umami Helm chart

Name: umami Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

waldo-vision

Scored 14 Sept 2026

Umami is a simple, fast, privacy-focused alternative to Google Analytics.

Latest 0.0.1 3 years agoapp version postgresql-v1.39.5 5Artifact Hub

umami 0.0.1 deploys 1 container image: ghcr.io/umami-software/umami. Across them, 78 findings — 1 critical, 4 high. The highest contribution is GHSA-f82v-jwr5-mffw in next 12.3.2, fixed in 12.3.5.

Radar Score

1,255141855

78 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/umami-software/umami	postgresql-v1.39.5	141855	1,255

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

78 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-f82v-jwr5-mffw	next@12.3.2	12.3.5
High	ALPINE-CVE-2023-0286	openssl@1.1.1q-r0	1.1.1t-r0
High	ALPINE-CVE-2023-2650	openssl@1.1.1q-r0	1.1.1u-r0
High	GHSA-r5fr-rjxr-66jc	lodash@4.17.21	4.18.0
High	ALPINE-CVE-2022-4450	openssl@1.1.1q-r0	1.1.1t-r0
Medium	GHSA-2p57-rm9w-gvfp	ip@2.0.0	no fix listed
Medium	ALPINE-CVE-2022-4304	openssl@1.1.1q-r0	1.1.1t-r0
Medium	ALPINE-CVE-2023-0215	openssl@1.1.1q-r0	1.1.1t-r0
Medium	GHSA-7gfc-8cq8-jh5f	next@12.3.2	14.2.15
Medium	ALPINE-CVE-2023-0464	openssl@1.1.1q-r0	1.1.1t-r1
Medium	GHSA-fjxv-7rqg-78g4	form-data@2.3.3	2.5.4
Medium	GHSA-c2qf-rxjj-qqgw	semver@7.3.8	7.5.2
Medium	ALPINE-CVE-2023-3446	openssl@1.1.1q-r0	1.1.1u-r2
Medium	GHSA-72xf-g2v4-qvf3	tough-cookie@2.4.3	4.1.3
Medium	GHSA-4342-x723-ch2f	next@12.3.2	14.2.32
Medium	GHSA-rc47-6667-2j5j	http-cache-semantics@4.1.0	4.1.1
Medium	ALPINE-CVE-2023-5678	openssl@1.1.1q-r0	1.1.1w-r1
Medium	GHSA-p9j2-gv94-2wf4	next@12.3.2	15.5.21
Medium	GHSA-w7jw-789q-3m8p	shell-quote@1.7.4	1.8.4
Medium	GHSA-f23m-r3pf-42rh	lodash@4.17.21	4.18.0
Medium	GHSA-xxjr-mmjv-4gpg	lodash@4.17.21	4.17.23
Medium	GHSA-3xgq-45jj-v275	cross-spawn@6.0.5	6.0.6
Medium	GHSA-3ppc-4f35-3m26	minimatch@3.1.2	3.1.3
Low	GHSA-34x7-hfp2-rc4v	tar@6.1.11	7.5.7
Low	GHSA-xq7p-g2vc-g82p	base-x@4.0.0	4.0.1
Low	GHSA-rgw5-rvv9-x895	brace-expansion@2.0.1	2.1.4
Low	GHSA-36qx-fr4f-26g5	next@12.3.2	15.5.16
Low	GHSA-f5x3-32g6-xq36	tar@6.1.11	6.2.1
Low	GHSA-qffp-2rhf-9h96	tar@6.1.11	7.5.10
Low	ALPINE-CVE-2023-0465	openssl@1.1.1q-r0	1.1.1t-r2
Low	GHSA-23hp-3jrh-7fpw	tar@6.1.11	7.5.19
Low	GHSA-hmw2-7cc7-3qxx	form-data@2.3.3	2.5.6
Low	GHSA-3x4c-7xq6-9pq8	next@12.3.2	15.5.14
Low	GHSA-7r86-cg39-jmmj	minimatch@3.1.2	3.1.3
Low	GHSA-8qq5-rm4j-mr97	tar@6.1.11	7.5.3
Low	GHSA-23c5-xmqv-rm74	minimatch@3.1.2	3.1.4
Low	GHSA-mh99-v99m-4gvg	brace-expansion@2.0.1	2.1.3
Low	GHSA-73rr-hh4g-fpgx	diff@5.1.0	5.2.2
Low	GHSA-8x88-c5mf-7j5w	tar@6.1.11	7.5.18
Low	GHSA-2g4f-4pwh-qvx6	ajv@6.12.6	6.14.0
Low	GHSA-p8p7-x288-28g6	request@2.88.0	no fix listed
Low	GHSA-r6q2-hw4h-h46w	tar@6.1.11	7.5.4
Low	GHSA-r292-9mhp-454m	tar@6.1.11	7.5.21
Low	GHSA-395f-4hp3-45gv	shell-quote@1.7.4	1.9.0
Low	GHSA-h64f-5h5j-jqjh	next@12.3.2	15.5.16
Low	GHSA-g77x-44xx-532m	next@12.3.2	14.2.7
Low	GHSA-w5hq-g745-h8pq	uuid@3.4.0	11.1.1
Low	GHSA-w4pp-8pjf-rmxw	pacote@13.6.2	21.5.1
Low	GHSA-9ppj-qmqm-q256	tar@6.1.11	7.5.11
Low	GHSA-968p-4wvh-cqc8	@babel/runtime@7.18.9	7.26.10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.1latest	3 years ago	postgresql-v1.39.5	141855	1,255

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/waldo-vision/umami.svg)](https://charts.stackradar.io/charts/waldo-vision/umami)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.