inbox-server-distributed 2025.12.25 Helm chart

Name: inbox-server-distributed Helm chart 2025.12.25: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

appscode

Scored 14 Sept 2026

Inbox Server by AppsCode

Version 2025.12.25 3 days agodeploys tag 4.1.3 0Artifact Hub

inbox-server-distributed 2025.12.25 deploys 4 container images: library/cassandra, ghcr.io/appscode/inbox-server, opensearchproject/opensearch and library/rabbitmq. Across them, 1,283 findings — 10 critical, 16 high — 3 on CISA KEV. The highest contribution is GHSA-599f-7c49-w659 in commons-text 1.9, fixed in 1.10.0.

Radar Score

15,5731016258998

1,283 findings over 4 of 4 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
library/cassandra	4.1.3	4782421	5,916
ghcr.io/appscode/inbox-server×2	latest	1367271	3,963
opensearchproject/opensearch	2.1.0	204276	1,789
library/rabbitmq	3.12.1-management	3667230	3,905

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

539 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-6pff-fmh2-4mmf	cxf-rt-rs-security-jose@3.4.5	3.5.9
Low	UBUNTU-CVE-2026-9538	perl@5.34.0-3ubuntu1.5	no fix listed
Low	GHSA-93wv-jw9v-4972	netty-codec-http2@4.1.126.Final	4.1.136.Final
Low	UBUNTU-CVE-2025-6395	gnutls28@3.7.3-4ubuntu1.7	no fix listed
Low	GHSA-6jqx-86gh-f27w	netty-codec-http@4.1.126.Final	4.1.136.Final
Low	GHSA-v435-xc8x-wvr9	bcprov-jdk15on@1.70	1.78
Low	UBUNTU-CVE-2025-24528	krb5@1.19.2-2ubuntu0.2	1.19.2-2ubuntu0.6
Low	UBUNTU-CVE-2024-6923	python3.10@3.10.6-1~22.04.2ubuntu1.1	3.10.12-1~22.04.6
Low	UBUNTU-CVE-2026-85091	zlib@1:1.2.11.dfsg-2ubuntu9.2	no fix listed
Low	GHSA-mvh2-crg5-v77c	netty-codec-http@4.1.126.Final	4.1.136.Final
Low	GO-2023-2185	stdlib@go1.18.2	1.20.11
Low	UBUNTU-CVE-2026-42497	perl@5.34.0-3ubuntu1.5	no fix listed
Low	UBUNTU-CVE-2026-41992	gzip@1.10-4ubuntu4.1	1.10-4ubuntu4.2
Low	UBUNTU-CVE-2023-7008	systemd@249.11-0ubuntu3.17	249.11-0ubuntu3.21
Low	GHSA-269q-hmxg-m83q	netty-codec-http@4.1.73.Final	4.1.77.Final
Low	GHSA-558v-64gr-wgg4	netty-codec@4.1.126.Final	4.1.136.Final
Low	GHSA-c3fc-8qff-9hwx	bcprov-jdk18on@1.82	1.84
Low	UBUNTU-CVE-2022-3715	bash@5.1-6ubuntu1	5.1-6ubuntu1.1
Low	UBUNTU-CVE-2024-4603	openssl@3.0.2-0ubuntu1.20	no fix listed
Low	UBUNTU-CVE-2026-8932	curl@7.81.0-1ubuntu1.21	7.81.0-1ubuntu1.27
Low	UBUNTU-CVE-2025-1372	elfutils@0.186-1build1	0.186-1ubuntu0.1
Low	UBUNTU-CVE-2022-46908	sqlite3@3.37.2-2ubuntu0.1	3.37.2-2ubuntu0.3
Low	UBUNTU-CVE-2024-12133	libtasn1-6@4.18.0-4build1	4.18.0-4ubuntu0.1
Low	UBUNTU-CVE-2026-8286	curl@7.81.0-1ubuntu1.21	7.81.0-1ubuntu1.25
Low	GHSA-8xfc-gm6g-vgpv	bcprov-jdk15on@1.70	1.78
Low	GHSA-8xfc-gm6g-vgpv	bc-fips@1.0.2.3	1.0.2.5
Low	UBUNTU-CVE-2026-75803	openssl@3.0.2-0ubuntu1.20	3.0.2-0ubuntu1.29
Low	GHSA-676x-f7gg-47vc	netty-resolver-dns@4.1.126.Final	4.1.135.Final
Low	UBUNTU-CVE-2024-33602	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.8
Low	UBUNTU-CVE-2026-4046	glibc@2.35-0ubuntu3.11	2.35-0ubuntu3.14
Low	GHSA-wg6q-6289-32hp	bcpkix-jdk18on@1.82	1.84
Low	GHSA-wg6q-6289-32hp	bcpkix-jdk15on@1.70	1.84
Low	UBUNTU-CVE-2026-0966	libssh@0.9.6-2ubuntu0.22.04.5	0.9.6-2ubuntu0.22.04.6
Low	GO-2022-0537	stdlib@go1.18.2	1.17.13
Low	GHSA-4h8f-2wvx-gg5w	bcprov-jdk15on@1.70	1.78
Low	UBUNTU-CVE-2026-48959	perl@5.34.0-3ubuntu1.5	no fix listed
Low	UBUNTU-CVE-2026-59843	libssh@0.9.6-2ubuntu0.22.04.5	0.9.6-2ubuntu0.22.04.8
Low	UBUNTU-CVE-2026-5928	glibc@2.35-0ubuntu3.11	2.35-0ubuntu3.14
Low	UBUNTU-CVE-2026-3833	gnutls28@3.7.3-4ubuntu1.7	3.7.3-4ubuntu1.9
Low	GHSA-wjxj-5m7g-mg7q	bcprov-jdk15on@1.70	no fix listed
Low	GHSA-2jp3-2923-9h52	activemq-broker@6.1.6	6.2.5
Low	GHSA-vpvm-3wq2-2wvm	github.com/opencontainers/runc@v1.1.0	1.1.5
Low	GHSA-r5w3-xv2f-j59q	spring-expression@5.2.20.RELEASE	no fix listed
Low	UBUNTU-CVE-2026-6791	glibc@2.35-0ubuntu3.11	2.35-0ubuntu3.15
Low	UBUNTU-CVE-2022-27943	gcc-12@12.3.0-1ubuntu1~22.04.2	no fix listed
Low	UBUNTU-CVE-2025-64720	libpng1.6@1.6.37-3build5	1.6.37-3ubuntu0.1
Low	UBUNTU-CVE-2026-8458	curl@7.81.0-1ubuntu1.21	7.81.0-1ubuntu1.25
Low	UBUNTU-CVE-2026-76641	expat@2.4.7-1ubuntu0.6	no fix listed
Low	UBUNTU-CVE-2023-6597	python3.10@3.10.6-1~22.04.2ubuntu1.1	3.10.12-1~22.04.4
Low	UBUNTU-CVE-2026-58469	wget@1.21.2-2ubuntu1.1	1.21.2-2ubuntu1.3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2025.12.25latest	3 days ago	4.1.3	1016258998	15,573

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/appscode/inbox-server-distributed.svg)](https://charts.stackradar.io/charts/appscode/inbox-server-distributed)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.