umami Helm chart

Name: umami Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

waldo-vision

Scored 14 Sept 2026

Umami is a simple, fast, privacy-focused alternative to Google Analytics.

Latest 0.0.1 3 years agoapp version postgresql-v1.39.5 5Artifact Hub

umami 0.0.1 deploys 1 container image: ghcr.io/umami-software/umami. Across them, 78 findings — 1 critical, 4 high. The highest contribution is GHSA-f82v-jwr5-mffw in next 12.3.2, fixed in 12.3.5.

Radar Score

1,255141855

78 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/umami-software/umami	postgresql-v1.39.5	141855	1,255

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

55 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-34x7-hfp2-rc4v	tar@6.1.11	7.5.7
Low	GHSA-xq7p-g2vc-g82p	base-x@4.0.0	4.0.1
Low	GHSA-rgw5-rvv9-x895	brace-expansion@2.0.1	2.1.4
Low	GHSA-36qx-fr4f-26g5	next@12.3.2	15.5.16
Low	GHSA-f5x3-32g6-xq36	tar@6.1.11	6.2.1
Low	GHSA-qffp-2rhf-9h96	tar@6.1.11	7.5.10
Low	ALPINE-CVE-2023-0465	openssl@1.1.1q-r0	1.1.1t-r2
Low	GHSA-23hp-3jrh-7fpw	tar@6.1.11	7.5.19
Low	GHSA-hmw2-7cc7-3qxx	form-data@2.3.3	2.5.6
Low	GHSA-3x4c-7xq6-9pq8	next@12.3.2	15.5.14
Low	GHSA-7r86-cg39-jmmj	minimatch@3.1.2	3.1.3
Low	GHSA-8qq5-rm4j-mr97	tar@6.1.11	7.5.3
Low	GHSA-23c5-xmqv-rm74	minimatch@3.1.2	3.1.4
Low	GHSA-mh99-v99m-4gvg	brace-expansion@2.0.1	2.1.3
Low	GHSA-73rr-hh4g-fpgx	diff@5.1.0	5.2.2
Low	GHSA-8x88-c5mf-7j5w	tar@6.1.11	7.5.18
Low	GHSA-2g4f-4pwh-qvx6	ajv@6.12.6	6.14.0
Low	GHSA-p8p7-x288-28g6	request@2.88.0	no fix listed
Low	GHSA-r6q2-hw4h-h46w	tar@6.1.11	7.5.4
Low	GHSA-r292-9mhp-454m	tar@6.1.11	7.5.21
Low	GHSA-395f-4hp3-45gv	shell-quote@1.7.4	1.9.0
Low	GHSA-h64f-5h5j-jqjh	next@12.3.2	15.5.16
Low	GHSA-g77x-44xx-532m	next@12.3.2	14.2.7
Low	GHSA-w5hq-g745-h8pq	uuid@3.4.0	11.1.1
Low	GHSA-w4pp-8pjf-rmxw	pacote@13.6.2	21.5.1
Low	GHSA-9ppj-qmqm-q256	tar@6.1.11	7.5.11
Low	GHSA-968p-4wvh-cqc8	@babel/runtime@7.18.9	7.26.10
Low	ALPINE-CVE-2025-26519	musl@1.2.3-r0	1.2.3-r4
Low	GHSA-f886-m6hf-6m8v	brace-expansion@2.0.1	2.0.3
Low	GHSA-ggv3-7p47-pfv8	next@12.3.2	15.5.13
Low	GHSA-83g3-92jg-28cx	tar@6.1.11	7.5.8
Low	GHSA-w8wr-v893-vjvp	tar@6.1.11	7.5.18
Low	GHSA-2wm5-q62r-hmrv	colord@2.9.3	2.9.4
Low	GHSA-9g9p-9gw9-jx7f	next@12.3.2	15.5.10
Low	GHSA-8www-cffh-4q98	umami@1.39.5	2.3.1
Low	GHSA-2xp9-vwfh-vxw4	next@12.3.2	15.5.24
Low	MAL-2022-4691	monorepo-symlink-test@0.0.0	no fix listed
Low	GHSA-g5qg-72qw-gw5v	next@12.3.2	14.2.31
Low	GHSA-gvwx-54wh-qm9j	tar@6.1.11	7.5.17
Low	GHSA-rgj7-g3m4-5g8c	sharp@0.30.7	0.35.4
Low	ALPINE-CVE-2023-42366	busybox@1.35.0-r17	1.35.0-r18
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@2.0.1	2.1.2
Low	GHSA-vmf3-w455-68vh	tar@6.1.11	7.5.16
Low	GHSA-54xq-cgqr-rpm3	sharp@0.30.7	0.32.6
Low	GHSA-xv57-4mr9-wg8v	next@12.3.2	14.2.31
Low	GHSA-36jr-mh4h-2g58	d3-color@2.0.0	3.1.0
Low	GHSA-qpjv-v59x-3qc4	next@12.3.2	14.2.24
Low	GHSA-4mjr-xmp4-gh2g	qs@6.5.3	6.16.0
Low	GHSA-f88m-g3jw-g9cj	sharp@0.30.7	0.35.0
Low	GHSA-6rw7-vpxm-498p	qs@6.5.3	6.14.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.1latest	3 years ago	postgresql-v1.39.5	141855	1,255

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/waldo-vision/umami.svg)](https://charts.stackradar.io/charts/waldo-vision/umami)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.