cloudreve 2026.10.1 Helm chart

Name: cloudreve Helm chart 2026.10.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

unxwares

Scored 21 Oct 2026

Self-hosted file management and sharing system (Cloudreve v4), supports multiple storage providers.

Version 2026.10.1 yesterdayapp version 4.19.1 1Artifact Hub

cloudreve 2026.10.1 deploys 1 container image: cloudreve/cloudreve. Across them, 292 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-45447 in openssl 3.5.5-r0, fixed in 3.5.7-r0. Chart.yaml declares kubeVersion >=1.27.0-0; rendered for Kubernetes 1.27.0.

Radar Score

3,3560056236

292 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
cloudreve/cloudreve×2	4.19.1	0056236	3,356

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

292 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-56409	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-5419	gnutls@3.8.11-r0	3.8.13-r0
Low	ALPINE-CVE-2026-32778	expat@2.7.3-r0	2.7.5-r0
Low	ALPINE-CVE-2025-14017	curl@8.17.0-r1	8.18.0-r0
Low	ALPINE-CVE-2026-32776	expat@2.7.3-r0	2.7.5-r0
Low	ALPINE-CVE-2026-14663	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-6470	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-45446	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-42770	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-2003	postgresql18@18.1-r0	18.2-r0
Low	ALPINE-CVE-2026-6472	postgresql18@18.1-r0	18.4-r0
Low	ALPINE-CVE-2026-34990	cups@2.4.16-r0	2.4.18-r0
Low	ALPINE-CVE-2026-0864	python3@3.12.12-r0	3.12.14-r0
Low	ALPINE-CVE-2026-56131	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-6042	musl@1.2.5-r21	1.2.5-r22
Low	ALPINE-CVE-2026-6192	openjpeg@2.5.4-r1	2.5.4-r2
Low	ALPINE-CVE-2026-6469	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-6474	postgresql18@18.1-r0	18.4-r0
Low	ALPINE-CVE-2026-6575	postgresql18@18.1-r0	18.4-r0
Low	ALPINE-CVE-2026-14678	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-18024	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-4519	python3@3.12.12-r0	3.12.14-r0
Low	ALPINE-CVE-2026-25832	mbedtls@3.6.5-r0	3.6.7-r0
Low	ALPINE-CVE-2026-34757	libpng@1.6.54-r0	1.6.57-r0
Low	ALPINE-CVE-2026-14666	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-27456	util-linux@2.41.2-r0	2.41.4-r0
Low	ALPINE-CVE-2026-16241	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-41080	expat@2.7.3-r0	2.8.1-r0
Low	ALPINE-CVE-2026-14673	postgresql18@18.1-r0	18.5-r0
Low	GO-2026-5932	golang.org/x/crypto@v0.52.0	no fix listed
Low	GO-2026-6809	stdlib@go1.26.5	1.26.10
Low	RUSTSEC-2024-0436	paste@1.0.15	no fix listed
Low	RUSTSEC-2026-0105	core2@0.4.0	no fix listed
Low	RUSTSEC-2026-0190	anyhow@1.0.98	1.0.103
Low	RUSTSEC-2026-0204	crossbeam-epoch@0.9.18	0.9.20
Low	ALPINE-CVE-2026-89162	pcre2@10.47-r0	10.48-r0
Low	ALPINE-CVE-2026-14681	postgresql18@18.1-r0	18.5-r0
Low	ALPINE-CVE-2026-15310	python3@3.12.12-r0	3.12.15-r0
Low	GO-2022-0635	github.com/aws/aws-sdk-go@v1.34.0	no fix listed
Low	ALPINE-CVE-2026-24515	expat@2.7.3-r0	2.7.4-r0
Low	GO-2026-6289	github.com/cloudreve/Cloudreve/v4@v4.0.0-20260918122518-a8becb9f5b22+dirty	no fix listed
Low	GHSA-cq8v-f236-94qc	rand@0.9.1	0.9.3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2026.10.1latest	yesterday	4.19.1	0056236	3,356
2026.2.4	7 months ago	3.8.0	—	—

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/unxwares/cloudreve.svg)](https://charts.stackradar.io/charts/unxwares/cloudreve)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.