StackRadar

apicurio-registry Helm chart

apicurio-registry-helmVerified publisher

Scored 14 Sept 2026

Install and configure Apicurio Registry in Kubernetes.

Latest 3.8.0deploys tag 2.5.8.Final 7Artifact Hub

apicurio-registry 3.8.0 deploys 2 container images: quay.io/apicurio/apicurio-registry-mem and quay.io/apicurio/apicurio-registry-kube-sync. Across them, 392 findings7 critical, 15 high 3 on CISA KEV. The highest contribution is ALPINE-CVE-2020-15999 in freetype 2.10.1-r0, fixed in 2.10.1-r1.

Radar Score

6,675715150220

392 findings over 2 of 2 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
quay.io/apicurio/apicurio-registry-mem2.5.8.Final49961484,164
quay.io/apicurio/apicurio-registry-kube-sync1.0.13654722,511

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

169 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowRHSA-2026:1631python3@3.6.8-56.el8_90:3.6.8-72.el8_10
LowGHSA-g3pr-3p32-fp23micrometer-core@1.7.4no fix listed
LowRHSA-2026:4728libpng@2:1.6.34-5.el82:1.6.34-10.el8_10
LowRHSA-2025:3852java-17-openjdk@1:17.0.9.0.9-2.el81:17.0.15.0.6-2.el8
LowRHSA-2026:7667nghttp2@1.33.0-5.el8_90:1.33.0-6.el8_10.2
LowGHSA-cxrx-q234-m22mquarkus-http-core@5.0.3.Final5.3.4
LowRHSA-2026:11077python3@3.6.8-56.el8_90:3.6.8-76.el8_10
LowGHSA-57rv-r2g8-2cj3netty-codec-http@4.1.68.Final4.1.133.Final
LowRHSA-2024:2973libX11@1.6.8-6.el80:1.6.8-8.el8
LowRHSA-2025:22063cups@1:2.2.6-54.el8_91:2.2.6-64.el8_10
LowRHSA-2026:56219python3@3.6.8-56.el8_90:3.6.8-78.el8_10
LowGHSA-5qcv-4rpc-jp93kafka-clients@3.5.13.9.2
LowALPINE-CVE-2021-22923curl@7.67.0-r07.79.0-r0
LowGHSA-qcxp-gm7m-4j5vquarkus-vertx-http@2.4.2.Final3.20.6.2
LowGHSA-6fmv-xxpf-w3cwplexus-utils@3.3.03.6.1
LowRHSA-2026:0337openssl@1:1.1.1k-9.el8_71:1.1.1k-14.el8_10
LowALPINE-CVE-2020-14363libx11@1.6.9-r01.6.12-r0
LowRHSA-2025:14560python3@3.6.8-56.el8_90:3.6.8-71.el8_10
LowGHSA-pwqr-wmgm-9rr8netty-codec-http@4.1.68.Final4.1.132.Final
LowRHSA-2026:39320python3@3.6.8-56.el8_90:3.6.8-77.el8_10
LowGHSA-rc95-pcm8-65v9quarkus-vertx-http@2.4.2.Final3.20.6.1
LowGHSA-45q3-82m4-75jrnetty-handler-proxy@4.1.68.Final4.1.133.Final
LowGHSA-h2qv-fj59-j46jnetty-codec-haproxy@4.1.68.Final4.1.135.Final
LowRHSA-2025:13203libxml2@2.9.7-16.el8_8.10:2.9.7-21.el8_10.3
LowGHSA-cc37-9q2j-3hfvnetty-codec-haproxy@4.1.68.Final4.1.135.Final
LowRHSA-2024:0155gnutls@3.6.16-7.el80:3.6.16-8.el8_9
LowGHSA-3wrr-7qpf-2prhjackson-databind@2.12.52.14.0
LowGHSA-w33c-445m-f8w7okio@1.17.21.17.6
LowRHSA-2026:61766glib2@2.56.4-161.el80:2.56.4-177.el8_10
LowGHSA-9895-g6x5-xwcpquarkus-vertx-http@2.4.2.Final2.13.5.Final
LowRHSA-2025:18286libssh@0.9.6-10.el8_80:0.9.6-15.el8_10
LowGHSA-3fhx-3vvg-2j84quarkus-core@2.4.2.Final2.16.8.Final
LowGHSA-6qvw-249j-h44cjose4j@0.9.30.9.4
LowGHSA-c4c3-7fpv-j4q5netty-handler@4.1.68.Final4.1.137.Final
LowRHSA-2026:36728libtasn1@4.13-4.el8_70:4.13-6.el8_10
LowRHSA-2024:3268krb5@1.18.2-26.el8_90:1.18.2-27.el8_10
LowRHSA-2026:42090glib2@2.56.4-161.el80:2.56.4-170.el8_10
LowRHSA-2026:3042openssl@1:1.1.1k-9.el8_71:1.1.1k-15.el8_6
LowRHSA-2026:15953glib2@2.56.4-161.el80:2.56.4-169.el8_10
LowRHSA-2024:0105nss@3.90.0-3.el8_80:3.90.0-4.el8_9
LowRHBA-2024:6680nss@3.90.0-3.el8_80:3.101.0-7.el8_8
LowGHSA-fx2c-96vj-985vnetty-codec-haproxy@4.1.68.Final4.1.86.Final
LowRHSA-2024:9502expat@2.2.5-11.el80:2.2.5-16.el8_10
LowRHSA-2026:2389brotli@1.0.6-3.el80:1.0.6-4.el8_10
LowGHSA-5pvg-856g-cp85netty-resolver-dns@4.1.68.Final4.1.135.Final
LowGHSA-hhhw-99gj-p3c3snakeyaml@1.291.31
LowRHSA-2025:23383curl@7.61.1-33.el80:7.61.1-34.el8_10.9
LowRHSA-2024:0119libxml2@2.9.7-16.el8_8.10:2.9.7-18.el8_9
LowRHSA-2024:4265cups@1:2.2.6-54.el8_91:2.2.6-60.el8_10
LowGHSA-5jpm-x58v-624vnetty-codec-http@4.1.68.Final4.1.108.Final

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
3.8.0latest2.5.8.Final7151502206,675

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/apicurio-registry-helm/apicurio-registry.svg)](https://charts.stackradar.io/charts/apicurio-registry-helm/apicurio-registry)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 13 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.