matrix 3.31.0 Helm chart

Name: matrix Helm chart 3.31.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

zekker6

Not scored yet

A Helm chart to deploy a Matrix homeserver stack into Kubernetes

Version 3.31.0 todayapp version v1.161.0 3Artifact Hub

matrix 3.31.0 deploys 4 container images: instrumentisto/coturn, devture/exim-relay, vectorim/riot-web and matrixdotorg/synapse. The highest contribution is ALPINE-CVE-2021-3711 in openssl 1.1.1k-r0, fixed in 1.1.1l-r0.

Radar Score

Not yet scored

The daily scoring run has not folded the 4 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
instrumentisto/coturn	4.5	182712	1,308
devture/exim-relay	4.98-r0-4	011116	382
vectorim/riot-web	v1.7.33	1124311	1,890
matrixdotorg/synapse×2	v1.161.0	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

115 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2021-42378	busybox@1.33.1-r2	1.33.1-r6
Medium	ALPINE-CVE-2021-42382	busybox@1.33.1-r2	1.33.1-r6
Medium	ALPINE-CVE-2021-42384	busybox@1.33.1-r2	1.33.1-r6
Medium	ALPINE-CVE-2021-42386	busybox@1.33.1-r2	1.33.1-r6
Medium	ALPINE-CVE-2021-23214	postgresql@12.5-r0	12.9-r0
Medium	ALPINE-CVE-2021-33560	libgcrypt@1.9.3-r0	1.9.4-r0
Medium	ALPINE-CVE-2021-42383	busybox@1.33.1-r2	1.33.1-r6
Medium	ALPINE-CVE-2021-22876	curl@7.69.1-r3	7.76.0-r0
Medium	ALPINE-CVE-2021-22925	curl@7.77.0-r1	7.78.0-r0
Medium	ALPINE-CVE-2022-2097	openssl@1.1.1k-r0	1.1.1q-r0
Medium	ALPINE-CVE-2025-9230	openssl@3.3.2-r4	3.3.5-r0
Medium	ALPINE-CVE-2023-23914	curl@7.77.0-r1	7.79.1-r5
Medium	ALPINE-CVE-2024-12797	openssl@3.3.2-r4	3.3.3-r0
Medium	ALPINE-CVE-2021-22947	curl@7.77.0-r1	7.79.0-r0
Medium	ALPINE-CVE-2025-9231	openssl@3.3.2-r4	3.3.5-r0
Medium	ALPINE-CVE-2022-43552	curl@7.77.0-r1	7.79.1-r4
Medium	ALPINE-CVE-2022-29458	ncurses@6.2_p20210612-r0	6.2_p20210612-r1
Medium	ALPINE-CVE-2023-23916	curl@7.77.0-r1	7.79.1-r5
Medium	ALPINE-CVE-2026-31790	openssl@3.3.2-r4	3.3.7-r0
Medium	ALPINE-CVE-2021-32028	postgresql@12.5-r0	12.7-r0
Medium	ALPINE-CVE-2021-32029	postgresql@12.5-r0	12.7-r0
Medium	ALPINE-CVE-2025-9232	openssl@3.3.2-r4	3.3.5-r0
Medium	ALPINE-CVE-2021-3677	postgresql@12.5-r0	12.8-r0
Medium	ALPINE-CVE-2023-27537	curl@7.77.0-r1	8.0.1-r0
Medium	ALPINE-CVE-2025-69421	openssl@3.3.2-r4	3.3.6-r0
Medium	ALPINE-CVE-2026-28388	openssl@3.3.2-r4	3.3.7-r0
Medium	ALPINE-CVE-2026-28387	openssl@3.3.2-r4	3.3.7-r0
Medium	ALPINE-CVE-2025-69420	openssl@3.3.2-r4	3.3.6-r0
Medium	ALPINE-CVE-2026-28389	openssl@3.3.2-r4	3.3.7-r0
Medium	ALPINE-CVE-2026-28390	openssl@3.3.2-r4	3.3.7-r0
Low	ALPINE-CVE-2023-27535	curl@7.77.0-r1	8.0.1-r0
Low	ALPINE-CVE-2022-27774	curl@7.77.0-r1	7.79.1-r1
Low	ALPINE-CVE-2023-27536	curl@7.77.0-r1	8.0.1-r0
Low	ALPINE-CVE-2021-22924	curl@7.77.0-r1	7.78.0-r0
Low	ALPINE-CVE-2021-23222	postgresql@12.5-r0	12.9-r0
Low	ALPINE-CVE-2021-22923	curl@7.77.0-r1	7.78.0-r0
Low	ALPINE-CVE-2023-23915	curl@7.77.0-r1	7.79.1-r5
Low	ALPINE-CVE-2023-0465	openssl@1.1.1k-r0	1.1.1t-r2
Low	ALPINE-CVE-2025-69419	openssl@3.3.2-r4	3.3.6-r0
Low	ALPINE-CVE-2026-31789	openssl@3.3.2-r4	3.3.7-r0
Low	ALPINE-CVE-2023-27538	curl@7.77.0-r1	8.0.1-r0
Low	ALPINE-CVE-2026-22184	zlib@1.3.1-r2	1.3.2-r0
Low	ALPINE-CVE-2020-8284	curl@7.69.1-r3	7.74.0-r0
Low	ALPINE-CVE-2020-15358	sqlite@3.32.1-r0	3.32.1-r1
Low	ALPINE-CVE-2025-15468	openssl@3.3.2-r4	3.3.6-r0
Low	ALPINE-CVE-2021-22890	curl@7.69.1-r3	7.76.0-r0
Low	ALPINE-CVE-2021-23839	openssl@1.1.1i-r0	1.1.1j-r0
Low	ALPINE-CVE-2021-22898	curl@7.69.1-r3	7.77.0-r0
Low	ALPINE-CVE-2025-26519	musl@1.2.5-r8	1.2.5-r9
Low	ALPINE-CVE-2022-35252	curl@7.77.0-r1	7.79.1-r3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.31.0latest	today	v1.161.0	—	—
3.30.0	14 days ago	v1.160.0	221105220	5,595

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/zekker6/matrix.svg)](https://charts.stackradar.io/charts/zekker6/matrix)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.