StackRadar

mx-api Helm chart

bicarus-labs

Scored 14 Sept 2026

Multiversx API

Latest 0.1.0 3 years agoapp version 1.0.2-hf1 0Artifact Hub

mx-api 0.1.0 deploys 4 container images: bitnami/mongodb, bicarus/mx-api-service, bitnami/mysql and bitnami/redis. Across the 1 measured, 322 findings0 critical, 6 high 3 on CISA KEV. The highest contribution is GHSA-r5fr-rjxr-66jc in lodash 4.17.21, fixed in 4.18.0.

Radar Score

4,4550686230

322 findings over 1 of 4 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
bitnami/mongodb6.0.3-debian-11-r20unmeasured
bicarus/mx-api-service1.0.2-hf106862304,455
bitnami/mysql8.0.31-debian-11-r20unmeasured
bitnami/redis×27.0.7-debian-11-r0unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

86 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-r7qp-cfhv-p84wengine.io@6.2.06.2.1
MediumGHSA-5r27-rw8r-7967import-in-the-middle@1.3.41.4.2
MediumGHSA-jr5f-v2jv-69x6axios@0.21.40.30.0
MediumGHSA-95m3-7q98-8xr5sha.js@2.4.112.4.12
MediumGHSA-xwcq-pm8m-c4vfcrypto-js@4.1.14.2.0
MediumGHSA-5528-5vmv-3xc2multer@1.4.4-lts.12.1.1
MediumGHSA-jcxm-m3jx-f287simple-git@2.48.03.32.0
MediumGHSA-f23m-r3pf-42rhlodash@4.17.214.18.0
MediumGHSA-f23m-r3pf-42rhlodash-es@4.17.214.18.0
MediumGHSA-xxjr-mmjv-4gpglodash-es@4.17.214.17.23
MediumGHSA-xxjr-mmjv-4gpglodash@4.17.214.17.23
MediumGHSA-v52c-386h-88mcmulter@1.4.4-lts.12.1.0
MediumGHSA-xf7r-hgr6-v32pmulter@1.4.4-lts.12.1.0
MediumGHSA-67hx-6x53-jw92@babel/traverse@7.20.17.23.2
MediumDLA-3530-1openssl@1.1.1n-0+deb10u21.1.1n-0+deb10u6
MediumGHSA-cqmj-92xf-r6r9socket.io-parser@4.2.14.2.3
MediumDLA-3213-1krb5@1.17-3+deb10u31.17-3+deb10u5
MediumDLA-3613-1curl@7.64.0-4+deb10u27.64.0-4+deb10u7
MediumGHSA-37ch-88jc-xwx2path-to-regexp@0.1.70.1.13
MediumGHSA-9wv6-86v2-598jpath-to-regexp@0.1.70.1.10
MediumGHSA-cpq7-6gpm-g9rccipher-base@1.0.41.0.5
MediumGHSA-8cj5-5rvv-wf4vtar-fs@2.1.12.1.3
MediumDLA-3175-1python3.7@3.7.3-2+deb10u33.7.3-2+deb10u4
MediumGHSA-3xgq-45jj-v275cross-spawn@7.0.37.0.5
MediumGHSA-p92q-9vqr-4j8vaxios@0.21.40.32.0
MediumGHSA-pvrw-g6fx-mcx2is_js@0.9.0no fix listed
MediumGHSA-q9mw-68c2-j6m5engine.io@6.2.06.4.2
MediumGHSA-vj76-c3g6-qr5vtar-fs@2.1.12.1.4
MediumGHSA-qwcr-r2fm-qrc7body-parser@1.20.11.20.3
MediumDLA-3152-1glibc@2.28-10+deb10u12.28-10+deb10u2
MediumGHSA-96hv-2xvq-fx4pws@8.11.08.21.0
MediumGHSA-3ppc-4f35-3m26minimatch@3.1.23.1.3
MediumGHSA-25h7-pfq9-p65fflatted@3.2.73.4.0
MediumGHSA-pf86-5x62-jrwfaxios@0.21.40.31.1
MediumGHSA-677m-j7p3-52f9socket.io-parser@4.2.14.2.6
MediumGHSA-4pg4-qvpc-4q3hmulter@1.4.4-lts.12.0.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.0latest3 years ago1.0.2-hf106862304,455

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/bicarus-labs/mx-api.svg)](https://charts.stackradar.io/charts/bicarus-labs/mx-api)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.