blackduck-alert 8.4.1 Helm chart
blackduckScored 29 Sept 2026
Helm chart to deploy Black Duck Alert application
Version 8.4.1 todayapp version 8.4.1 0Artifact Hub
blackduck-alert 8.4.1 deploys 4 container images: blackducksoftware/blackduck-cfssl, blackducksoftware/blackduck-alert, blackducksoftware/blackduck-alert-db and blackducksoftware/blackduck-alert-rabbitmq. Across them, 148 findings — 0 critical, 2 high. The highest contribution is GHSA-wmwf-9ccg-fff5 in tomcat-embed-core 10.1.42, fixed in 10.1.45.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| blackducksoftware/ | 1.0.1 | 0000 | 0 |
| blackducksoftware/ | 8.4.1 | 022475 | 1,292 |
| blackducksoftware/ | 8.4.1 | 00046 | 312 |
| blackducksoftware/ | 8.4.1 | 0000 | 0 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-8xfc-gm6g-vgpv | bcprov-jdk18on | 1.78 |
| Low | GHSA-4h8f-2wvx-gg5w | bcprov-jdk18on | 1.78 |
| Low | GO-2026-4341 | stdlib | 1.24.12 |
| Low | GHSA-67mf-3cr5-8w23 | bcprov-jdk18on | 1.78 |
| Low | GHSA-574f-3g2m-x479 | bcprov-jdk18on | 1.80.2 |
| Low | GHSA-j92g-9f8w-j867 | postgresql | 42.7.12 |
| Low | GHSA-qx7j-jv8m-fppr | amqp-client | 5.31.0 |
| Low | GHSA-gx83-3vf8-gh7j | jackson-databind | 2.18.10 |
| Low | GHSA-9m3c-qcxr-9x87 | tomcat-embed-core | 10.1.53 |
| Low | GHSA-w6w4-rjh9-9r58 | c3p0 | 0.14.0 |
| Low | GHSA-3pjw-73gf-8qr5 | jackson-databind | 2.18.8 |
| Low | GHSA-4cx2-fc23-5wg6 | bcpkix-jdk18on | 1.79 |
| Low | GHSA-hr8g-6v94-x4m9 | bcprov-jdk18on | 1.74 |
| Low | GHSA-3pjj-qpw6-5fcm | spring-security-saml2-service-provider | no fix listed |
| Low | GHSA-3chg-m5w7-qfv5 | spring-webmvc | no fix listed |
| Low | GHSA-jhq6-gfmj-v8fx | logback-core | 1.5.34 |
| Low | GHSA-5m4m-73w9-8433 | spring-data-commons | no fix listed |
| Low | GHSA-72pg-x5f8-j25j | spring-webmvc | no fix listed |
| Low | GHSA-4773-3jfm-qmx3 | spring-webmvc | no fix listed |
| Low | GHSA-wjgm-6hv5-3cvf | jackson-databind | 2.18.10 |
| Low | GHSA-2827-2mxx-j8pv | spring-retry | 2.0.13 |
| Low | GHSA-5vpf-xvv7-c8vh | spring-data-commons | no fix listed |
| Low | GHSA-mq64-j8f9-9gcj | spring-webmvc | no fix listed |
| Low | GHSA-wxpp-56q6-5pcg | spring-expression | no fix listed |
| Low | GHSA-x2r2-rvhq-2mqv | spring-security-web | no fix listed |
| Low | GHSA-5jmj-h7xm-6q6v | jackson-databind | 2.18.9 |
| Low | GHSA-r7wm-3cxj-wff9 | jackson-core | 2.18.8 |
| Low | GHSA-293q-567p-wmwq | spring-security-web | no fix listed |
| Low | GO-2026-4981 | stdlib | 1.25.10 |
| Low | GO-2026-4986 | stdlib | 1.25.10 |
| Low | GHSA-hgj6-7826-r7m5 | jackson-databind | 2.18.8 |
| Low | GO-2026-4337 | stdlib | 1.24.13 |
| Low | GO-2026-4601 | stdlib | 1.25.8 |
| Low | GO-2026-4977 | stdlib | 1.25.10 |
| Low | GHSA-6p4f-wcwh-5vvm | spring-webmvc | no fix listed |
| Low | GO-2026-4918 | stdlib | 1.25.10 |
| Low | GHSA-957g-f97v-vppc | spring-webmvc | no fix listed |
| Low | GO-2026-4342 | stdlib | 1.24.12 |
| Low | GHSA-vvgp-rfg2-7rr6 | jackson-databind | 2.18.9 |
| Low | GHSA-cjpg-rgq5-fr37 | spring-webmvc | no fix listed |
| Low | GHSA-wwpq-f5c3-7hvx | spring-boot | no fix listed |
| Low | GO-2026-4947 | stdlib | 1.25.9 |
| Low | GO-2026-5026 | stdlib | 1.25.13 |
| Low | GO-2026-4870 | stdlib | 1.25.9 |
| Low | GHSA-7g45-4rm6-3mm3 | guava | 32.0.0-android |
| Low | GHSA-5m9f-rphj-c435 | amqp-client | 5.33.0 |
| Low | GHSA-25qh-j22f-pwp8 | logback-core | 1.5.19 |
| Low | GO-2026-4971 | stdlib | 1.25.10 |
| Low | GO-2025-4009 | stdlib | 1.24.8 |
| Low | GO-2025-4006 | stdlib | 1.24.8 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 8.4.1latest | today | 8.4.1 | 0224121 | 1,604 |
| 8.4.0 | 24 days ago | 8.4.0 | 0288285 | 4,461 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.