StackRadar

blackduck-alert Helm chart

blackduck

Scored 14 Sept 2026

Helm chart to deploy Black Duck Alert application

Latest 8.4.0 9 days agoapp version 8.4.0 0Artifact Hub

blackduck-alert 8.4.0 deploys 4 container images: blackducksoftware/blackduck-cfssl, blackducksoftware/blackduck-alert, blackducksoftware/blackduck-alert-db and blackducksoftware/blackduck-alert-rabbitmq. Across them, 373 findings0 critical, 2 high. The highest contribution is GHSA-wmwf-9ccg-fff5 in tomcat-embed-core 10.1.42, fixed in 10.1.45.

Radar Score

4,2920273297

373 findings over 4 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
blackducksoftware/blackduck-cfssl1.0.100000
blackducksoftware/blackduck-alert8.4.002431712,590
blackducksoftware/blackduck-alert-db8.4.0001065702
blackducksoftware/blackduck-alert-rabbitmq8.4.00020611,000

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

221 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowALPINE-CVE-2026-8926curl@8.17.0-r18.22.0-r0
LowGHSA-g3pr-3p32-fp23micrometer-core@1.13.15no fix listed
LowGHSA-9342-92gg-6v29smtp@2.0.32.0.4
LowALPINE-CVE-2026-3805curl@8.17.0-r18.19.0-r0
LowALPINE-CVE-2026-14662postgresql18@18.3-r018.5-r0
LowALPINE-CVE-2026-6477postgresql18@18.3-r018.4-r0
LowALPINE-CVE-2026-14456openssl@3.5.6-r03.5.8-r0
LowALPINE-CVE-2026-9076openssl@3.5.6-r03.5.7-r0
LowALPINE-CVE-2026-82209curl@8.17.0-r18.22.0-r0
LowALPINE-CVE-2026-14664postgresql18@18.3-r018.5-r0
LowALPINE-CVE-2026-14670postgresql18@18.3-r018.5-r0
LowALPINE-CVE-2026-15742postgresql18@18.3-r018.5-r0
LowALPINE-CVE-2026-14676postgresql18@18.3-r018.5-r0
LowALPINE-CVE-2026-19385postgresql18@18.3-r018.5-r0
LowALPINE-CVE-2026-80255curl@8.17.0-r18.22.0-r0
LowALPINE-CVE-2026-14671postgresql18@18.3-r018.5-r0
LowALPINE-CVE-2026-14677postgresql18@18.3-r018.5-r0
LowALPINE-CVE-2026-14680postgresql18@18.3-r018.5-r0
LowALPINE-CVE-2026-16238postgresql18@18.3-r018.5-r0
LowGHSA-68mj-5wr7-6fggamqp-client@5.21.05.33.1
LowALPINE-CVE-2026-11564curl@8.17.0-r18.22.0-r0
LowALPINE-CVE-2026-32316jq@1.8.1-r01.8.2-r0
LowALPINE-CVE-2026-6732libxml2@2.13.9-r02.13.9-r1
LowGHSA-93j5-89vc-pph4amqp-client@5.21.05.33.1
LowALPINE-CVE-2026-13608curl@8.17.0-r18.22.0-r0
LowALPINE-CVE-2026-5773curl@8.17.0-r18.20.0-r0
LowALPINE-CVE-2026-63072openssl@3.5.6-r03.5.8-r0
LowALPINE-CVE-2026-11586curl@8.17.0-r18.22.0-r0
LowALPINE-CVE-2026-45445openssl@3.5.6-r03.5.7-r0
LowALPINE-CVE-2026-6637postgresql18@18.3-r018.4-r0
LowGHSA-574f-3g2m-x479bcprov-jdk18on@1.721.80.2
LowALPINE-CVE-2026-18408postgresql18@18.3-r018.5-r0
LowALPINE-CVE-2026-80230curl@8.17.0-r18.22.0-r0
LowALPINE-CVE-2026-15741postgresql18@18.3-r018.5-r0
LowGHSA-fv25-8xcx-gqjctomcat-embed-core@10.1.4210.1.55
LowALPINE-CVE-2026-54874openssl@3.5.6-r03.5.8-r0
LowALPINE-CVE-2026-6475postgresql18@18.3-r018.4-r0
LowGHSA-563x-q5rq-57qptomcat-embed-core@10.1.4210.1.52
LowALPINE-CVE-2026-42766openssl@3.5.6-r03.5.7-r0
LowGHSA-mgp5-rv84-w37qtomcat-embed-core@10.1.4210.1.52
LowGHSA-qv9r-c865-cp47log4j-api@2.23.12.25.5
LowALPINE-CVE-2026-63075openssl@3.5.6-r03.5.8-r0
LowALPINE-CVE-2026-6479postgresql18@18.3-r018.4-r0
LowGHSA-5mp6-jrq3-r938tomcat-embed-core@10.1.4210.1.55
LowGHSA-jmp9-x22r-554xspring-core@6.1.21no fix listed
LowGHSA-rv64-5gf8-9qq8tomcat-embed-core@10.1.4210.1.54
LowALPINE-CVE-2026-33630c-ares@1.34.6-r01.34.8-r0
LowALPINE-CVE-2026-6464postgresql18@18.3-r018.5-r0
LowGHSA-x4m4-345f-5h5gtomcat-embed-core@10.1.4210.1.54
LowGHSA-v435-xc8x-wvr9bcprov-jdk18on@1.721.78

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
8.4.0latest9 days ago8.4.002732974,292

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/blackduck/blackduck-alert.svg)](https://charts.stackradar.io/charts/blackduck/blackduck-alert)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.