CVE-2026-12064	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-8932	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-4786	python3@3.12.12-r0	3.12.14-r0
Low	GO-2026-6607	stdlib@go1.26.5	1.26.9
Low	ALPINE-CVE-2026-8286	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-14679	postgresql18@18.1-r0	18.5-r0
Low	GO-2026-6609	stdlib@go1.26.5	1.26.9
Low	ALPINE-CVE-2026-33636	libpng@1.6.54-r0	1.6.56-r0
Low	ALPINE-CVE-2026-17084	python3@3.12.12-r0	3.12.15-r0
Low	ALPINE-CVE-2026-80230	curl@8.17.0-r1	8.22.0-r0
Low	GHSA-259r-337f-4rfw	github.com/klauspost/compress@v1.17.11	1.18.7
Low	ALPINE-CVE-2026-41254	lcms2@2.17-r0	2.19-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2026.10.1latest	yesterday	4.19.1	0056236	3,356
2026.2.4	7 months ago	3.8.0	—	—

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/unxwares/cloudreve.svg)](https://charts.stackradar.io/charts/unxwares/cloudreve)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.