james-kompose Helm chart
appscodeVerified publisherScored 14 Sept 2026
A Helm chart for Kubernetes
Latest 0.1.0 2 years agodeploys tag 4.1.3 0Artifact Hub
james-kompose 0.1.0 deploys 4 container images: library/cassandra, ghcr.io/appscode/inbox-server, opensearchproject/opensearch and library/rabbitmq. Across them, 1,371 findings — 13 critical, 19 high — 3 on CISA KEV. The highest contribution is GHSA-599f-7c49-w659 in commons-text 1.9, fixed in 1.10.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
4 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| library/ | 4.1.3 | 4782421 | 5,916 |
| ghcr.io/ | MailetGroup | 4691329 | 5,365 |
| opensearchproject/ | 2.1.0 | 204276 | 1,789 |
| library/ | 3.12.1-management | 3667230 | 3,905 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
699 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-18508 | tar | no fix listed |
| Low | UBUNTU-CVE-2025-8277 | libssh | 0.9.6-2ubuntu0.22.04.6 |
| Low | UBUNTU-CVE-2026-45186 | expat | no fix listed |
| Low | UBUNTU-CVE-2022-3219 | gnupg2 | no fix listed |
| Low | UBUNTU-CVE-2026-32776 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-41080 | expat | no fix listed |
| Low | GHSA-9f52-rjqv-25qv | spring-expression | no fix listed |
| Low | GHSA-w573-9ffj-6ff9 | netty-transport-native-epoll | 4.1.135.Final |
| Low | UBUNTU-CVE-2025-4878 | libssh | 0.9.6-2ubuntu0.22.04.4 |
| Low | GHSA-wjpw-4j6x-6rwh | jetty-http | no fix listed |
| Low | UBUNTU-CVE-2025-69418 | openssl | 3.0.2-0ubuntu1.21 |
| Low | UBUNTU-CVE-2025-1795 | python3.10 | 3.10.12-1~22.04.10 |
| Low | GO-2026-5024 | golang.org/ | 0.44.0 |
| Low | UBUNTU-CVE-2026-59846 | libssh | 0.9.6-2ubuntu0.22.04.8 |
| Low | UBUNTU-CVE-2026-18477 | tar | no fix listed |
| Low | GHSA-xjvp-4fhw-gc47 | github.com/ | 1.3.6 |
| Low | UBUNTU-CVE-2025-6141 | ncurses | 6.3-2ubuntu0.3 |
| Low | USN-5495-2 | curl | 7.81.0-1ubuntu1.21 |
| Low | USN-6663-1 | openssl | 3.0.2-0ubuntu1.15 |
| Low | USN-7034-1 | ca-certificates | 20240203~22.04.1 |
| Low | USN-7412-2 | gnupg2 | 2.2.27-3ubuntu2.4 |
| Low | USN-8091-1 | util-linux | 2.37.2-4ubuntu3.5 |
| Low | USN-8436-1 | ca-certificates | 20260601~22.04.1 |
| Low | USN-8543-2 | wget | 1.21.2-2ubuntu1.5 |
| Low | USN-8625-1 | openssl | 3.0.2-0ubuntu1.26 |
| Low | USN-8688-1 | pam | 1.4.0-11ubuntu2.8 |
| Low | GHSA-58qw-p7qm-5rvh | jetty-xml | 9.4.52.v20230823 |
| Low | UBUNTU-CVE-2025-13462 | python3.10 | 3.10.12-1~22.04.16 |
| Low | UBUNTU-CVE-2026-0965 | libssh | 0.9.6-2ubuntu0.22.04.6 |
| Low | GHSA-fghv-69vj-qj49 | netty-codec-http | 4.1.125.Final |
| Low | GHSA-m8cg-xc2p-r3fc | github.com/ | 1.1.5 |
| Low | UBUNTU-CVE-2025-66382 | expat | no fix listed |
| Low | UBUNTU-CVE-2025-1376 | elfutils | no fix listed |
| Low | UBUNTU-CVE-2026-24515 | expat | 2.4.7-1ubuntu0.7 |
| Low | UBUNTU-CVE-2026-40228 | systemd | no fix listed |
| Low | UBUNTU-CVE-2026-32778 | expat | no fix listed |
| Low | UBUNTU-CVE-2023-4016 | procps | 2:3.3.17-6ubuntu2.1 |
| Low | UBUNTU-CVE-2025-30258 | gnupg2 | 2.2.27-3ubuntu2.3 |
| Low | GHSA-p47f-322f-whfh | logback-core | 1.5.33 |
| Low | UBUNTU-CVE-2026-15310 | python3.10 | no fix listed |
| Low | GHSA-6v67-2wr5-gvf4 | logback-core | 1.3.15 |
| Low | UBUNTU-CVE-2026-53910 | diffutils | 1:3.8-0ubuntu2.1 |
| Low | UBUNTU-CVE-2026-6879 | python3.10 | no fix listed |
| Low | UBUNTU-CVE-2026-0967 | libssh | 0.9.6-2ubuntu0.22.04.6 |
| Low | UBUNTU-CVE-2026-18503 | python3.10 | no fix listed |
| Low | UBUNTU-CVE-2026-5958 | sed | 4.8-1ubuntu2.1 |
| Low | UBUNTU-CVE-2026-6368 | glibc | 2.35-0ubuntu3.15 |
| Low | GHSA-qqpg-mvqg-649v | logback-core | 1.5.25 |
| None | GHSA-5xwg-cfvj-gff5 | amqp-client | 5.33.0 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/appscode/james-kompose)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.