StackRadar

Scored 14 Sept 2026

The Cloud-Native Ingress and API-management

Latest 0.2.2 2 years agodeploys tag 1.1.2 0Artifact Hub

openapi 0.2.2 deploys 6 container images: assistiot/open_api_backend, assistiot/open_api_kong, kong/kubernetes-ingress-controller, assistiot/open_api_frontend and 2 more. Across the 5 measured, 1,335 findings8 critical, 43 high 6 on CISA KEV. The highest contribution is ALPINE-CVE-2021-3711 in openssl 1.1.1g-r0, fixed in 1.1.1l-r0.

Radar Score

18,277843328954

1,335 findings over 5 of 6 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images
ImageTagVulnerabilitiesRadar Score
assistiot/open_api_backend1.1.23101125327,527
assistiot/open_api_kong×91.0.04728161,459
kong/kubernetes-ingress-controller2.302131311,434
assistiot/open_api_frontend1.0.106461422,648
pantsel/kongalatest1181291335,209
bitnami/postgresql13.6.0-debian-10-r52unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,142 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGHSA-mp7j-qc5w-4988websocket-driver@0.7.40.7.5
LowUBUNTU-CVE-2026-54411pam@1.4.0-11ubuntu2.31.4.0-11ubuntu2.7
LowGHSA-pq67-6m6q-mj2vurllib3@2.1.02.5.0
LowUBUNTU-CVE-2025-50181python-pip@22.0.2+dfsg-1ubuntu0.422.0.2+dfsg-1ubuntu0.6
LowGHSA-2v37-7h3g-55p8nanoid@3.3.43.3.18
LowUBUNTU-CVE-2026-84366python3.10@3.10.12-1~22.04.3no fix listed
LowUBUNTU-CVE-2026-25210expat@2.4.7-1ubuntu0.22.4.7-1ubuntu0.7
LowGHSA-58qx-3vcg-4xpxws@8.12.08.20.1
LowGHSA-4vpr-x523-8j87svgo@1.3.22.8.4
LowUBUNTU-CVE-2026-19487perl@5.34.0-3ubuntu1.35.34.0-3ubuntu1.9
LowALPINE-CVE-2023-52426expat@2.4.9-r02.6.0-r0
LowUBUNTU-CVE-2026-4878libcap2@1:2.44-1ubuntu0.22.04.11:2.44-1ubuntu0.22.04.3
LowGHSA-3v7f-55p6-f55ppicomatch@2.3.12.3.2
LowGHSA-qw6h-vgh9-j6wxexpress@4.18.24.20.0
LowGHSA-65pc-fj4g-8rjxidna@3.63.15
LowGHSA-mh29-5h37-fv8mjs-yaml@4.1.04.1.1
LowUBUNTU-CVE-2026-45409python-pip@22.0.2+dfsg-1ubuntu0.4no fix listed
LowGO-2023-2041stdlib@go1.18.61.20.8
LowGHSA-9wx4-h78v-vm56requests@2.31.02.32.0
LowUBUNTU-CVE-2024-35195python-pip@22.0.2+dfsg-1ubuntu0.422.0.2+dfsg-1ubuntu0.7+esm1
LowGHSA-7q8q-rj6j-mhjqaxios@0.26.10.33.0
LowGO-2023-2043stdlib@go1.18.61.20.8
LowGHSA-fxwf-4rqh-v8g3socket.io@1.7.32.4.0
LowGO-2022-0515stdlib@go1.181.17.12
LowUBUNTU-CVE-2026-3442binutils@2.38-4ubuntu2.4no fix listed
LowGO-2023-2186stdlib@go1.18.61.20.11
LowGHSA-h67p-54hq-rp68js-yaml@4.1.04.2.0
LowGO-2024-3333golang.org/x/net@v0.0.0-20220722155237-a158d28d115b0.33.0
LowUBUNTU-CVE-2026-78408util-linux@2.37.2-4ubuntu3no fix listed
LowGHSA-vhxf-7vqr-mrjgdompurify@2.3.103.2.4
LowUBUNTU-CVE-2026-54369acl@2.3.1-1no fix listed
LowUBUNTU-CVE-2026-41989libgcrypt20@1.9.4-3ubuntu31.9.4-3ubuntu3.2
LowUBUNTU-CVE-2026-75466libjpeg-turbo@2.1.2-0ubuntu1no fix listed
LowGHSA-3jxr-9vmj-r5cpbrace-expansion@1.1.111.1.16
LowUBUNTU-CVE-2024-11053curl@7.81.0-1ubuntu1.157.81.0-1ubuntu1.20
LowGHSA-f5vj-f2hx-8m93webpack-dev-server@4.11.15.2.6
LowUBUNTU-CVE-2025-5372libssh@0.9.6-2ubuntu0.22.04.10.9.6-2ubuntu0.22.04.4
LowGHSA-mwcw-c2x4-8c55nanoid@3.3.43.3.8
LowGHSA-76mc-f452-cxcmdompurify@2.3.103.4.7
LowGO-2024-3105stdlib@go1.18.61.22.7
LowGO-2022-1095stdlib@go1.18.61.18.8
LowGHSA-5c6j-r48x-rmvqserialize-javascript@4.0.07.0.3
LowUBUNTU-CVE-2023-3164tiff@4.3.0-6ubuntu0.74.3.0-6ubuntu0.9
LowUBUNTU-CVE-2026-13595util-linux@2.37.2-4ubuntu32.37.2-4ubuntu3.6
LowUBUNTU-CVE-2025-66866binutils@2.38-4ubuntu2.4no fix listed
LowGO-2023-1621stdlib@go1.18.61.19.7
LowGHSA-mj87-hwqh-73pjpython-multipart@0.0.60.0.26
LowUBUNTU-CVE-2026-54371attr@1:2.5.1-1build11:2.5.1-1ubuntu0.1
LowGO-2026-4981stdlib@go1.18.61.25.10
LowUBUNTU-CVE-2026-6019python3.10@3.10.12-1~22.04.33.10.12-1~22.04.16

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.2.2latest2 years ago1.1.284332895418,277

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/assist-iot-open-api-management/openapi.svg)](https://charts.stackradar.io/charts/assist-iot-open-api-management/openapi)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.