cloudreve 2026.10.1 Helm chart

Name: cloudreve Helm chart 2026.10.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

unxwares

Scored 21 Oct 2026

Self-hosted file management and sharing system (Cloudreve v4), supports multiple storage providers.

Version 2026.10.1 yesterdayapp version 4.19.1 1Artifact Hub

cloudreve 2026.10.1 deploys 1 container image: cloudreve/cloudreve. Across them, 292 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-45447 in openssl 3.5.5-r0, fixed in 3.5.7-r0. Chart.yaml declares kubeVersion >=1.27.0-0; rendered for Kubernetes 1.27.0.

Radar Score

3,3560056236

292 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
cloudreve/cloudreve×2	4.19.1	0056236	3,356

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

292 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-4873	curl@8.17.0-r1	8.20.0-r0
Low	ALPINE-CVE-2026-89160	pcre2@10.47-r0	10.48-r0
Low	ALPINE-CVE-2026-1965	curl@8.17.0-r1	8.19.0-r0
Low	ALPINE-CVE-2026-4360	python3@3.12.12-r0	3.12.14-r0
Low	ALPINE-CVE-2026-102633	expat@2.7.3-r0	2.9.0-r0
Low	GO-2026-6091	stdlib@go1.26.5	1.25.13
Low	ALPINE-CVE-2026-7168	curl@8.17.0-r1	8.20.0-r0
Low	ALPINE-CVE-2026-89158	pcre2@10.47-r0	10.48-r0
Low	ALPINE-CVE-2026-27447	cups@2.4.16-r0	2.4.18-r0
Low	GO-2026-6287	github.com/cloudreve/Cloudreve/v4@v4.0.0-20260918122518-a8becb9f5b22+dirty	no fix listed
Low	ALPINE-CVE-2026-34979	cups@2.4.16-r0	2.4.18-r0
Low	GHSA-jc7w-c686-c4v9	github.com/ulikunitz/xz@v0.5.12	0.5.15
Low	GO-2022-0646	github.com/aws/aws-sdk-go@v1.34.0	no fix listed
Low	ALPINE-CVE-2026-89156	pcre2@10.47-r0	10.48-r0
Low	ALPINE-CVE-2026-89161	pcre2@10.47-r0	10.48-r0
Low	ALPINE-CVE-2026-25834	mbedtls@3.6.5-r0	3.6.6-r0
Low	ALPINE-CVE-2026-42014	gnutls@3.8.11-r0	3.8.13-r0
Low	ALPINE-CVE-2026-56406	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56407	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-40930	libpng@1.6.54-r0	1.6.58-r1
Low	GHSA-rwvp-r38j-9rgg	github.com/nwaples/rardecode/v2@v2.1.0	2.2.0
Low	ALPINE-CVE-2026-56403	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-76957	expat@2.7.3-r0	2.8.4-r0
Low	ALPINE-CVE-2026-4878	libcap@2.77-r0	2.78-r0
Low	ALPINE-CVE-2026-53614	util-linux@2.41.2-r0	2.41.6-r0
Low	ALPINE-CVE-2026-3832	gnutls@3.8.11-r0	3.8.13-r0
Low	ALPINE-CVE-2026-7009	curl@8.17.0-r1	8.20.0-r0
Low	GO-2026-6599	stdlib@go1.26.5	1.26.9
Low	GO-2026-6600	stdlib@go1.26.5	1.26.9
Low	ALPINE-CVE-2025-14104	util-linux@2.41.2-r0	2.41.4-r0
Low	GHSA-5mmw-p5qv-w3x5	github.com/mojocn/base64Captcha@v0.0.0-20190801020520-752b1cd608b2	1.3.6
Low	ALPINE-CVE-2026-53613	util-linux@2.41.2-r0	2.41.6-r0
Low	ALPINE-CVE-2026-39316	cups@2.4.16-r0	2.4.18-r0
Low	ALPINE-CVE-2026-56404	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56410	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56411	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56405	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56408	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-42768	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-53612	util-linux@2.41.2-r0	2.41.6-r0
Low	ALPINE-CVE-2026-39314	cups@2.4.16-r0	2.4.18-r0
Low	ALPINE-CVE-2026-14672	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-2297	python3@3.12.12-r0	3.12.14-r0
Low	ALPINE-CVE-2026-50219	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56412	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-32777	expat@2.7.3-r0	2.7.5-r0
Low	ALPINE-CVE-2026-42769	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-27171	zlib@1.3.1-r2	1.3.2-r0
Low	ALPINE-CVE-2026-56132	expat@2.7.3-r0	2.8.2-r0
Low	GHSA-w67g-5rqw-f597	github.com/gorilla/websocket@v1.5.0	1.5.3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2026.10.1latest	yesterday	4.19.1	0056236	3,356
2026.2.4	7 months ago	3.8.0	—	—

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/unxwares/cloudreve.svg)](https://charts.stackradar.io/charts/unxwares/cloudreve)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.