inbox-server-distributed 2025.12.25 Helm chart

Name: inbox-server-distributed Helm chart 2025.12.25: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

appscode

Scored 14 Sept 2026

Inbox Server by AppsCode

Version 2025.12.25 3 days agodeploys tag 4.1.3 0Artifact Hub

inbox-server-distributed 2025.12.25 deploys 4 container images: library/cassandra, ghcr.io/appscode/inbox-server, opensearchproject/opensearch and library/rabbitmq. Across them, 1,283 findings — 10 critical, 16 high — 3 on CISA KEV. The highest contribution is GHSA-599f-7c49-w659 in commons-text 1.9, fixed in 1.10.0.

Radar Score

15,5731016258998

1,283 findings over 4 of 4 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
library/cassandra	4.1.3	4782421	5,916
ghcr.io/appscode/inbox-server×2	latest	1367271	3,963
opensearchproject/opensearch	2.1.0	204276	1,789
library/rabbitmq	3.12.1-management	3667230	3,905

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

691 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-58469	wget@1.21.2-2ubuntu1.1	1.21.2-2ubuntu1.3
Low	UBUNTU-CVE-2026-6253	curl@7.81.0-1ubuntu1.21	7.81.0-1ubuntu1.24
Low	GO-2023-1703	stdlib@go1.18.2	1.19.8
Low	GO-2022-0521	stdlib@go1.18.2	1.17.12
Low	GO-2022-0477	stdlib@go1.18.2	1.17.11
Low	GO-2026-4341	stdlib@go1.18.2	1.24.12
Low	GO-2022-0533	stdlib@go1.18.2	1.17.11
Low	GHSA-67mf-3cr5-8w23	bc-fips@1.0.2.3	1.0.2.6
Low	GHSA-6g32-pxv4-2wfj	amqp-client@5.25.0	5.33.0
Low	UBUNTU-CVE-2026-9547	curl@7.81.0-1ubuntu1.21	7.81.0-1ubuntu1.25
Low	GHSA-j92g-9f8w-j867	postgresql@42.7.5	42.7.12
Low	UBUNTU-CVE-2026-17084	python3.10@3.10.6-1~22.04.2ubuntu1.1	no fix listed
Low	UBUNTU-CVE-2025-66293	libpng1.6@1.6.37-3build5	1.6.37-3ubuntu0.3
Low	UBUNTU-CVE-2026-42012	gnutls28@3.7.3-4ubuntu1.7	3.7.3-4ubuntu1.9
Low	UBUNTU-CVE-2026-40355	krb5@1.19.2-2ubuntu0.7	1.19.2-2ubuntu0.8
Low	GO-2022-0523	stdlib@go1.18.2	1.17.12
Low	UBUNTU-CVE-2026-57432	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8
Low	GO-2024-2887	stdlib@go1.18.2	1.21.11
Low	UBUNTU-CVE-2026-6276	curl@7.81.0-1ubuntu1.21	7.81.0-1ubuntu1.24
Low	GO-2022-0522	stdlib@go1.18.2	1.17.12
Low	GO-2022-0527	stdlib@go1.18.2	1.17.12
Low	UBUNTU-CVE-2026-40356	krb5@1.19.2-2ubuntu0.7	1.19.2-2ubuntu0.8
Low	GO-2022-0524	stdlib@go1.18.2	1.17.12
Low	GHSA-xxqh-mfjm-7mv9	netty-codec-http@4.1.126.Final	4.1.133.Final
Low	UBUNTU-CVE-2026-3276	python3.10@3.10.6-1~22.04.2ubuntu1.1	3.10.12-1~22.04.16
Low	UBUNTU-CVE-2024-26458	krb5@1.19.2-2ubuntu0.2	1.19.2-2ubuntu0.6
Low	GO-2023-1704	stdlib@go1.18.2	1.19.8
Low	UBUNTU-CVE-2025-12084	python3.10@3.10.6-1~22.04.2ubuntu1.1	3.10.12-1~22.04.14
Low	UBUNTU-CVE-2023-40217	python3.10@3.10.6-1~22.04.2ubuntu1.1	3.10.12-1~22.04.3
Low	UBUNTU-CVE-2016-2781	coreutils@8.32-4.1ubuntu1.2	no fix listed
Low	UBUNTU-CVE-2026-1299	python3.10@3.10.6-1~22.04.2ubuntu1.1	3.10.12-1~22.04.16
Low	GHSA-fccg-mwvh-qqg4	netty-handler@4.1.126.Final	4.1.137.Final
Low	GHSA-4cx2-fc23-5wg6	bcpkix-jdk15on@1.70	1.79
Low	GHSA-36wv-v2qp-v4g4	cxf-core@3.4.5	3.5.11
Low	GHSA-hr8g-6v94-x4m9	bcprov-jdk15on@1.70	no fix listed
Low	UBUNTU-CVE-2026-42767	openssl@3.0.2-0ubuntu1.20	3.0.2-0ubuntu1.25
Low	UBUNTU-CVE-2026-5545	curl@7.81.0-1ubuntu1.21	7.81.0-1ubuntu1.24
Low	UBUNTU-CVE-2026-48962	perl@5.34.0-3ubuntu1.5	no fix listed
Low	UBUNTU-CVE-2026-3784	curl@7.81.0-1ubuntu1.21	7.81.0-1ubuntu1.23
Low	GHSA-775g-4xr8-78h8	spring-expression@5.2.20.RELEASE	no fix listed
Low	UBUNTU-CVE-2026-4519	python3.10@3.10.6-1~22.04.2ubuntu1.1	3.10.12-1~22.04.16
Low	UBUNTU-CVE-2025-15282	python3.10@3.10.6-1~22.04.2ubuntu1.1	3.10.12-1~22.04.14
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.126.Final	4.1.136.Final
Low	GO-2022-0526	stdlib@go1.18.2	1.17.12
Low	UBUNTU-CVE-2026-42015	gnutls28@3.7.3-4ubuntu1.7	3.7.3-4ubuntu1.9
Low	UBUNTU-CVE-2025-11468	python3.10@3.10.6-1~22.04.2ubuntu1.1	3.10.12-1~22.04.14
Low	UBUNTU-CVE-2024-28834	gnutls28@3.7.3-4ubuntu1.2	3.7.3-4ubuntu1.5
Low	GO-2023-1568	stdlib@go1.18.2	1.19.6
Low	GO-2022-1037	stdlib@go1.18.2	1.18.7
Low	GHSA-6cqp-g7gg-8hr5	netty-codec-http@4.1.126.Final	4.1.136.Final

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2025.12.25latest	3 days ago	4.1.3	1016258998	15,573

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/appscode/inbox-server-distributed.svg)](https://charts.stackradar.io/charts/appscode/inbox-server-distributed)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.