Charts / Search / Meilisearch digest pinned cosign signed SPDX SBOM SLSA provenance amd64 · arm64 Rebuilt 2026-09-29
Fast, typo-tolerant full-text search engine with an instant-search API, easy to embed for site and in-app search with relevant results out of the box.
Version
The latest line lives at the base page; older lines have their own page so you can pin and verify exactly that version. Only the most recent releases are listed — an older chart pins an older image digest.
Deployed image digest
sha256:e269ac67fdebad54b8cdb1e44245d357796f0ff935d545cc52b99d5058ce9a86Chart OCI version
oci://ghcr.io/quenchworks/charts/meilisearch:0.0.18The chart pins its image by this signed digest, so you never track it yourself. Signatures, SBOM, and provenance attach to the same digest.
Architectures
amd64, arm64
Runs as
nonroot (uid 1001)
Security report (Trivy) C· 0/100 16 fixable · rebuild clears them Full report
Vulnerability detail meilisearch 1.53.2 · 16 CVE CVE Severity Package Installed Fixed in Title CVE-2026-8674 MEDIUM glibc-2.44 2.44-r7 2.44-r8 glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration CVE-2026-8674 MEDIUM glibc-2.44-locale-posix 2.44-r7 2.44-r8 glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration CVE-2026-8674 MEDIUM ld-linux-2.44 2.44-r7 2.44-r8 glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration CVE-2026-8674 MEDIUM libcrypt1-2.44 2.44-r7 2.44-r8 glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration CVE-2026-86805 MEDIUM glibc-2.44 2.44-r7 2.44-r8 glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader CVE-2026-86805 MEDIUM glibc-2.44-locale-posix 2.44-r7 2.44-r8 glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader CVE-2026-86805 MEDIUM ld-linux-2.44 2.44-r7 2.44-r8 glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader CVE-2026-86805 MEDIUM libcrypt1-2.44 2.44-r7 2.44-r8 glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader CVE-2026-89092 MEDIUM glibc-2.44 2.44-r7 2.44-r8 glibc: nscd stack overflow leads to degraded DNS resolution CVE-2026-89092 MEDIUM glibc-2.44-locale-posix 2.44-r7 2.44-r8 glibc: nscd stack overflow leads to degraded DNS resolution CVE-2026-89092 MEDIUM ld-linux-2.44 2.44-r7 2.44-r8 glibc: nscd stack overflow leads to degraded DNS resolution CVE-2026-89092 MEDIUM libcrypt1-2.44 2.44-r7 2.44-r8 glibc: nscd stack overflow leads to degraded DNS resolution CVE-2026-95818 MEDIUM glibc-2.44 2.44-r7 2.44-r8 glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow. CVE-2026-95818 MEDIUM glibc-2.44-locale-posix 2.44-r7 2.44-r8 glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow. CVE-2026-95818 MEDIUM ld-linux-2.44 2.44-r7 2.44-r8 glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow. CVE-2026-95818 MEDIUM libcrypt1-2.44 2.44-r7 2.44-r8 glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.
Close
Security report (Trivy) · image meilisearch 1.53.2
Install the chart Deploy to Kubernetes with hardened defaults. The chart pins its image by signed digest, so you never track it yourself.
Install (latest)
helm install my-meilisearch oci://ghcr.io/quenchworks/charts/meilisearch --version 0.0.18Deploys image (digest-pinned)
ghcr.io/quenchworks/images/meilisearch@sha256:e269ac67fdebad54b8cdb1e44245d357796f0ff935d545cc52b99d5058ce9a86
Chart version 0.0.18
App version 1.53.2
Chart license MIT
App license MIT
Service port 7700
Signed cosign (keyless)
Values schema yes
Last published 2026-09-29 Verify the chart
cosign verify ghcr.io/quenchworks/charts/meilisearch:0.0.18 \
--certificate-identity-regexp 'https://github.com/quenchworks/.+' \
--certificate-oidc-issuer https://token.actions.githubusercontent.comTransparency
The chart publishes its attestations on GitHub and the image it deploys carries its own on the same digest, publicly verifiable with the commands above. Both log to the Sigstore transparency log (Rekor), which cosign verify checks for you.
Upstream project: https://github.com/meilisearch/meilisearch
