pulsar Helm chart

Name: pulsar Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

apache-pulsar-helm-chart-repo

Scored 22 Sept 2026

Apache Pulsar Helm chart for Kubernetes

Latest 1.0.32deploys tag 2.6.1 1Artifact Hub

pulsar 1.0.32 deploys 2 container images: apachepulsar/pulsar and apachepulsar/pulsar-all. Across the 1 measured, 358 findings — 9 critical, 13 high — 6 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.10.0, fixed in 2.12.2.

Radar Score

6,680913141195

358 findings over 1 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
apachepulsar/pulsar×12	2.6.1	913141195	6,680
apachepulsar/pulsar-all×2	2.6.1	—	not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

358 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-jfh8-c2jp-5v3qKEV	log4j-core@2.10.0	2.12.2
Critical	GHSA-7rjr-3q55-vv33KEV	log4j-core@2.10.0	2.12.2
Critical	GHSA-2qrg-x229-3v8q	log4j@1.2.17	no fix listed
Critical	GHSA-p6xc-xr62-6r2g	log4j-core@2.10.0	2.12.3
Critical	GHSA-65fg-84f6-3jq3	log4j@1.2.17	no fix listed
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.26	2.0
Critical	GHSA-jg2g-4rjg-cmqh	pulsar-functions-worker@2.6.1	2.10.6
Critical	GHSA-f7vh-qwp3-x37m	log4j@1.2.17	no fix listed
Critical	GHSA-w9p3-5cr8-m3jj	log4j@1.2.17	no fix listed
High	GHSA-fp5r-v3w9-4333	log4j@1.2.17	no fix listed
High	GHSA-8489-44mv-ggj8	log4j-core@2.10.0	2.12.4
High	GHSA-26vr-8j45-3r4w	jetty-server@9.4.11.v20180605	9.4.39
High	GHSA-qppj-fm5r-hxr3KEV	http2-server@9.4.11.v20180605	9.4.53
High	GHSA-qppj-fm5r-hxr3KEV	http2-common@9.4.11.v20180605	9.4.53
High	GHSA-gwcr-j4wh-j3cq	jetty-servlets@9.4.29.v20200521	9.4.41
High	GHSA-m394-8rww-3jr7	jetty-server@9.4.11.v20180605	9.4.37
High	GHSA-x3rh-m7vp-35f2	jetty-server@9.4.29.v20200521	9.4.30.v20200611
High	GHSA-cqqj-4p63-rrmm	netty@3.10.6.Final	no fix listed
High	GHSA-2f88-5hg8-9x2x	maven-compat@3.0.5	3.8.1
High	GHSA-2f88-5hg8-9x2x	maven-core@3.0.5	3.8.1
High	DLA-3621-1KEV	nghttp2@1.36.0-2+deb10u1	1.36.0-2+deb10u2
High	DSA-4777-1KEV	freetype@2.9.1-3+deb10u1	2.9.1-3+deb10u2
Medium	DLA-3816-1	bind9@1:9.11.5.P4+dfsg-5.1+deb10u1	1:9.11.5.P4+dfsg-5.1+deb10u11
Medium	GHSA-8vhq-qq4p-grq3	plexus-utils@2.0.6	3.0.16
Medium	DSA-5169-1	openssl@1.1.1d-0+deb10u2	1.1.1n-0+deb10u3
Medium	DLA-3807-1	glibc@2.28-10	2.28-10+deb10u3
Medium	GHSA-8q59-q68h-6hv4	pyyaml@3.13	5.4
Medium	DSA-4963-1	openssl@1.1.1d-0+deb10u2	1.1.1d-0+deb10u7
Medium	GHSA-4jrv-ppp4-jm57	gson@2.8.2	2.8.9
Medium	GHSA-mc84-pj99-q6hh	commons-compress@1.19	1.21
Medium	DLA-3804-1	nghttp2@1.36.0-2+deb10u1	1.36.0-2+deb10u3
Medium	DSA-4845-1	openldap@2.4.47+dfsg-3+deb10u2	2.4.47+dfsg-3+deb10u5
Medium	GHSA-rprw-h62v-c2w7	pyyaml@3.13	5.1
Medium	DSA-5139-1	openssl@1.1.1d-0+deb10u2	1.1.1n-0+deb10u2
Medium	DSA-4909-1	bind9@1:9.11.5.P4+dfsg-5.1+deb10u1	1:9.11.5.P4+dfsg-5.1+deb10u5
Medium	GHSA-crv7-7245-f45f	commons-compress@1.19	1.21
Medium	GHSA-7hfm-57qf-j43q	commons-compress@1.19	1.21
Medium	DLA-3449-1	openssl@1.1.1d-0+deb10u2	1.1.1n-0+deb10u5
Medium	DSA-5103-1	openssl@1.1.1d-0+deb10u2	1.1.1d-0+deb10u8
Medium	GHSA-xqfj-vm6h-2x34	commons-compress@1.19	1.21
Medium	DSA-5140-1	openldap@2.4.47+dfsg-3+deb10u2	2.4.47+dfsg-3+deb10u7
Medium	DSA-4857-1	bind9@1:9.11.5.P4+dfsg-5.1+deb10u1	1:9.11.5.P4+dfsg-5.1+deb10u3
Medium	DSA-4860-1	openldap@2.4.47+dfsg-3+deb10u2	2.4.47+dfsg-3+deb10u6
Medium	DSA-4875-1	openssl@1.1.1d-0+deb10u2	1.1.1d-0+deb10u6
Medium	GHSA-wm47-8v5p-wjpj	netty@3.10.6.Final	no fix listed
Medium	GHSA-wm47-8v5p-wjpj	netty-codec-http2@4.1.48.Final	4.1.60.Final
Medium	DLA-3325-1	openssl@1.1.1d-0+deb10u2	1.1.1n-0+deb10u4
Medium	GHSA-xp2r-g8qq-44hh	pulsar-functions-worker@2.6.1	2.10.6
Medium	GHSA-p979-4mfw-53vg	netty@3.10.6.Final	no fix listed
Medium	DSA-4661-1	openssl@1.1.1d-0+deb10u2	1.1.1d-0+deb10u3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.32latest	—	2.6.1	913141195	6,680

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/apache-pulsar-helm-chart-repo/pulsar.svg)](https://charts.stackradar.io/charts/apache-pulsar-helm-chart-repo/pulsar)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.