StackRadar

Scored 14 Sept 2026

The Cloud-Native Ingress and API-management

Latest 0.2.2 2 years agodeploys tag 1.1.2 0Artifact Hub

openapi 0.2.2 deploys 6 container images: assistiot/open_api_backend, assistiot/open_api_kong, kong/kubernetes-ingress-controller, assistiot/open_api_frontend and 2 more. Across the 5 measured, 1,335 findings8 critical, 43 high 6 on CISA KEV. The highest contribution is ALPINE-CVE-2021-3711 in openssl 1.1.1g-r0, fixed in 1.1.1l-r0.

Radar Score

18,277843328954

1,335 findings over 5 of 6 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images
ImageTagVulnerabilitiesRadar Score
assistiot/open_api_backend1.1.23101125327,527
assistiot/open_api_kong×91.0.04728161,459
kong/kubernetes-ingress-controller2.302131311,434
assistiot/open_api_frontend1.0.106461422,648
pantsel/kongalatest1181291335,209
bitnami/postgresql13.6.0-debian-10-r52unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,142 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGHSA-9cx6-37pm-9jffhandlebars@4.0.104.7.9
LowGHSA-xpqw-6gx7-v673svgo@2.8.02.8.1
LowUBUNTU-CVE-2026-63072openssl@3.0.2-0ubuntu1.123.0.2-0ubuntu1.29
LowGHSA-f5x3-32g6-xq36tar@4.4.196.2.1
LowGHSA-8cf7-32gw-wr33jsonwebtoken@8.5.19.0.0
LowGHSA-j8xg-fqg3-53r7word-wrap@1.2.31.2.4
LowUBUNTU-CVE-2026-45445openssl@3.0.2-0ubuntu1.123.0.2-0ubuntu1.25
LowGHSA-2qqx-w9hr-q5gxangular@1.7.9no fix listed
LowGHSA-2vrf-hf26-jrp5angular@1.7.9no fix listed
LowGHSA-qwqh-hm9m-p5hrangular@1.7.9no fix listed
LowGHSA-5m6q-g25r-mvwxnode-forge@1.3.11.4.0
LowGHSA-4vvj-4cpr-p986webpack@5.75.05.94.0
LowUBUNTU-CVE-2024-33600glibc@2.35-0ubuntu3.52.35-0ubuntu3.8
LowGHSA-6g55-p6wh-862qpostcss@8.4.218.5.12
LowUBUNTU-CVE-2026-66046expat@2.4.7-1ubuntu0.2no fix listed
LowGHSA-pmwg-cvhr-8vh7axios@0.26.10.31.1
LowUBUNTU-CVE-2026-11972python3.10@3.10.12-1~22.04.3no fix listed
LowGO-2023-2102stdlib@go1.18.61.20.10
LowUBUNTU-CVE-2025-5318libssh@0.9.6-2ubuntu0.22.04.10.9.6-2ubuntu0.22.04.4
LowGHSA-qffp-2rhf-9h96tar@4.4.197.5.10
LowUBUNTU-CVE-2025-69534python3.10@3.10.12-1~22.04.33.10.12-1~22.04.16
LowUBUNTU-CVE-2026-80230curl@7.81.0-1ubuntu1.15no fix listed
LowALPINE-CVE-2023-23915curl@7.83.1-r47.83.1-r6
LowUBUNTU-CVE-2022-47695binutils@2.38-4ubuntu2.42.38-4ubuntu2.6
LowALPINE-CVE-2023-0465openssl@1.1.1n-r01.1.1t-r2
LowGHSA-23hp-3jrh-7fpwtar@4.4.197.5.19
LowUBUNTU-CVE-2022-44840binutils@2.38-4ubuntu2.42.38-4ubuntu2.5
LowUBUNTU-CVE-2026-42013gnutls28@3.7.3-4ubuntu1.33.7.3-4ubuntu1.9
LowUBUNTU-CVE-2017-13716binutils@2.38-4ubuntu2.4no fix listed
LowUBUNTU-CVE-2026-0861glibc@2.35-0ubuntu3.52.35-0ubuntu3.13
LowGHSA-52cp-r559-cp3mjs-yaml@4.1.04.3.0
LowGHSA-q67f-28xg-22rwnode-forge@1.3.11.4.0
LowUBUNTU-CVE-2024-2236libgcrypt20@1.9.4-3ubuntu31.9.4-3ubuntu3.3
LowUBUNTU-CVE-2026-31789openssl@3.0.2-0ubuntu1.123.0.2-0ubuntu1.23
LowUBUNTU-CVE-2025-69419openssl@3.0.2-0ubuntu1.123.0.2-0ubuntu1.21
LowGHSA-hmw2-7cc7-3qxxform-data@2.3.22.5.6
LowUBUNTU-CVE-2026-54874openssl@3.0.2-0ubuntu1.123.0.2-0ubuntu1.29
LowGHSA-7x27-g8rg-x87wangular@1.7.9no fix listed
LowGHSA-7p89-p6hx-q4fwbasic-auth-connect@1.0.01.1.0
LowGHSA-7r86-cg39-jmmjminimatch@3.1.23.1.3
LowGHSA-vghf-hv5q-vc2gvalidator@4.4.013.15.22
LowUBUNTU-CVE-2026-42766openssl@3.0.2-0ubuntu1.123.0.2-0ubuntu1.25
LowUBUNTU-CVE-2025-32990gnutls28@3.7.3-4ubuntu1.33.7.3-4ubuntu1.7
LowGHSA-952p-6rrq-rcjvmicromatch@4.0.54.0.8
LowALPINE-CVE-2022-39253git@2.36.2-r02.36.3-r0
LowGHSA-2m8v-j782-fhvrsocket.io-parser@2.2.23.3.6
LowUBUNTU-CVE-2024-50602expat@2.4.7-1ubuntu0.22.4.7-1ubuntu0.5
LowGHSA-8qq5-rm4j-mr97tar@4.4.197.5.3
LowUBUNTU-CVE-2023-6918libssh@0.9.6-2ubuntu0.22.04.10.9.6-2ubuntu0.22.04.3
LowGO-2022-0969stdlib@go1.181.18.6

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.2.2latest2 years ago1.1.284332895418,277

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/assist-iot-open-api-management/openapi.svg)](https://charts.stackradar.io/charts/assist-iot-open-api-management/openapi)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.