matrix 3.33.0 Helm chart

Name: matrix Helm chart 3.33.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

zekker6

Scored 17 Oct 2026

A Helm chart to deploy a Matrix homeserver stack into Kubernetes

Version 3.33.0 todayapp version v1.163.0 3Artifact Hub

matrix 3.33.0 deploys 4 container images: instrumentisto/coturn, devture/exim-relay, vectorim/riot-web and matrixdotorg/synapse. Across them, 368 findings — 3 critical, 20 high. The highest contribution is ALPINE-CVE-2021-3711 in openssl 1.1.1k-r0, fixed in 1.1.1l-r0.

Radar Score

5,950320114231

368 findings over 4 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
instrumentisto/coturn	4.5	182811	1,314
devture/exim-relay	4.98-r0-4	101529	595
vectorim/riot-web	v1.7.33	112468	1,934
matrixdotorg/synapse×2	v1.163.0	0025183	2,107

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

340 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2025-69420	openssl@3.3.2-r4	3.3.6-r0
Medium	ALPINE-CVE-2026-28388	openssl@3.3.2-r4	3.3.7-r0
Medium	ALPINE-CVE-2022-27774	curl@7.77.0-r1	7.79.1-r1
Medium	ALPINE-CVE-2023-27535	curl@7.77.0-r1	8.0.1-r0
Medium	DEBIAN-CVE-2019-1010025	glibc@2.41-12+deb13u4	no fix listed
Medium	ALPINE-CVE-2023-27536	curl@7.77.0-r1	8.0.1-r0
Medium	ALPINE-CVE-2026-28387	openssl@3.3.2-r4	3.3.7-r0
Medium	DEBIAN-CVE-2015-9019	libxslt@1.1.35-1.2+deb13u3	no fix listed
Medium	GO-2026-4601	stdlib@go1.24.4	1.25.8
Medium	GO-2026-4981	stdlib@go1.24.4	1.25.10
Medium	ALPINE-CVE-2026-28389	openssl@3.3.2-r4	3.3.7-r0
Medium	ALPINE-CVE-2026-28390	openssl@3.3.2-r4	3.3.7-r0
Low	GO-2026-4977	stdlib@go1.24.4	1.25.10
Low	DEBIAN-CVE-2026-8926	curl@8.14.1-2+deb13u7	no fix listed
Low	DEBIAN-CVE-2026-6653	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	GO-2026-4986	stdlib@go1.24.4	1.25.10
Low	GO-2026-4918	stdlib@go1.24.4	1.25.10
Low	ALPINE-CVE-2021-22924	curl@7.77.0-r1	7.78.0-r0
Low	ALPINE-CVE-2021-23222	postgresql@12.5-r0	12.9-r0
Low	ALPINE-CVE-2026-9076	openssl@3.3.2-r4	3.3.7-r1
Low	ALPINE-CVE-2021-22923	curl@7.77.0-r1	7.78.0-r0
Low	ALPINE-CVE-2026-45445	openssl@3.3.2-r4	3.3.7-r1
Low	GO-2025-4009	stdlib@go1.24.4	1.24.8
Low	DEBIAN-CVE-2026-54411	pam@1.7.0-5	no fix listed
Low	DEBIAN-CVE-2026-74860	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	GO-2025-4006	stdlib@go1.24.4	1.24.8
Low	DEBIAN-CVE-2026-82560	perl@5.40.1-6+deb13u1	no fix listed
Low	ALPINE-CVE-2023-0465	openssl@1.1.1k-r0	1.1.1t-r2
Low	GO-2026-4870	stdlib@go1.24.4	1.25.9
Low	GO-2026-4971	stdlib@go1.24.4	1.25.10
Low	GO-2026-4947	stdlib@go1.24.4	1.25.9
Low	ALPINE-CVE-2025-69419	openssl@3.3.2-r4	3.3.6-r0
Low	GO-2026-5037	stdlib@go1.24.4	1.25.11
Low	ALPINE-CVE-2023-23915	curl@7.77.0-r1	7.79.1-r5
Low	ALPINE-CVE-2023-27538	curl@7.77.0-r1	8.0.1-r0
Low	GO-2026-6603	stdlib@go1.24.4	1.26.9
Low	GO-2026-5972	stdlib@go1.24.4	1.25.13
Low	GO-2026-6088	stdlib@go1.24.4	1.25.13
Low	GO-2026-6089	stdlib@go1.24.4	1.25.13
Low	GO-2026-6090	stdlib@go1.24.4	1.25.13
Low	GO-2026-6611	stdlib@go1.24.4	1.26.9
Low	DEBIAN-CVE-2026-80229	curl@8.14.1-2+deb13u7	no fix listed
Low	GO-2026-5038	stdlib@go1.24.4	1.25.11
Low	DEBIAN-CVE-2024-2236	libgcrypt20@1.11.0-7+deb13u1	no fix listed
Low	GO-2026-6218	stdlib@go1.24.4	1.25.13
Low	ALPINE-CVE-2026-31789	openssl@3.3.2-r4	3.3.7-r0
Low	DEBIAN-CVE-2025-69720	ncurses@6.5+20250216-2	no fix listed
Low	ALPINE-CVE-2026-42766	openssl@3.3.2-r4	3.3.7-r1
Low	ALPINE-CVE-2026-84782	openssl@3.3.2-r4	3.3.7-r2
Low	GO-2026-4342	stdlib@go1.24.4	1.24.12

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.33.0latest	today	v1.163.0	320114231	5,950
3.32.0	17 days ago	v1.162.0	320117260	6,268
3.31.0	30 days ago	v1.161.0	320115237	5,921
3.30.0	1 month ago	v1.160.0	320113229	5,858

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/zekker6/matrix.svg)](https://charts.stackradar.io/charts/zekker6/matrix)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.