inbox-server-distributed Helm chart

Name: inbox-server-distributed Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

appscode

Scored 14 Sept 2026

Inbox Server by AppsCode

Latest 2025.12.25 3 days agodeploys tag 4.1.3 0Artifact Hub

inbox-server-distributed 2025.12.25 deploys 4 container images: library/cassandra, ghcr.io/appscode/inbox-server, opensearchproject/opensearch and library/rabbitmq. Across them, 1,283 findings — 10 critical, 16 high — 3 on CISA KEV. The highest contribution is GHSA-599f-7c49-w659 in commons-text 1.9, fixed in 1.10.0.

Radar Score

15,5731016258998

1,283 findings over 4 of 4 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
library/cassandra	4.1.3	4782421	5,916
ghcr.io/appscode/inbox-server×2	latest	1367271	3,963
opensearchproject/opensearch	2.1.0	204276	1,789
library/rabbitmq	3.12.1-management	3667230	3,905

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

691 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	UBUNTU-CVE-2026-33845	gnutls28@3.7.3-4ubuntu1.7	3.7.3-4ubuntu1.9
Low	UBUNTU-CVE-2025-69420	openssl@3.0.2-0ubuntu1.20	3.0.2-0ubuntu1.21
Low	UBUNTU-CVE-2026-57433	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8
Low	GHSA-xfrj-6vvc-3xm2	xmlsec@2.2.3	2.2.6
Low	GHSA-g3pr-3p32-fp23	micrometer-core@1.15.1	1.15.12
Low	UBUNTU-CVE-2026-25646	libpng1.6@1.6.37-3build5	1.6.37-3ubuntu0.4
Low	UBUNTU-CVE-2023-4806	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.5
Low	UBUNTU-CVE-2024-0397	python3.10@3.10.6-1~22.04.2ubuntu1.1	3.10.12-1~22.04.5
Low	GHSA-9493-h29p-rfm2	github.com/opencontainers/runc@v1.1.0	1.2.8
Low	UBUNTU-CVE-2026-27135	nghttp2@1.43.0-1ubuntu0.2	1.43.0-1ubuntu0.3
Low	GHSA-9342-92gg-6v29	smtp@2.0.3	2.0.4
Low	UBUNTU-CVE-2026-13221	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8
Low	UBUNTU-CVE-2026-42496	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.7
Low	UBUNTU-CVE-2026-33636	libpng1.6@1.6.37-3build5	1.6.37-3ubuntu0.5
Low	GHSA-vmq6-5m68-f53m	logback-classic@1.2.9	1.2.13
Low	GHSA-vmq6-5m68-f53m	logback-core@1.2.9	1.2.13
Low	GHSA-3pxv-7cmr-fjr4	log4j-core@2.17.1	2.25.4
Low	GHSA-2fvj-hgj9-j2gr	jetty-security@12.0.20	12.0.36
Low	UBUNTU-CVE-2024-56406	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.4
Low	GHSA-v6w3-2prq-h95f	javax.el@3.0.0	no fix listed
Low	UBUNTU-CVE-2024-37370	krb5@1.19.2-2ubuntu0.2	1.19.2-2ubuntu0.4
Low	UBUNTU-CVE-2026-6100	python3.10@3.10.6-1~22.04.2ubuntu1.1	3.10.12-1~22.04.16
Low	UBUNTU-CVE-2024-9287	python3.10@3.10.6-1~22.04.2ubuntu1.1	3.10.12-1~22.04.7
Low	GHSA-57rv-r2g8-2cj3	netty-codec-http@4.1.126.Final	4.1.133.Final
Low	GHSA-fjpj-2g6w-x25r	snappy-java@1.1.8.1	1.1.10.1
Low	GHSA-4gg5-vx3j-xwc7	protobuf-java@3.19.2	3.19.6
Low	UBUNTU-CVE-2026-9076	openssl@3.0.2-0ubuntu1.20	3.0.2-0ubuntu1.25
Low	UBUNTU-CVE-2026-82209	curl@7.81.0-1ubuntu1.21	no fix listed
Low	UBUNTU-CVE-2024-10524	wget@1.21.2-2ubuntu1.1	no fix listed
Low	GO-2023-1571	stdlib@go1.18.2	1.19.6
Low	UBUNTU-CVE-2026-4224	python3.10@3.10.6-1~22.04.2ubuntu1.1	3.10.12-1~22.04.16
Low	GHSA-5qcv-4rpc-jp93	kafka-clients@3.0.1	3.9.2
Low	UBUNTU-CVE-2026-7210	python3.10@3.10.6-1~22.04.2ubuntu1.1	no fix listed
Low	UBUNTU-CVE-2026-12087	perl@5.34.0-3ubuntu1.5	5.34.0-3ubuntu1.8
Low	GHSA-xxh7-fcf3-rj7f	jetty-server@12.0.20	12.0.32
Low	UBUNTU-CVE-2023-47038	perl@5.34.0-3ubuntu1.2	5.34.0-3ubuntu1.3
Low	GHSA-68mj-5wr7-6fgg	amqp-client@5.25.0	5.33.1
Low	UBUNTU-CVE-2025-8194	python3.10@3.10.6-1~22.04.2ubuntu1.1	3.10.12-1~22.04.11
Low	GHSA-pwqr-wmgm-9rr8	netty-codec-http@4.1.126.Final	4.1.132.Final
Low	UBUNTU-CVE-2026-15308	python3.10@3.10.6-1~22.04.2ubuntu1.1	3.10.12-1~22.04.18
Low	GHSA-hq9p-pm7w-8p54	postgresql@42.7.5	42.7.7
Low	GHSA-564r-hj7v-mcr5	spring-expression@5.2.20.RELEASE	5.2.23.RELEASE
Low	GHSA-45q3-82m4-75jr	netty-handler-proxy@4.1.127.Final	4.1.133.Final
Low	GHSA-w737-wx49-qj23	micrometer-core@1.15.1	1.15.12
Low	GHSA-h2qv-fj59-j46j	netty-codec-haproxy@4.1.126.Final	4.1.135.Final
Low	UBUNTU-CVE-2026-0915	glibc@2.35-0ubuntu3.11	2.35-0ubuntu3.13
Low	UBUNTU-CVE-2025-4802	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.10
Low	UBUNTU-CVE-2023-50495	ncurses@6.3-2ubuntu0.1	no fix listed
Low	GHSA-93j5-89vc-pph4	amqp-client@5.25.0	5.33.1
Low	UBUNTU-CVE-2026-5773	curl@7.81.0-1ubuntu1.21	7.81.0-1ubuntu1.24

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2025.12.25latest	3 days ago	4.1.3	1016258998	15,573

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/appscode/inbox-server-distributed.svg)](https://charts.stackradar.io/charts/appscode/inbox-server-distributed)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.