StackRadar

vaultwarden-kubernetes-secrets Helm chart

vaultwarden-kubernetes-secrets

Scored 14 Sept 2026

Synchronize Bitwarden/Vaultwarden items to Kubernetes Secrets

Latest 0.0.0-mainapp version 0.0.0-main 1Artifact Hub

vaultwarden-kubernetes-secrets 0.0.0-main deploys 2 container images: library/busybox and ghcr.io/antoniolago/vaultwarden-kubernetes-secrets. Across them, 372 findings1 critical, 3 high. The highest contribution is UBUNTU-CVE-2024-27983 in nodejs 20.20.0-1nodesource1, with no fix listed.

Radar Score

4,0101354313

372 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
library/busybox1.3600000
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets0.0.0-main13543134,010

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

372 distinct across the version’s images
SeverityAdvisoryPackageFixed in
CriticalUBUNTU-CVE-2024-27983nodejs@20.20.0-1nodesource1no fix listed
HighUBUNTU-CVE-2025-15467openssl@3.0.13-0ubuntu3.63.0.13-0ubuntu3.7
HighGHSA-r5fr-rjxr-66jclodash@4.17.234.18.0
HighUBUNTU-CVE-2026-21710nodejs@20.20.0-1nodesource1no fix listed
MediumUBUNTU-CVE-2026-45447openssl@3.0.13-0ubuntu3.63.0.13-0ubuntu3.11
MediumUBUNTU-CVE-2025-59465nodejs@20.20.0-1nodesource1no fix listed
MediumUBUNTU-CVE-2026-48933nodejs@20.20.0-1nodesource1no fix listed
MediumGHSA-5j98-mcp5-4vw2glob@10.4.210.5.0
MediumUBUNTU-CVE-2025-55131nodejs@20.20.0-1nodesource1no fix listed
MediumGHSA-4vgm-c2wm-63mwMicrosoft.AspNetCore.App.Runtime.linux-x64@10.0.210.0.4
MediumUBUNTU-CVE-2026-19931curl@8.5.0-2ubuntu10.6no fix listed
MediumGHSA-f8h2-vmm9-qhj6Microsoft.AspNetCore.App.Runtime.linux-x64@10.0.210.0.9
MediumGHSA-9v76-4qcc-frghMicrosoft.AspNetCore.App.Runtime.linux-x64@10.0.210.0.8
MediumUBUNTU-CVE-2016-20013glibc@2.39-0ubuntu8.6no fix listed
MediumUBUNTU-CVE-2026-48618nodejs@20.20.0-1nodesource1no fix listed
MediumGHSA-73j8-2gch-69rqMicrosoft.NETCore.App.Runtime.linux-x64@10.0.210.0.4
MediumUBUNTU-CVE-2026-10536curl@8.5.0-2ubuntu10.68.5.0-2ubuntu10.11
MediumUBUNTU-CVE-2026-18924curl@8.5.0-2ubuntu10.6no fix listed
MediumUBUNTU-CVE-2026-11856curl@8.5.0-2ubuntu10.68.5.0-2ubuntu10.12
MediumUBUNTU-CVE-2026-8925curl@8.5.0-2ubuntu10.68.5.0-2ubuntu10.10
MediumUBUNTU-CVE-2025-55130nodejs@20.20.0-1nodesource1no fix listed
MediumUBUNTU-CVE-2026-42009gnutls28@3.8.3-1.1ubuntu3.43.8.3-1.1ubuntu3.6
MediumUBUNTU-CVE-2026-63076openssl@3.0.13-0ubuntu3.63.0.13-0ubuntu3.15
MediumUBUNTU-CVE-2025-59375expat@2.6.1-2ubuntu0.3no fix listed
MediumUBUNTU-CVE-2026-33846gnutls28@3.8.3-1.1ubuntu3.43.8.3-1.1ubuntu3.6
MediumUBUNTU-CVE-2026-5450glibc@2.39-0ubuntu8.62.39-0ubuntu8.8
MediumGHSA-5528-5vmv-3xc2multer@2.0.22.1.1
MediumGHSA-rp2p-6cmp-jxj9Microsoft.NETCore.App.Runtime.linux-x64@10.0.210.0.10
MediumUBUNTU-CVE-2026-34182openssl@3.0.13-0ubuntu3.63.0.13-0ubuntu3.11
MediumGHSA-f23m-r3pf-42rhlodash@4.17.234.18.0
MediumGHSA-m93f-wj8c-rp8pMicrosoft.NETCore.App.Runtime.linux-x64@10.0.210.0.11
MediumGHSA-v52c-386h-88mcmulter@2.0.22.1.0
MediumGHSA-xf7r-hgr6-v32pmulter@2.0.22.1.0
MediumUBUNTU-CVE-2026-31790openssl@3.0.13-0ubuntu3.63.0.13-0ubuntu3.9
MediumGHSA-cvvh-rhrc-wg4qMicrosoft.NETCore.App.Runtime.linux-x64@10.0.210.0.10
MediumUBUNTU-CVE-2026-34180openssl@3.0.13-0ubuntu3.63.0.13-0ubuntu3.11
MediumUBUNTU-CVE-2026-7383openssl@3.0.13-0ubuntu3.63.0.13-0ubuntu3.11
MediumGHSA-j8gr-8fp3-5q5hMicrosoft.AspNetCore.App.Runtime.linux-x64@10.0.210.0.6
MediumUBUNTU-CVE-2026-8924curl@8.5.0-2ubuntu10.68.5.0-2ubuntu10.10
MediumUBUNTU-CVE-2025-69720ncurses@6.4+20240113-1ubuntu26.4+20240113-1ubuntu2.1
MediumUBUNTU-CVE-2026-8376perl@5.38.2-3.2ubuntu0.25.38.2-3.2ubuntu0.3
MediumUBUNTU-CVE-2026-5260gnutls28@3.8.3-1.1ubuntu3.43.8.3-1.1ubuntu3.6
MediumUBUNTU-CVE-2026-8927curl@8.5.0-2ubuntu10.68.5.0-2ubuntu10.10
MediumUBUNTU-CVE-2026-42010gnutls28@3.8.3-1.1ubuntu3.43.8.3-1.1ubuntu3.6
MediumUBUNTU-CVE-2026-9669python3.12@3.12.3-1ubuntu0.103.12.3-1ubuntu0.15
MediumUBUNTU-CVE-2026-28388openssl@3.0.13-0ubuntu3.63.0.13-0ubuntu3.9
MediumUBUNTU-CVE-2025-69421openssl@3.0.13-0ubuntu3.63.0.13-0ubuntu3.7
MediumGHSA-3xgq-45jj-v275cross-spawn@7.0.37.0.5
MediumUBUNTU-CVE-2026-28387openssl@3.0.13-0ubuntu3.63.0.13-0ubuntu3.9
MediumUBUNTU-CVE-2026-11940python3.12@3.12.3-1ubuntu0.10no fix listed

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.0.0-mainlatest0.0.0-main13543134,010

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/vaultwarden-kubernetes-secrets/vaultwarden-kubernetes-secrets.svg)](https://charts.stackradar.io/charts/vaultwarden-kubernetes-secrets/vaultwarden-kubernetes-secrets)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 13 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.