StackRadar

blackduck-alert 8.4.1 Helm chart

blackduck

Scored 29 Sept 2026

Helm chart to deploy Black Duck Alert application

Version 8.4.1 todayapp version 8.4.1 0Artifact Hub

blackduck-alert 8.4.1 deploys 4 container images: blackducksoftware/blackduck-cfssl, blackducksoftware/blackduck-alert, blackducksoftware/blackduck-alert-db and blackducksoftware/blackduck-alert-rabbitmq. Across them, 148 findings — 0 critical, 2 high. The highest contribution is GHSA-wmwf-9ccg-fff5 in tomcat-embed-core 10.1.42, fixed in 10.1.45.

Radar Score

1,6040224121

148 findings over 4 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
blackducksoftware/blackduck-cfssl1.0.100000
blackducksoftware/blackduck-alert8.4.10224751,292
blackducksoftware/blackduck-alert-db8.4.100046312
blackducksoftware/blackduck-alert-rabbitmq8.4.100000

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

148 distinct across the version’s images
SeverityAdvisoryPackageFixed in
HighGHSA-wmwf-9ccg-fff5tomcat-embed-core@10.1.4210.1.45
HighGHSA-vfww-5hm6-hx2jtomcat-embed-core@10.1.4210.1.45
MediumGHSA-98qh-xjc8-98pqpostgresql@42.7.742.7.11
MediumGHSA-r29c-68gh-xp6xtomcat-embed-core@10.1.4210.1.55
MediumGHSA-gqp3-2cvr-x8m3tomcat-embed-core@10.1.4210.1.44
MediumGHSA-5476-xc4j-rqcvc3p0@0.9.5.50.12.0
MediumGHSA-h6fc-48rj-7qqhtomcat-embed-core@10.1.4210.1.55
MediumGHSA-m2cm-222f-qw44mchange-commons-java@0.2.190.4.0
MediumGHSA-5m62-pw8w-7w9ftomcat-embed-core@10.1.4210.1.55
MediumGHSA-wr62-c79q-cv37tomcat-embed-core@10.1.4210.1.43
MediumGHSA-25xr-qj8w-c4vftomcat-embed-core@10.1.4210.1.43
MediumGHSA-9xv2-5v5q-p794tomcat-embed-core@10.1.4210.1.58
MediumGHSA-rmj7-2vxq-3g9fjackson-databind@2.17.32.18.8
MediumGHSA-j288-q9x7-2f5vcommons-lang3@3.14.03.18.0
MediumGHSA-78wr-2p64-hpwjcommons-io@2.8.02.14.0
MediumGHSA-j3rv-43j4-c7qmjackson-databind@2.17.32.18.8
MediumGHSA-gcx9-497g-6cp6tomcat-embed-core@10.1.4210.1.58
MediumGHSA-h3x4-894j-xpx5tomcat-embed-core@10.1.4210.1.58
MediumGHSA-68mj-5wr7-6fggamqp-client@5.21.05.33.1
MediumGHSA-93j5-89vc-pph4amqp-client@5.21.05.33.1
MediumGHSA-g3pr-3p32-fp23micrometer-core@1.13.15no fix listed
MediumGHSA-r936-gwx5-v52fspring-webmvc@6.1.21no fix listed
MediumGHSA-gx5v-xp9w-j4cgtomcat-embed-core@10.1.4210.1.55
MediumGHSA-jh4v-gfqj-7rhxamqp-client@5.21.05.34.0
MediumGHSA-mf92-479x-3373spring-security-web@6.3.10no fix listed
MediumGHSA-9pwp-9qqc-pr26bcprov-jdk18on@1.721.85
LowGHSA-9342-92gg-6v29smtp@2.0.32.0.4
LowGHSA-563x-q5rq-57qptomcat-embed-core@10.1.4210.1.52
LowGHSA-rv64-5gf8-9qq8tomcat-embed-core@10.1.4210.1.54
LowGHSA-x4m4-345f-5h5gtomcat-embed-core@10.1.4210.1.54
LowGHSA-fv25-8xcx-gqjctomcat-embed-core@10.1.4210.1.55
LowGHSA-q4xh-88c3-wmh7jackson-databind@2.17.32.18.10
LowGHSA-6g32-pxv4-2wfjamqp-client@5.21.05.33.0
LowGHSA-mgp5-rv84-w37qtomcat-embed-core@10.1.4210.1.52
LowGHSA-5mp6-jrq3-r938tomcat-embed-core@10.1.4210.1.55
LowGHSA-h84g-69h7-mw6vmchange-commons-java@0.2.190.6.0
LowGHSA-qv9r-c865-cp47log4j-api@2.23.12.25.5
LowGHSA-jmp9-x22r-554xspring-core@6.1.21no fix listed
LowGHSA-9fw2-h3hf-293rspring-data-commons@3.3.13no fix listed
LowGHSA-m69x-pw9p-7j3qspring-security-saml2-service-provider@6.3.10no fix listed
LowGHSA-r5w3-xv2f-j59qspring-expression@6.1.21no fix listed
LowGHSA-x23c-287f-qqv5spring-webmvc@6.1.21no fix listed
LowGHSA-qp49-qgx5-5m26bcprov-jdk18on@1.721.85
LowGHSA-hgrr-935x-pq79tomcat-embed-core@10.1.4210.1.47
LowGHSA-v435-xc8x-wvr9bcprov-jdk18on@1.721.78
LowGHSA-fpj8-gq4v-p354tomcat-embed-core@10.1.4210.1.50
LowGHSA-72hv-8253-57qqjackson-core@2.17.32.18.6
LowGHSA-wg6q-6289-32hpbcpkix-jdk18on@1.721.84
LowGHSA-wjxj-5m7g-mg7qbcpkix-jdk18on@1.721.73
LowGHSA-wjxj-5m7g-mg7qbcprov-jdk18on@1.721.73

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
8.4.1latesttoday8.4.102241211,604
8.4.024 days ago8.4.002882854,461

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/blackduck/blackduck-alert.svg)](https://charts.stackradar.io/charts/blackduck/blackduck-alert)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 29 Sept 2026 · scanned 29 Sept 2026 · advisories as of 29 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.