StackRadar

apicurio-registry 3.8.0 Helm chart

apicurio-registry-helmVerified publisher

Scored 14 Sept 2026

Install and configure Apicurio Registry in Kubernetes.

Version 3.8.0deploys tag 2.5.8.Final 7Artifact Hub

apicurio-registry 3.8.0 deploys 2 container images: quay.io/apicurio/apicurio-registry-mem and quay.io/apicurio/apicurio-registry-kube-sync. Across them, 392 findings7 critical, 15 high 3 on CISA KEV. The highest contribution is ALPINE-CVE-2020-15999 in freetype 2.10.1-r0, fixed in 2.10.1-r1.

Radar Score

6,675715150220

392 findings over 2 of 2 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
quay.io/apicurio/apicurio-registry-mem2.5.8.Final49961484,164
quay.io/apicurio/apicurio-registry-kube-sync1.0.13654722,511

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

327 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowRHSA-2025:1517libxml2@2.9.7-16.el8_8.10:2.9.7-18.el8_10.2
LowRHSA-2025:21977libssh@0.9.6-10.el8_80:0.9.6-16.el8_10
LowGHSA-5jmj-h7xm-6q6vjackson-databind@2.12.52.18.9
LowGHSA-mfg7-5gfp-c4w3netty-codec-dns@4.1.68.Final4.1.136.Final
LowGHSA-gcjf-9mgh-3p7gnetty-codec-http@4.1.68.Final4.1.136.Final
LowGHSA-v8h7-rr48-vmmvnetty-codec-http@4.1.68.Final4.1.133.Final
LowGHSA-563q-j3cm-6jxmnetty-codec-http2@4.1.68.Final4.1.135.Final
LowGHSA-2c6g-pfx3-w7h8resteasy-core@4.7.3.Final4.7.8.Final
LowRHSA-2026:1852util-linux@2.32.1-43.el80:2.32.1-48.el8_10
LowGHSA-5x3r-wrvg-rp6qnetty-codec-http2@4.1.68.Final4.1.135.Final
LowGHSA-xpw8-rcwv-8f8pnetty-codec-http2@4.1.68.Final4.1.100.Final
LowGHSA-7g45-4rm6-3mm3guava@31.0.1-jre32.0.0-android
LowRHSA-2026:55804nghttp2@1.33.0-5.el8_90:1.33.0-6.el8_10.3
LowRHSA-2026:11349libxml2@2.9.7-16.el8_8.10:2.9.7-21.el8_10.4
LowRHSA-2026:56133attr@2.4.48-3.el80:2.6.0-1.el8_10
LowGHSA-3g76-f9xq-8vp6vertx-core@4.4.6no fix listed
LowGHSA-5mg8-w23w-74h3guava@31.0.1-jre32.0.0-android
LowGHSA-hvcg-qmg6-jm4cnetty-codec-http@4.1.68.Final4.1.135.Final
LowGHSA-45p5-v273-3qqrvertx-web@4.1.54.5.22
LowRHSA-2026:6436rsync@3.1.3-19.el8_7.10:3.1.3-24.el8_10
LowGHSA-wf8f-6423-gfxgjackson-core@2.12.52.13.0
LowGHSA-wh89-7897-x99hnetty-codec-haproxy@4.1.68.Final4.1.136.Final
LowRHSA-2026:61248libxml2@2.9.7-16.el8_8.10:2.9.7-21.el8_10.7
LowRHBA-2026:47115coreutils@8.30-15.el80:8.30-20.el8_10
LowRHSA-2025:12980glibc@2.28-236.el8.70:2.28-251.el8_10.25
LowGHSA-fghv-69vj-qj49netty-codec-http@4.1.68.Final4.1.125.Final
LowRHSA-2026:36734libxml2@2.9.7-16.el8_8.10:2.9.7-21.el8_10.6

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
3.8.0latest2.5.8.Final7151502206,675

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/apicurio-registry-helm/apicurio-registry.svg)](https://charts.stackradar.io/charts/apicurio-registry-helm/apicurio-registry)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 13 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.