StackRadar

apicurio-registry 3.8.0 Helm chart

apicurio-registry-helmVerified publisher

Scored 14 Sept 2026

Install and configure Apicurio Registry in Kubernetes.

Version 3.8.0deploys tag 2.5.8.Final 7Artifact Hub

apicurio-registry 3.8.0 deploys 2 container images: quay.io/apicurio/apicurio-registry-mem and quay.io/apicurio/apicurio-registry-kube-sync. Across them, 392 findings7 critical, 15 high 3 on CISA KEV. The highest contribution is ALPINE-CVE-2020-15999 in freetype 2.10.1-r0, fixed in 2.10.1-r1.

Radar Score

6,675715150220

392 findings over 2 of 2 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
quay.io/apicurio/apicurio-registry-mem2.5.8.Final49961484,164
quay.io/apicurio/apicurio-registry-kube-sync1.0.13654722,511

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

169 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowRHSA-2025:14135libarchive@3.3.3-5.el80:3.3.3-6.el8_10
LowALPINE-CVE-2020-8284curl@7.67.0-r07.79.0-r0
LowGHSA-3p8m-j85q-pgmjnetty-codec@4.1.68.Final4.1.125.Final
LowRHSA-2026:2128python3@3.6.8-56.el8_90:3.6.8-73.el8_10
LowGHSA-mj4r-2hfc-f8p6netty-codec@4.1.68.Final4.1.133.Final
LowRHSA-2026:22721expat@2.2.5-11.el80:2.5.0-2.el8_10
LowGHSA-c653-97m9-rcg9netty-handler@4.1.68.Final4.1.135.Final
LowRHSA-2025:4051gnutls@3.6.16-7.el80:3.6.16-8.el8_10.3
LowRHSA-2025:8686glibc@2.28-236.el8.70:2.28-251.el8_10.22
LowGHSA-93wv-jw9v-4972netty-codec-http2@4.1.68.Final4.1.136.Final
LowGHSA-6jqx-86gh-f27wnetty-codec-http@4.1.68.Final4.1.136.Final
LowGHSA-mvh2-crg5-v77cnetty-codec-http@4.1.68.Final4.1.136.Final
LowRHSA-2024:3203systemd@239-78.el80:239-82.el8
LowGHSA-269q-hmxg-m83qnetty-codec-http@4.1.68.Final4.1.77.Final
LowGHSA-558v-64gr-wgg4netty-codec@4.1.68.Final4.1.136.Final
LowRHSA-2025:12450libxml2@2.9.7-16.el8_8.10:2.9.7-21.el8_10.2
LowGHSA-9ph3-v2vh-3qx7vertx-core@4.4.64.4.8
LowRHSA-2025:4049libtasn1@4.13-4.el8_70:4.13-5.el8_10
LowRHSA-2026:57462curl@7.61.1-33.el80:7.61.1-34.el8_10.13
LowRHSA-2024:10779python3@3.6.8-56.el8_90:3.6.8-69.el8_10
LowGHSA-676x-f7gg-47vcnetty-resolver-dns@4.1.68.Final4.1.135.Final
LowRHSA-2024:3347python3@3.6.8-56.el8_90:3.6.8-62.el8_10
LowRHSA-2026:17481rsync@3.1.3-19.el8_7.10:3.1.3-25.el8_10
LowRHSA-2024:3233libssh@0.9.6-10.el8_80:0.9.6-14.el8
LowRHSA-2026:62218libssh@0.9.6-10.el8_80:0.9.6-17.el8_10
LowRHSA-2026:42887java-17-openjdk@1:17.0.9.0.9-2.el81:17.0.20.0.8-1.1.el8
LowALPINE-CVE-2021-23839openssl@1.1.1g-r01.1.1j-r0
LowGHSA-4265-ccf5-phj5commons-compress@1.211.26.0
LowRHSA-2026:0241libpng@2:1.6.34-5.el82:1.6.34-9.el8_10
LowRHSA-2026:0991glib2@2.56.4-161.el80:2.56.4-168.el8_10
LowRHSA-2024:0647rpm@4.14.3-26.el80:4.14.3-28.el8_9
LowRHSA-2025:2722krb5@1.18.2-26.el8_90:1.18.2-31.el8_10
LowALPINE-CVE-2020-14344libx11@1.6.9-r01.6.10-r0
LowALPINE-CVE-2021-22898curl@7.67.0-r07.67.0-r4
LowRHSA-2025:18821java-17-openjdk@1:17.0.9.0.9-2.el81:17.0.17.0.10-1.el8
LowRHSA-2026:36733cups@1:2.2.6-54.el8_91:2.2.6-68.el8_10
LowRHSA-2026:4772glibc@2.28-236.el8.70:2.28-251.el8_10.31
LowGHSA-cphf-4846-3xx9vertx-core@4.1.54.5.24
LowRHSA-2026:16799krb5@1.18.2-26.el8_90:1.18.2-34.el8_10
LowGHSA-c57v-hc7m-8px2quarkus-vertx-http@2.4.2.Final2.13.7.Final
LowGHSA-xxqh-mfjm-7mv9netty-codec-http@4.1.68.Final4.1.133.Final
LowGHSA-h5fg-jpgr-rv9cvertx-web@4.1.54.5.22
LowGHSA-fccg-mwvh-qqg4netty-handler@4.1.68.Final4.1.137.Final
LowRHSA-2025:0422java-17-openjdk@1:17.0.9.0.9-2.el81:17.0.14.0.7-3.el8
LowRHSA-2026:6473python3@3.6.8-56.el8_90:3.6.8-75.el8_10
LowGHSA-q4f6-jm68-57wwnetty-codec-http@4.1.68.Final4.1.136.Final
LowALPINE-CVE-2020-28928musl@1.1.24-r21.1.24-r3
LowGHSA-3677-xxcr-wjqvjose4j@0.9.30.9.6
LowRHSA-2024:1784gnutls@3.6.16-7.el80:3.6.16-8.el8_9.3
LowRHSA-2026:36730libsolv@0.7.20-6.el80:0.7.20-7.el8_10

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
3.8.0latest2.5.8.Final7151502206,675

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/apicurio-registry-helm/apicurio-registry.svg)](https://charts.stackradar.io/charts/apicurio-registry-helm/apicurio-registry)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 13 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.