StackRadar

matrix 3.31.0 Helm chart

zekker6Verified publisher

Scored 30 Sept 2026

A Helm chart to deploy a Matrix homeserver stack into Kubernetes

Version 3.31.0 14 days agoapp version v1.161.0 3Artifact Hub

matrix 3.31.0 deploys 4 container images: instrumentisto/coturn, devture/exim-relay, vectorim/riot-web and matrixdotorg/synapse. Across them, 368 findings — 3 critical, 20 high. The highest contribution is ALPINE-CVE-2021-3711 in openssl 1.1.1k-r0, fixed in 1.1.1l-r0.

Radar Score

5,840320112233

368 findings over 4 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
instrumentisto/coturn4.51827121,310
devture/exim-relay4.98-r0-4101631633
vectorim/riot-webv1.7.3311243111,897
matrixdotorg/synapse×2v1.161.000261892,078

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Critical findings

2 distinct across the version’s images

Critical: findings whose contribution to the Radar Score is 70–100. Show every band

SeverityAdvisoryPackageFixed in
CriticalALPINE-CVE-2021-3711openssl@1.1.1k-r01.1.1l-r0
CriticalALPINE-CVE-2025-15467openssl@3.3.2-r43.3.6-r0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
3.32.0latestyesterdayv1.162.0——
3.31.014 days agov1.161.03201122335,840
3.30.027 days agov1.160.03201102255,777

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/zekker6/matrix.svg)](https://charts.stackradar.io/charts/zekker6/matrix)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 17 Sept 2026 · scanned 1 Oct 2026 · advisories as of 1 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.