opencloud Helm chart

Name: opencloud Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

unxwares

Scored 15 Sept 2026

OpenCloud Helm community chart

Latest 0.2.3 11 months agoapp version latest 0Artifact Hub

opencloud 0.2.3 deploys 13 container images: library/busybox, opencloudeu/opencloud-rolling, quay.io/keycloak/keycloak, minio/minio and 4 more. Across the 12 measured, 4,119 findings — 17 critical, 13 high — 12 on CISA KEV. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.9.2, fixed in 3.2.2.

Radar Score

45,39217136863,403

4,119 findings over 12 of 13 images measured

KEV ×12 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

13 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox×6	1.36	0000	0
opencloudeu/opencloud-rolling×2	2.1.0	0120178	1,842
quay.io/keycloak/keycloak	26.1.4	0118160	1,884
minio/minio	latest	009109	1,069
onlyoffice/documentserver	8.2.2	—	not yet scanned
opencloudeu/web-extensions	draw-io-1.0.0	2180336	4,767
opencloudeu/web-extensions	external-sites-1.0.0	2180336	4,767
opencloudeu/web-extensions	importer-1.0.0	2180336	4,767
opencloudeu/web-extensions	json-viewer-1.0.0	2180336	4,767
opencloudeu/web-extensions	progress-bars-1.0.0	2180336	4,767
opencloudeu/web-extensions	unzip-1.0.0	2180336	4,767
library/postgres	alpine	00861	634
apache/tika	2.9.2.1-full	55151879	11,361

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,577 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-32776	expat@2.7.0-r0	2.7.5-r0
Low	DEBIAN-CVE-2026-32776	expat@2.5.0-1+deb12u1	no fix listed
Low	UBUNTU-CVE-2026-5745	libarchive@3.7.2-2	3.7.2-2ubuntu0.8
Low	UBUNTU-CVE-2025-0167	curl@8.5.0-2ubuntu10.1	8.5.0-2ubuntu10.8
Low	GHSA-3xc5-wrhm-f963	github.com/go-git/go-git/v5@v5.13.2	5.18.0
Low	UBUNTU-CVE-2025-8851	tiff@4.5.1+git230720-4ubuntu2	4.5.1+git230720-4ubuntu2.3
Low	UBUNTU-CVE-2025-60753	libarchive@3.7.2-2	3.7.2-2ubuntu0.6
Low	DSA-6076-1	libpng1.6@1.6.39-2	1.6.39-2+deb12u1
Low	GO-2026-6222	golang.org/x/image@v0.25.0	0.45.0
Low	UBUNTU-CVE-2026-50812	sqlite3@3.45.1-1ubuntu2	3.45.1-1ubuntu2.7
Low	UBUNTU-CVE-2026-18495	tiff@4.5.1+git230720-4ubuntu2	no fix listed
Low	UBUNTU-CVE-2025-6052	glib2.0@2.80.0-6ubuntu3.1	2.80.0-6ubuntu3.6
Low	GO-2025-4014	stdlib@go1.24.2	1.24.8
Low	UBUNTU-CVE-2026-14663	postgresql-16@16.2-1ubuntu4	16.15-0ubuntu0.24.04.1
Low	ALPINE-CVE-2026-6042	musl@1.2.5-r1	1.2.5-r2
Low	UBUNTU-CVE-2024-21231	mysql-8.0@8.0.36-2ubuntu3	8.0.40-0ubuntu0.24.04.1
Low	UBUNTU-CVE-2026-49337	libde265@1.0.15-1build3	1.0.15-1ubuntu0.1
Low	UBUNTU-CVE-2026-34757	libpng1.6@1.6.43-5build1	1.6.43-5ubuntu0.6
Low	UBUNTU-CVE-2026-12391	ubuntu-advantage-tools@31.2.3	37.2ubuntu~24.04.1
Low	UBUNTU-CVE-2026-18938	p11-kit@0.25.3-4ubuntu2	0.25.3-4ubuntu2.2
Low	UBUNTU-CVE-2026-4897	policykit-1@124-2ubuntu1	124-2ubuntu1.24.04.3
Low	GO-2026-5774	github.com/go-chi/chi/v5@v5.2.1	5.3.0
Low	GHSA-q35r-vvhv-vx5h	keycloak-model-jpa@26.1.4	26.5.6
Low	GHSA-q35r-vvhv-vx5h	keycloak-server-spi-private@26.1.4	26.5.6
Low	GHSA-q35r-vvhv-vx5h	keycloak-services@26.1.4	26.5.6
Low	GO-2026-6107	go.etcd.io/etcd/client/pkg/v3@v3.5.20	3.5.33
Low	UBUNTU-CVE-2026-0989	libxml2@2.9.14+dfsg-1.3ubuntu3	2.9.14+dfsg-1.3ubuntu3.7
Low	UBUNTU-CVE-2026-6472	postgresql-16@16.2-1ubuntu4	16.14-0ubuntu0.24.04.1
Low	GO-2026-4976	stdlib@go1.24.2	1.25.10
Low	UBUNTU-CVE-2026-21925	openjdk-17@17.0.11+9-1	17.0.18+8-1~24.04.1
Low	GO-2026-5031	golang.org/x/image@v0.25.0	0.41.0
Low	GHSA-27gc-wj6x-9w55	keycloak-account-ui@26.1.4	26.2.9
Low	GHSA-27gc-wj6x-9w55	keycloak-admin-ui@26.1.4	26.2.9
Low	GHSA-2x5j-vhc8-9cwm	github.com/cloudflare/circl@v1.3.7	1.6.1
Low	RHSA-2026:28911	coreutils@8.32-36.el9	0:8.32-41.el9_8
Low	UBUNTU-CVE-2025-5278	coreutils@9.4-3ubuntu6	9.4-3ubuntu6.3
Low	GO-2026-5856	stdlib@go1.24.2	1.25.12
Low	ALPINE-CVE-2026-22795	openssl@3.3.3-r0	3.3.6-r0
Low	UBUNTU-CVE-2026-22795	openssl@3.0.13-0ubuntu3	3.0.13-0ubuntu3.7
Low	UBUNTU-CVE-2026-9494	ubuntu-advantage-tools@31.2.3	37.2ubuntu~24.04.1
Low	UBUNTU-CVE-2026-47714	libheif@1.17.6-1ubuntu4	1.17.6-1ubuntu4.6
Low	GO-2025-4007	stdlib@go1.24.2	1.24.9
Low	GO-2026-6355	golang.org/x/crypto@v0.36.0	0.56.0
Low	UBUNTU-CVE-2025-6966	python-apt@2.7.7ubuntu1	2.7.7ubuntu5.1
Low	UBUNTU-CVE-2026-62289	libheif@1.17.6-1ubuntu4	1.17.6-1ubuntu4.7
Low	UBUNTU-CVE-2025-28162	libpng1.6@1.6.43-5build1	1.6.43-5ubuntu0.4
Low	UBUNTU-CVE-2025-28164	libpng1.6@1.6.43-5build1	1.6.43-5ubuntu0.4
Low	GO-2025-3749	stdlib@go1.24.2	1.24.4
Low	GHSA-wcvj-vpvw-9rr5	keycloak-services@26.1.4	no fix listed
Low	GO-2026-4980	stdlib@go1.24.2	1.25.10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.3latest	11 months ago	latest	17136863,403	45,392

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/unxwares/opencloud.svg)](https://charts.stackradar.io/charts/unxwares/opencloud)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.