bdba 2026.9.1 Helm chart
blackduckScored 22 Oct 2026
BDBA Helm chart
Version 2026.9.1 todayapp version 2026.9.1 0Artifact Hub
bdba 2026.9.1 deploys 9 container images: blackducksoftware/bdba-frontend, blackducksoftware/bdba-fluentd, fluent/fluent-bit, library/memcached and 5 more. Across the 8 measured, 889 findings — 1 critical, 0 high. The highest contribution is GO-2024-2687 in stdlib go1.18.2, fixed in 1.21.9.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| blackducksoftware/ | 2026.9.2 | 0010125 | 1,294 |
| blackducksoftware/ | 2026.9.0 | 00579 | 721 |
| fluent/ | 5.1.5 | 001483 | 907 |
| library/ | 1.6.45-trixie | 00565 | 608 |
| blackducksoftware/ | 2026.9.1 | — | not yet scanned |
| library/ | 15.19-bookworm | 0021180 | 2,021 |
| blackducksoftware/ | 2026.9.0 | 104690 | 1,916 |
| library/ | 4.3.6 | 0019113 | 1,409 |
| versity/ | v1.8.0 | 00825 | 427 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GO-2026-4870 | stdlib | 1.25.9 |
| Low | DEBIAN-CVE-2026-41992 | gzip | no fix listed |
| Low | GO-2026-4971 | stdlib | 1.25.10 |
| Low | GO-2026-4947 | stdlib | 1.25.9 |
| Low | GHSA-8g5g-8vmr-9782 | pillow | 13.0.0 |
| Low | GO-2026-5037 | stdlib | 1.25.11 |
| Low | UBUNTU-CVE-2026-3833 | gnutls28 | 3.8.3-1.1ubuntu3.6+Fips1.2 |
| Low | GO-2026-6603 | golang.org/ | 0.60.0 |
| Low | GO-2026-6603 | stdlib | 1.26.9 |
| Low | GO-2026-5972 | stdlib | 1.25.13 |
| Low | GO-2026-6088 | stdlib | 1.25.13 |
| Low | GO-2026-6089 | stdlib | 1.25.13 |
| Low | GO-2026-6090 | stdlib | 1.25.13 |
| Low | GO-2026-6611 | stdlib | 1.26.9 |
| Low | GO-2026-6611 | golang.org/ | 0.60.0 |
| Low | GO-2023-1987 | stdlib | 1.19.12 |
| Low | DEBIAN-CVE-2026-80229 | curl | no fix listed |
| Low | GO-2026-5038 | stdlib | 1.25.11 |
| Low | GHSA-vxq7-64xx-v4gw | urllib3 | 2.8.0 |
| Low | DEBIAN-CVE-2024-2236 | libgcrypt20 | no fix listed |
| Low | GO-2026-6218 | stdlib | 1.25.13 |
| Low | DEBIAN-CVE-2025-69720 | ncurses | no fix listed |
| Low | GO-2024-2610 | stdlib | 1.21.8 |
| Low | UBUNTU-CVE-2026-86145 | pcre2 | no fix listed |
| Low | DEBIAN-CVE-2026-84782 | openssl | no fix listed |
| Low | GO-2022-1095 | stdlib | 1.18.8 |
| Low | GO-2023-2041 | stdlib | 1.20.8 |
| Low | GO-2026-6355 | golang.org/ | 0.56.0 |
| Low | DEBIAN-CVE-2026-24882 | gnupg2 | no fix listed |
| Low | GO-2025-3751 | stdlib | 1.23.10 |
| Low | DEBIAN-CVE-2026-5928 | glibc | no fix listed |
| Low | GO-2023-2043 | stdlib | 1.20.8 |
| Low | GO-2026-4342 | stdlib | 1.24.12 |
| Low | DEBIAN-CVE-2026-82209 | curl | no fix listed |
| Low | GO-2023-1840 | stdlib | 1.19.10 |
| Low | ALPINE-CVE-2026-85091 | zlib | 1.3.2-r1 |
| Low | DEBIAN-CVE-2026-85091 | zlib | no fix listed |
| Low | DEBIAN-CVE-2026-80255 | curl | no fix listed |
| Low | GHSA-c6hw-5grf-ff96 | pillow | 13.0.0 |
| Low | GHSA-pchr-8j38-3x4p | pillow | 13.0.0 |
| Low | DEBIAN-CVE-2026-54873 | openssl | 3.5.7-1~deb13u3 |
| Low | DEBIAN-CVE-2026-13608 | curl | no fix listed |
| Low | GO-2025-4155 | stdlib | 1.24.11 |
| Low | UBUNTU-CVE-2026-42011 | gnutls28 | 3.8.3-1.1ubuntu3.6+Fips1.2 |
| Low | DEBIAN-CVE-2026-9080 | curl | no fix listed |
| Low | GHSA-5xm2-6676-qcp9 | pillow | 13.0.0 |
| Low | GHSA-65qm-jvmh-6pqg | pillow | 13.0.0 |
| Low | GHSA-cp9v-662q-vvx9 | pillow | 13.0.0 |
| Low | GHSA-f2g6-542v-9j58 | pillow | 13.0.0 |
| Low | GHSA-gg2r-wvfm-q9rx | pillow | 13.0.0 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 2026.9.1latest | today | 2026.9.1 | 10128760 | 9,303 |
| 2026.9.0 | 21 days ago | 2026.9.0 | 10142825 | 10,154 |
| 2026.6.3 | 23 days ago | 2026.6.3 | 00154877 | 10,460 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.