plausible-analytics Helm chart

Name: plausible-analytics Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

zekker6

Scored 14 Sept 2026

A Helm Chart for Plausible Analytics - a simple and privacy-friendly alternative to Google Analytics

Latest 1.4.0 3 months agoapp version v3.2.1 1Artifact Hub

plausible-analytics 1.4.0 deploys 2 container images: ghcr.io/plausible/community-edition and clickhouse/clickhouse-server. Across them, 93 findings — 0 critical, 2 high. The highest contribution is ALPINE-CVE-2024-6119 in openssl 3.1.4-r5, fixed in 3.1.7-r0.

Radar Score

1,170022368

93 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/plausible/community-edition×2	v3.2.1	001857	859
clickhouse/clickhouse-server×2	24.3.3.102-alpine	02511	311

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

93 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-g6cj-pr64-35w5	cryptography@44.0.3	50.0.0
Low	ALPINE-CVE-2026-34181	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-h35f-9h28-mq5c	setuptools@80.9.0	83.0.0
Low	ALPINE-CVE-2026-40200	musl@1.2.4_git20230717-r4	1.2.4_git20230717-r6
Low	ALPINE-CVE-2023-42364	busybox@1.36.1-r15	1.36.1-r19
Low	ALPINE-CVE-2023-42363	busybox@1.36.1-r15	1.36.1-r17
Low	ALPINE-CVE-2023-42366	busybox@1.36.1-r15	1.36.1-r16
Low	ALPINE-CVE-2023-42365	busybox@1.36.1-r15	1.36.1-r19
Low	GHSA-pq67-6m6q-mj2v	urllib3@1.26.20	2.5.0
Low	GHSA-65pc-fj4g-8rjx	idna@3.10	3.15
Low	GHSA-vp96-hxj8-p424	pyopenssl@25.0.0	26.0.0
Low	ALPINE-CVE-2026-42769	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-76957	expat@2.7.5-r0	2.8.4-r0
Low	GHSA-qccp-gfcp-xxvc	urllib3@1.26.20	2.7.0
Low	ALPINE-CVE-2026-56403	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56404	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56405	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56408	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56406	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56407	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56410	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56411	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2024-13176	openssl@3.1.4-r5	3.1.8-r0
Low	GHSA-537c-gmf6-5ccf	cryptography@44.0.3	48.0.1
Low	ALPINE-CVE-2026-45446	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-4360	python3@3.12.13-r0	3.12.14-r0
Low	ALPINE-CVE-2026-2297	python3@3.12.13-r0	3.12.14-r0
Low	ALPINE-CVE-2026-56412	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-50219	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56409	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56132	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-25645	py3-requests@2.32.5-r0	2.33.1-r0
Low	PYSEC-2026-2275	requests@2.32.5	2.33.0
Low	ALPINE-CVE-2026-42768	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-6042	musl@1.2.4_git20230717-r4	1.2.4_git20230717-r6
Low	ALPINE-CVE-2026-42770	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-m959-cc7f-wv43	cryptography@44.0.3	46.0.6
Low	ALPINE-CVE-2026-56131	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-0864	python3@3.12.13-r0	3.12.14-r0
Low	ALPINE-CVE-2026-4519	python3@3.12.13-r0	3.12.14-r0
Low	ALPINE-CVE-2026-41080	expat@2.7.5-r0	2.8.1-r0
Low	ALPINE-CVE-2025-46394	busybox@1.36.1-r15	1.36.1-r21
Low	ALPINE-CVE-2024-58251	busybox@1.36.1-r15	1.36.1-r21

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.4.0latest	3 months ago	v3.2.1	022368	1,170

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/zekker6/plausible-analytics.svg)](https://charts.stackradar.io/charts/zekker6/plausible-analytics)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.