StackRadar

blackduck-alert 8.4.1 Helm chart

blackduck

Scored 29 Sept 2026

Helm chart to deploy Black Duck Alert application

Version 8.4.1 todayapp version 8.4.1 0Artifact Hub

blackduck-alert 8.4.1 deploys 4 container images: blackducksoftware/blackduck-cfssl, blackducksoftware/blackduck-alert, blackducksoftware/blackduck-alert-db and blackducksoftware/blackduck-alert-rabbitmq. Across them, 148 findings — 0 critical, 2 high. The highest contribution is GHSA-wmwf-9ccg-fff5 in tomcat-embed-core 10.1.42, fixed in 10.1.45.

Radar Score

1,6040224121

148 findings over 4 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
blackducksoftware/blackduck-cfssl1.0.100000
blackducksoftware/blackduck-alert8.4.10224751,292
blackducksoftware/blackduck-alert-db8.4.100046312
blackducksoftware/blackduck-alert-rabbitmq8.4.100000

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

121 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGHSA-9342-92gg-6v29smtp@2.0.32.0.4
LowGHSA-563x-q5rq-57qptomcat-embed-core@10.1.4210.1.52
LowGHSA-rv64-5gf8-9qq8tomcat-embed-core@10.1.4210.1.54
LowGHSA-x4m4-345f-5h5gtomcat-embed-core@10.1.4210.1.54
LowGHSA-fv25-8xcx-gqjctomcat-embed-core@10.1.4210.1.55
LowGHSA-q4xh-88c3-wmh7jackson-databind@2.17.32.18.10
LowGHSA-6g32-pxv4-2wfjamqp-client@5.21.05.33.0
LowGHSA-mgp5-rv84-w37qtomcat-embed-core@10.1.4210.1.52
LowGHSA-5mp6-jrq3-r938tomcat-embed-core@10.1.4210.1.55
LowGHSA-h84g-69h7-mw6vmchange-commons-java@0.2.190.6.0
LowGHSA-qv9r-c865-cp47log4j-api@2.23.12.25.5
LowGHSA-jmp9-x22r-554xspring-core@6.1.21no fix listed
LowGHSA-9fw2-h3hf-293rspring-data-commons@3.3.13no fix listed
LowGHSA-m69x-pw9p-7j3qspring-security-saml2-service-provider@6.3.10no fix listed
LowGHSA-r5w3-xv2f-j59qspring-expression@6.1.21no fix listed
LowGHSA-x23c-287f-qqv5spring-webmvc@6.1.21no fix listed
LowGHSA-qp49-qgx5-5m26bcprov-jdk18on@1.721.85
LowGHSA-hgrr-935x-pq79tomcat-embed-core@10.1.4210.1.47
LowGHSA-v435-xc8x-wvr9bcprov-jdk18on@1.721.78
LowGHSA-fpj8-gq4v-p354tomcat-embed-core@10.1.4210.1.50
LowGHSA-72hv-8253-57qqjackson-core@2.17.32.18.6
LowGHSA-wg6q-6289-32hpbcpkix-jdk18on@1.721.84
LowGHSA-wjxj-5m7g-mg7qbcprov-jdk18on@1.721.73
LowGHSA-wjxj-5m7g-mg7qbcpkix-jdk18on@1.721.73
LowGHSA-8xfc-gm6g-vgpvbcprov-jdk18on@1.721.78
LowGHSA-4h8f-2wvx-gg5wbcprov-jdk18on@1.721.78
LowGO-2026-4341stdlib@go1.24.61.24.12
LowGHSA-67mf-3cr5-8w23bcprov-jdk18on@1.721.78
LowGHSA-574f-3g2m-x479bcprov-jdk18on@1.721.80.2
LowGHSA-j92g-9f8w-j867postgresql@42.7.742.7.12
LowGHSA-qx7j-jv8m-fppramqp-client@5.21.05.31.0
LowGHSA-gx83-3vf8-gh7jjackson-databind@2.17.32.18.10
LowGHSA-9m3c-qcxr-9x87tomcat-embed-core@10.1.4210.1.53
LowGHSA-w6w4-rjh9-9r58c3p0@0.9.5.50.14.0
LowGHSA-3pjw-73gf-8qr5jackson-databind@2.17.32.18.8
LowGHSA-4cx2-fc23-5wg6bcpkix-jdk18on@1.721.79
LowGHSA-hr8g-6v94-x4m9bcprov-jdk18on@1.721.74
LowGHSA-3pjj-qpw6-5fcmspring-security-saml2-service-provider@6.3.10no fix listed
LowGHSA-3chg-m5w7-qfv5spring-webmvc@6.1.21no fix listed
LowGHSA-jhq6-gfmj-v8fxlogback-core@1.5.181.5.34
LowGHSA-5m4m-73w9-8433spring-data-commons@3.3.13no fix listed
LowGHSA-72pg-x5f8-j25jspring-webmvc@6.1.21no fix listed
LowGHSA-4773-3jfm-qmx3spring-webmvc@6.1.21no fix listed
LowGHSA-wjgm-6hv5-3cvfjackson-databind@2.17.32.18.10
LowGHSA-2827-2mxx-j8pvspring-retry@2.0.122.0.13
LowGHSA-5vpf-xvv7-c8vhspring-data-commons@3.3.13no fix listed
LowGHSA-mq64-j8f9-9gcjspring-webmvc@6.1.21no fix listed
LowGHSA-wxpp-56q6-5pcgspring-expression@6.1.21no fix listed
LowGHSA-x2r2-rvhq-2mqvspring-security-web@6.3.10no fix listed
LowGHSA-5jmj-h7xm-6q6vjackson-databind@2.17.32.18.9

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
8.4.1latesttoday8.4.102241211,604
8.4.024 days ago8.4.002882854,461

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/blackduck/blackduck-alert.svg)](https://charts.stackradar.io/charts/blackduck/blackduck-alert)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 29 Sept 2026 · scanned 29 Sept 2026 · advisories as of 29 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.