StackRadar

umami 0.0.1 Helm chart

waldo-visionVerified publisher

Scored 14 Sept 2026

Umami is a simple, fast, privacy-focused alternative to Google Analytics.

Version 0.0.1 3 years agoapp version postgresql-v1.39.5 5Artifact Hub

umami 0.0.1 deploys 1 container image: ghcr.io/umami-software/umami. Across them, 78 findings — 1 critical, 4 high. The highest contribution is GHSA-f82v-jwr5-mffw in next 12.3.2, fixed in 12.3.5.

Radar Score

1,255141855

78 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
ghcr.io/umami-software/umamipostgresql-v1.39.51418551,255

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

78 distinct across the version’s images
SeverityAdvisoryPackageFixed in
CriticalGHSA-f82v-jwr5-mffwnext@12.3.212.3.5
HighALPINE-CVE-2023-0286openssl@1.1.1q-r01.1.1t-r0
HighALPINE-CVE-2023-2650openssl@1.1.1q-r01.1.1u-r0
HighGHSA-r5fr-rjxr-66jclodash@4.17.214.18.0
HighALPINE-CVE-2022-4450openssl@1.1.1q-r01.1.1t-r0
MediumGHSA-2p57-rm9w-gvfpip@2.0.0no fix listed
MediumALPINE-CVE-2022-4304openssl@1.1.1q-r01.1.1t-r0
MediumALPINE-CVE-2023-0215openssl@1.1.1q-r01.1.1t-r0
MediumGHSA-7gfc-8cq8-jh5fnext@12.3.214.2.15
MediumALPINE-CVE-2023-0464openssl@1.1.1q-r01.1.1t-r1
MediumGHSA-fjxv-7rqg-78g4form-data@2.3.32.5.4
MediumGHSA-c2qf-rxjj-qqgwsemver@7.3.87.5.2
MediumALPINE-CVE-2023-3446openssl@1.1.1q-r01.1.1u-r2
MediumGHSA-72xf-g2v4-qvf3tough-cookie@2.4.34.1.3
MediumGHSA-4342-x723-ch2fnext@12.3.214.2.32
MediumGHSA-rc47-6667-2j5jhttp-cache-semantics@4.1.04.1.1
MediumALPINE-CVE-2023-5678openssl@1.1.1q-r01.1.1w-r1
MediumGHSA-p9j2-gv94-2wf4next@12.3.215.5.21
MediumGHSA-w7jw-789q-3m8pshell-quote@1.7.41.8.4
MediumGHSA-f23m-r3pf-42rhlodash@4.17.214.18.0
MediumGHSA-xxjr-mmjv-4gpglodash@4.17.214.17.23
MediumGHSA-3xgq-45jj-v275cross-spawn@6.0.56.0.6
MediumGHSA-3ppc-4f35-3m26minimatch@3.1.23.1.3
LowGHSA-34x7-hfp2-rc4vtar@6.1.117.5.7
LowGHSA-xq7p-g2vc-g82pbase-x@4.0.04.0.1
LowGHSA-rgw5-rvv9-x895brace-expansion@2.0.12.1.4
LowGHSA-36qx-fr4f-26g5next@12.3.215.5.16
LowGHSA-f5x3-32g6-xq36tar@6.1.116.2.1
LowGHSA-qffp-2rhf-9h96tar@6.1.117.5.10
LowALPINE-CVE-2023-0465openssl@1.1.1q-r01.1.1t-r2
LowGHSA-23hp-3jrh-7fpwtar@6.1.117.5.19
LowGHSA-hmw2-7cc7-3qxxform-data@2.3.32.5.6
LowGHSA-3x4c-7xq6-9pq8next@12.3.215.5.14
LowGHSA-7r86-cg39-jmmjminimatch@3.1.23.1.3
LowGHSA-8qq5-rm4j-mr97tar@6.1.117.5.3
LowGHSA-23c5-xmqv-rm74minimatch@3.1.23.1.4
LowGHSA-mh99-v99m-4gvgbrace-expansion@2.0.12.1.3
LowGHSA-73rr-hh4g-fpgxdiff@5.1.05.2.2
LowGHSA-8x88-c5mf-7j5wtar@6.1.117.5.18
LowGHSA-2g4f-4pwh-qvx6ajv@6.12.66.14.0
LowGHSA-p8p7-x288-28g6request@2.88.0no fix listed
LowGHSA-r6q2-hw4h-h46wtar@6.1.117.5.4
LowGHSA-r292-9mhp-454mtar@6.1.117.5.21
LowGHSA-395f-4hp3-45gvshell-quote@1.7.41.9.0
LowGHSA-h64f-5h5j-jqjhnext@12.3.215.5.16
LowGHSA-g77x-44xx-532mnext@12.3.214.2.7
LowGHSA-w5hq-g745-h8pquuid@3.4.011.1.1
LowGHSA-w4pp-8pjf-rmxwpacote@13.6.221.5.1
LowGHSA-9ppj-qmqm-q256tar@6.1.117.5.11
LowGHSA-968p-4wvh-cqc8@babel/runtime@7.18.97.26.10

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.0.1latest3 years agopostgresql-v1.39.51418551,255

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/waldo-vision/umami.svg)](https://charts.stackradar.io/charts/waldo-vision/umami)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.