d.vazquezm.2021_helm Helm chart

Name: d.vazquezm.2021_helm Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

apphelm

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 1.0.0 3 years agodeploys tag 1.0.0 0Artifact Hub

d.vazquezm.2021_helm 1.0.0 deploys 6 container images: davidvmar/urjc-davidvmar-external-service, library/mongo, library/mysql, davidvmar/urjc-davidvmar-rabbitmq and 2 more. Across them, 1,327 findings — 9 critical, 40 high — 9 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-beans 5.2.1.RELEASE, fixed in 5.2.20.RELEASE.

Radar Score

19,745940368909

1,327 findings over 6 of 6 images measured

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
davidvmar/urjc-davidvmar-external-service	1.0.0	0674130	3,458
library/mongo	5.0.6-focal	716125356	7,280
library/mysql	8.0.28	0116156	1,800
davidvmar/urjc-davidvmar-rabbitmq	1.0.0	03148	560
davidvmar/urjc-davidvmar-server	1.0.0	0684128	3,606
davidvmar/urjc-davidvmar-worker	1.0.1	2855131	3,041

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

High findings

33 distinct across the version’s images

High: findings whose contribution to the Radar Score is 40–69. Show every band

Severity	Advisory	Package	Fixed in
High	UBUNTU-CVE-2022-0778	openssl@1.1.1f-1ubuntu2.12	1.1.1f-1ubuntu2.fips.12
High	GHSA-4wrc-f8pq-fpqp	spring-web@5.2.1.RELEASE	6.0.0
High	GHSA-c4w7-xm78-47vh	y18n@4.0.0	4.0.1
High	ALPINE-CVE-2023-0286	openssl@1.1.1q-r0	1.1.1t-r0
High	UBUNTU-CVE-2023-0286	openssl@1.1.1f-1ubuntu2.12	1.1.1f-1ubuntu2.17
High	UBUNTU-CVE-2024-2398	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.22
High	UBUNTU-CVE-2021-23840	openssl@1.1.1f-1ubuntu2.12	1.1.1f-1ubuntu2.fips.7.2
High	ALPINE-CVE-2023-2650	openssl@1.1.1q-r0	1.1.1u-r0
High	UBUNTU-CVE-2023-2650	openssl@1.1.1f-1ubuntu2.12	1.1.1f-1ubuntu2.19
High	UBUNTU-CVE-2021-3712	openssl@1.1.1f-1ubuntu2.12	no fix listed
High	GHSA-45x7-px36-x8w8	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20231218163308-9d2ee975ef9f
High	UBUNTU-CVE-2023-48795	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.4
High	UBUNTU-CVE-2022-37434	zlib@1:1.2.11.dfsg-2ubuntu1.3	1:1.2.11.dfsg-2ubuntu1.5
High	GHSA-ghjx-3jg5-h6r2	mercurial@4.0	4.1.3
High	UBUNTU-CVE-2021-3449	openssl@1.1.1f-1ubuntu2.12	1.1.1f-1ubuntu2.fips.7
High	UBUNTU-CVE-2024-28182	nghttp2@1.40.0-1build1	1.40.0-1ubuntu0.3
High	GHSA-xr7r-f8xq-vfvv	github.com/opencontainers/runc@v1.0.1	1.1.12
High	GHSA-rvwf-54qp-4r6v	snakeyaml@1.25	1.26
High	UBUNTU-CVE-2024-2511	openssl@1.1.1f-1ubuntu2.12	1.1.1f-1ubuntu2.23
High	UBUNTU-CVE-2024-3596	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.8
High	GHSA-w573-4hg7-7wgq	decode-uri-component@0.2.0	0.2.1
High	GHSA-558x-2xjg-6232	spring-expression@5.2.1.RELEASE	5.2.20.RELEASE
High	UBUNTU-CVE-2022-35737	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.5
High	UBUNTU-CVE-2022-32206	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.12
High	ALPINE-CVE-2022-4450	openssl@1.1.1q-r0	1.1.1t-r0
High	UBUNTU-CVE-2022-4450	openssl@1.1.1f-1ubuntu2.12	1.1.1f-1ubuntu2.17
High	GHSA-3jfq-g458-7qm9	tar@4.4.13	4.4.14
High	GHSA-288c-cq4h-88gq	jackson-databind@2.10.0	2.10.5.1
High	GHSA-cqqj-4p63-rrmm	netty-codec-http@4.1.42.Final	4.1.44
High	DLA-2415-1KEV	freetype@2.6.3-3.2+deb9u1	2.6.3-3.2+deb9u2
High	DLA-2608-1KEV	jquery@3.1.1-2+deb9u1	3.1.1-2+deb9u2
High	DLA-4104-1KEV	freetype@2.10.4+dfsg-1+deb11u1	2.10.4+dfsg-1+deb11u2
High	DSA-5514-1KEV	glibc@2.31-13+deb11u3	2.31-13+deb11u7

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.0latest	3 years ago	1.0.0	940368909	19,745

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/apphelm/d.vazquezm.2021_helm.svg)](https://charts.stackradar.io/charts/apphelm/d.vazquezm.2021_helm)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.