blackduck-alert 8.4.1 Helm chart
blackduckScored 29 Sept 2026
Helm chart to deploy Black Duck Alert application
Version 8.4.1 todayapp version 8.4.1 0Artifact Hub
blackduck-alert 8.4.1 deploys 4 container images: blackducksoftware/blackduck-cfssl, blackducksoftware/blackduck-alert, blackducksoftware/blackduck-alert-db and blackducksoftware/blackduck-alert-rabbitmq. Across them, 148 findings — 0 critical, 2 high. The highest contribution is GHSA-wmwf-9ccg-fff5 in tomcat-embed-core 10.1.42, fixed in 10.1.45.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| blackducksoftware/ | 1.0.1 | 0000 | 0 |
| blackducksoftware/ | 8.4.1 | 022475 | 1,292 |
| blackducksoftware/ | 8.4.1 | 00046 | 312 |
| blackducksoftware/ | 8.4.1 | 0000 | 0 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-r7wm-3cxj-wff9 | jackson-core | 2.18.8 |
| Low | GHSA-293q-567p-wmwq | spring-security-web | no fix listed |
| Low | GO-2026-4981 | stdlib | 1.25.10 |
| Low | GO-2026-4986 | stdlib | 1.25.10 |
| Low | GHSA-hgj6-7826-r7m5 | jackson-databind | 2.18.8 |
| Low | GO-2026-4337 | stdlib | 1.24.13 |
| Low | GO-2026-4601 | stdlib | 1.25.8 |
| Low | GO-2026-4977 | stdlib | 1.25.10 |
| Low | GHSA-6p4f-wcwh-5vvm | spring-webmvc | no fix listed |
| Low | GO-2026-4918 | stdlib | 1.25.10 |
| Low | GHSA-957g-f97v-vppc | spring-webmvc | no fix listed |
| Low | GO-2026-4342 | stdlib | 1.24.12 |
| Low | GHSA-vvgp-rfg2-7rr6 | jackson-databind | 2.18.9 |
| Low | GHSA-cjpg-rgq5-fr37 | spring-webmvc | no fix listed |
| Low | GHSA-wwpq-f5c3-7hvx | spring-boot | no fix listed |
| Low | GO-2026-4947 | stdlib | 1.25.9 |
| Low | GO-2026-5026 | stdlib | 1.25.13 |
| Low | GO-2026-4870 | stdlib | 1.25.9 |
| Low | GHSA-7g45-4rm6-3mm3 | guava | 32.0.0-android |
| Low | GHSA-5m9f-rphj-c435 | amqp-client | 5.33.0 |
| Low | GHSA-25qh-j22f-pwp8 | logback-core | 1.5.19 |
| Low | GO-2026-4971 | stdlib | 1.25.10 |
| Low | GO-2025-4009 | stdlib | 1.24.8 |
| Low | GO-2025-4006 | stdlib | 1.24.8 |
| Low | GO-2026-5037 | stdlib | 1.25.11 |
| Low | GO-2026-5972 | stdlib | 1.25.13 |
| Low | GO-2026-6088 | stdlib | 1.25.13 |
| Low | GO-2026-6089 | stdlib | 1.25.13 |
| Low | GO-2026-6090 | stdlib | 1.25.13 |
| Low | GO-2026-5038 | stdlib | 1.25.11 |
| Low | GO-2026-6218 | stdlib | 1.25.13 |
| Low | GHSA-5mg8-w23w-74h3 | guava | 32.0.0-android |
| Low | GO-2025-4012 | stdlib | 1.24.8 |
| Low | GO-2025-4011 | stdlib | 1.24.8 |
| Low | GO-2025-4015 | stdlib | 1.24.8 |
| Low | GHSA-pmhh-3w7g-xqp8 | jsoup | 1.23.1 |
| Low | GO-2025-4155 | stdlib | 1.24.11 |
| Low | GO-2025-4008 | stdlib | 1.24.8 |
| Low | GO-2025-4010 | stdlib | 1.24.8 |
| Low | GHSA-9m89-8frq-c98c | tomcat-embed-core | 10.1.55 |
| Low | GO-2025-4014 | stdlib | 1.24.8 |
| Low | GO-2026-4976 | stdlib | 1.25.10 |
| Low | GO-2026-5856 | stdlib | 1.25.12 |
| Low | GO-2026-5039 | stdlib | 1.25.11 |
| Low | GO-2026-4980 | stdlib | 1.25.10 |
| Low | GO-2025-4007 | stdlib | 1.24.9 |
| Low | GO-2026-4946 | stdlib | 1.25.9 |
| Low | GO-2025-4013 | stdlib | 1.24.8 |
| Low | GO-2026-4603 | stdlib | 1.25.8 |
| Low | GO-2026-4865 | stdlib | 1.25.9 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 8.4.1latest | today | 8.4.1 | 0224121 | 1,604 |
| 8.4.0 | 24 days ago | 8.4.0 | 0288285 | 4,461 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.