StackRadar

Scored 22 Sept 2026

Apache Pulsar Helm chart for Kubernetes

Latest 1.0.32deploys tag 2.6.1 1Artifact Hub

pulsar 1.0.32 deploys 2 container images: apachepulsar/pulsar and apachepulsar/pulsar-all. Across the 1 measured, 358 findings9 critical, 13 high 6 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.10.0, fixed in 2.12.2.

Radar Score

6,680913141195

358 findings over 1 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
apachepulsar/pulsar×122.6.19131411956,680
apachepulsar/pulsar-all×22.6.1not yet scanned

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

High findings

13 distinct across the version’s images

High: findings whose contribution to the Radar Score is 40–69. Show every band

SeverityAdvisoryPackageFixed in
HighGHSA-fp5r-v3w9-4333log4j@1.2.17no fix listed
HighGHSA-8489-44mv-ggj8log4j-core@2.10.02.12.4
HighGHSA-26vr-8j45-3r4wjetty-server@9.4.11.v201806059.4.39
HighGHSA-qppj-fm5r-hxr3KEVhttp2-common@9.4.11.v201806059.4.53
HighGHSA-qppj-fm5r-hxr3KEVhttp2-server@9.4.11.v201806059.4.53
HighGHSA-gwcr-j4wh-j3cqjetty-servlets@9.4.29.v202005219.4.41
HighGHSA-m394-8rww-3jr7jetty-server@9.4.11.v201806059.4.37
HighGHSA-x3rh-m7vp-35f2jetty-server@9.4.29.v202005219.4.30.v20200611
HighGHSA-cqqj-4p63-rrmmnetty@3.10.6.Finalno fix listed
HighGHSA-2f88-5hg8-9x2xmaven-compat@3.0.53.8.1
HighGHSA-2f88-5hg8-9x2xmaven-core@3.0.53.8.1
HighDLA-3621-1KEVnghttp2@1.36.0-2+deb10u11.36.0-2+deb10u2
HighDSA-4777-1KEVfreetype@2.9.1-3+deb10u12.9.1-3+deb10u2

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.32latest2.6.19131411956,680

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/apache-pulsar-helm-chart-repo/pulsar.svg)](https://charts.stackradar.io/charts/apache-pulsar-helm-chart-repo/pulsar)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 21 Sept 2026 · scanned 22 Sept 2026 · advisories as of 22 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.