opencloud Helm chart

Name: opencloud Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

unxwares

Scored 15 Sept 2026

OpenCloud Helm community chart

Latest 0.2.3 11 months agoapp version latest 0Artifact Hub

opencloud 0.2.3 deploys 13 container images: library/busybox, opencloudeu/opencloud-rolling, quay.io/keycloak/keycloak, minio/minio and 4 more. Across the 12 measured, 4,119 findings — 17 critical, 13 high — 12 on CISA KEV. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.9.2, fixed in 3.2.2.

Radar Score

45,39217136863,403

4,119 findings over 12 of 13 images measured

KEV ×12 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

13 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox×6	1.36	0000	0
opencloudeu/opencloud-rolling×2	2.1.0	0120178	1,842
quay.io/keycloak/keycloak	26.1.4	0118160	1,884
minio/minio	latest	009109	1,069
onlyoffice/documentserver	8.2.2	—	not yet scanned
opencloudeu/web-extensions	draw-io-1.0.0	2180336	4,767
opencloudeu/web-extensions	external-sites-1.0.0	2180336	4,767
opencloudeu/web-extensions	importer-1.0.0	2180336	4,767
opencloudeu/web-extensions	json-viewer-1.0.0	2180336	4,767
opencloudeu/web-extensions	progress-bars-1.0.0	2180336	4,767
opencloudeu/web-extensions	unzip-1.0.0	2180336	4,767
library/postgres	alpine	00861	634
apache/tika	2.9.2.1-full	55151879	11,361

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,577 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2025-13837	python3.12@3.12.3-1	3.12.3-1ubuntu0.11
Low	UBUNTU-CVE-2025-9714	libxml2@2.9.14+dfsg-1.3ubuntu3	2.9.14+dfsg-1.3ubuntu3.5
Low	GO-2025-3495	github.com/minio/minio@v0.0.0-20250907161309-07c3a429bfed+dirty	no fix listed
Low	UBUNTU-CVE-2025-43718	poppler@24.02.0-1ubuntu9	24.02.0-1ubuntu9.7
Low	UBUNTU-CVE-2026-56409	expat@2.6.1-2build1	no fix listed
Low	UBUNTU-CVE-2026-19023	hdf5@1.10.10+repack-3.1ubuntu4	no fix listed
Low	UBUNTU-CVE-2026-19025	hdf5@1.10.10+repack-3.1ubuntu4	no fix listed
Low	UBUNTU-CVE-2026-58470	wget@1.21.4-1ubuntu4	1.21.4-1ubuntu4.3
Low	GHSA-hm32-hfmw-rhvg	keycloak-services@26.1.4	no fix listed
Low	RHSA-2026:60226	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
Low	GO-2026-5972	stdlib@go1.24.2	1.25.13
Low	GO-2026-6088	stdlib@go1.24.2	1.25.13
Low	GO-2026-6089	stdlib@go1.24.2	1.25.13
Low	GO-2026-6090	stdlib@go1.24.2	1.25.13
Low	ALPINE-CVE-2026-27171	zlib@1.3.1-r1	1.3.2-r0
Low	DEBIAN-CVE-2026-27171	zlib@1:1.2.13.dfsg-1	no fix listed
Low	DEBIAN-CVE-2017-14159	openldap@2.5.13+dfsg-5	no fix listed
Low	GHSA-v4jw-m6rm-399h	keycloak-server-spi-private@26.1.4	26.5.2
Low	UBUNTU-CVE-2025-1390	libcap2@1:2.66-5ubuntu2	1:2.66-5ubuntu2.2
Low	UBUNTU-CVE-2026-50813	sqlite3@3.45.1-1ubuntu2	3.45.1-1ubuntu2.7
Low	GHSA-9983-vrx2-fg9c	github.com/nats-io/nats-server/v2@v2.11.0	2.11.15
Low	ALPINE-CVE-2026-32777	expat@2.7.0-r0	2.7.5-r0
Low	DEBIAN-CVE-2026-32777	expat@2.5.0-1+deb12u1	no fix listed
Low	GO-2026-5038	stdlib@go1.24.2	1.25.11
Low	DEBIAN-CVE-2017-18018	coreutils@9.1-1	no fix listed
Low	UBUNTU-CVE-2026-86139	libxml2@2.9.14+dfsg-1.3ubuntu3	no fix listed
Low	UBUNTU-CVE-2025-50422	cairo@1.18.0-3build1	no fix listed
Low	UBUNTU-CVE-2026-29043	hdf5@1.10.10+repack-3.1ubuntu4	no fix listed
Low	GHSA-3g76-f9xq-8vp6	vertx-core@4.5.11	4.5.27
Low	UBUNTU-CVE-2025-6269	hdf5@1.10.10+repack-3.1ubuntu4	no fix listed
Low	UBUNTU-CVE-2025-6270	hdf5@1.10.10+repack-3.1ubuntu4	no fix listed
Low	GHSA-6w3v-mcfh-m3q7	keycloak-rest-admin-ui-ext@26.1.4	26.7.0
Low	UBUNTU-CVE-2026-8086	gdal@3.8.4+dfsg-3ubuntu3	no fix listed
Low	RHSA-2026:49667	p11-kit@0.25.3-3.el9_5	0:0.26.4-1.el9_8
Low	UBUNTU-CVE-2026-13757	p11-kit@0.25.3-4ubuntu2	0.25.3-4ubuntu2.2
Low	UBUNTU-CVE-2026-47709	libheif@1.17.6-1ubuntu4	1.17.6-1ubuntu4.6
Low	GO-2026-5942	golang.org/x/net@v0.38.0	0.56.0
Low	GHSA-hvcg-qmg6-jm4c	netty-codec-http@4.1.118.Final	4.1.135.Final
Low	GHSA-64w3-5q9m-68xf	keycloak-services@26.1.4	26.2.11
Low	UBUNTU-CVE-2024-21000	mysql-8.0@8.0.36-2ubuntu3	8.0.37-0ubuntu0.24.04.1
Low	UBUNTU-CVE-2026-11850	krb5@1.20.1-6ubuntu2	1.20.1-6ubuntu2.7
Low	UBUNTU-CVE-2026-56132	expat@2.6.1-2build1	no fix listed
Low	DEBIAN-CVE-2025-66382	expat@2.5.0-1+deb12u1	no fix listed
Low	GO-2025-4012	stdlib@go1.24.2	1.24.8
Low	UBUNTU-CVE-2026-15146	wget@1.21.4-1ubuntu4	1.21.4-1ubuntu4.4
Low	GO-2025-3956	stdlib@go1.24.2	1.23.12
Low	UBUNTU-CVE-2026-15588	glib2.0@2.80.0-6ubuntu3.1	no fix listed
Low	GHSA-p3v8-fm5p-v84h	keycloak-services@26.1.4	no fix listed
Low	UBUNTU-CVE-2025-8058	glibc@2.39-0ubuntu8.1	2.39-0ubuntu8.6
Low	GO-2026-4440	golang.org/x/net@v0.38.0	0.45.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.3latest	11 months ago	latest	17136863,403	45,392

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/unxwares/opencloud.svg)](https://charts.stackradar.io/charts/unxwares/opencloud)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.