hadoop Helm chart

Name: hadoop Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

bigdata-charts

Scored 14 Sept 2026

The Apache Hadoop software library is a framework that allows for the distributed processing of large data sets across clusters of computers using simple programming models.

Latest 1.0.1 4 years agoapp version 3.2.3 4Artifact Hub

hadoop 1.0.1 deploys 2 container images: 5200710/hadoop and marcelmay/hadoop-hdfs-fsimage-exporter. Across them, 738 findings — 18 critical, 33 high — 4 on CISA KEV. The highest contribution is UBUNTU-CVE-2015-4852 in openjdk-8 8u392-ga-1~20.04, with no fix listed.

Radar Score

12,1111833207480

738 findings over 2 of 2 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
5200710/hadoop×6	3.2.3-java8	1128179467	10,451
marcelmay/hadoop-hdfs-fsimage-exporter	1.3	752813	1,660

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

730 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	UBUNTU-CVE-2015-4852KEV	openjdk-8@8u392-ga-1~20.04	no fix listed
Critical	UBUNTU-CVE-2022-2068	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.fips.16
Critical	ALPINE-CVE-2020-15999KEV	freetype@2.9.1-r2	2.9.1-r3
Critical	UBUNTU-CVE-2021-3711	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.fips.7.2
Critical	UBUNTU-CVE-2022-1292	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.fips.13.1
Critical	GHSA-2qrg-x229-3v8q	log4j@1.2.17	no fix listed
Critical	GHSA-65fg-84f6-3jq3	log4j@1.2.17	no fix listed
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.25	2.0
Critical	UBUNTU-CVE-2025-27363KEV	freetype@2.10.1-2ubuntu0.3	2.10.1-2ubuntu0.4
Critical	GHSA-f7vh-qwp3-x37m	log4j@1.2.17	no fix listed
Critical	GHSA-rfx6-vp9g-rh7v	jackson-databind@2.4.0	2.7.9.2
Critical	GHSA-w9p3-5cr8-m3jj	log4j@1.2.17	no fix listed
Critical	ALPINE-CVE-2019-8457	sqlite@3.26.0-r3	3.28.0-r0
Critical	UBUNTU-CVE-2024-47175	cups@2.3.1-9ubuntu1.6	2.3.1-9ubuntu1.9
Critical	GHSA-qxxx-2pp7-5hmx	jackson-databind@2.4.0	2.6.7.1
Critical	UBUNTU-CVE-2025-6965	sqlite3@3.31.1-4ubuntu0.6	3.31.1-4ubuntu0.7+esm1
Critical	UBUNTU-CVE-2024-2961	glibc@2.31-0ubuntu9.14	2.31-0ubuntu9.15
High	GHSA-fp5r-v3w9-4333	log4j@1.2.17	no fix listed
High	UBUNTU-CVE-2022-0778	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.fips.12
High	GHSA-4w82-r329-3q67	jackson-databind@2.4.0	2.6.7.4
High	UBUNTU-CVE-2023-0286	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.fips.17
High	UBUNTU-CVE-2024-2398	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.22
High	ALPINE-CVE-2021-23840	openssl@1.1.1b-r1	1.1.1j-r0
High	UBUNTU-CVE-2021-23840	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.fips.7.2
High	UBUNTU-CVE-2023-2650	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.fips.19
High	UBUNTU-CVE-2021-3712	openssl@1.1.1f-1ubuntu2.20	no fix listed
High	GHSA-cggj-fvv3-cqwv	jackson-databind@2.4.0	2.6.7.5
High	GHSA-q93h-jc49-78gg	jackson-databind@2.4.0	2.7.9.7
High	GHSA-p43x-xfjf-5jhr	jackson-databind@2.4.0	2.7.9.7
High	GHSA-qppj-fm5r-hxr3KEV	http2-common@9.4.34.v20201102	9.4.53
High	ALPINE-CVE-2021-3449	openssl@1.1.1b-r1	1.1.1k-r0
High	UBUNTU-CVE-2021-3449	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.fips.7
High	UBUNTU-CVE-2024-28182	nghttp2@1.40.0-1ubuntu0.2	1.40.0-1ubuntu0.3
High	GHSA-645p-88qh-w398	jackson-databind@2.4.0	2.6.7.3
High	GHSA-rvwf-54qp-4r6v	snakeyaml@1.25	1.26
High	GHSA-9gph-22xh-8x98	jackson-databind@2.4.0	2.6.7.5
High	UBUNTU-CVE-2024-2511	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.23
High	UBUNTU-CVE-2024-3596	krb5@1.17-6ubuntu4.4	1.17-6ubuntu4.8
High	GHSA-h822-r4r5-v8jg	jackson-databind@2.4.0	2.6.7.3
High	GHSA-c8hm-7hpq-7jhg	jackson-databind@2.4.0	2.6.7.3
High	GHSA-mph4-vhrx-mv67	jackson-databind@2.4.0	2.6.7.3
High	GHSA-5ww9-j83m-q7qx	jackson-databind@2.4.0	2.6.7.3
High	GHSA-4gq5-ch57-c2mg	jackson-databind@2.4.0	2.7.9.5
High	UBUNTU-CVE-2022-4450	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.fips.17
High	GHSA-gww7-p5w4-wrfv	jackson-databind@2.4.0	2.6.7.4
High	GHSA-h592-38cm-4ggp	jackson-databind@2.4.0	2.6.7.3
High	GHSA-6fpp-rgj9-8rwc	jackson-databind@2.4.0	2.7.9.6
High	ALPINE-CVE-2019-12900	bzip2@1.0.6-r6	1.0.6-r7
High	GHSA-cqqj-4p63-rrmm	netty@3.10.6.Final	no fix listed
High	GHSA-5r5r-6hpj-8gg9	jackson-databind@2.4.0	2.9.10.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.1latest	4 years ago	3.2.3	1833207480	12,111

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/bigdata-charts/hadoop.svg)](https://charts.stackradar.io/charts/bigdata-charts/hadoop)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.