bluerange-server 1.3.1 Helm chart
bluerangeOfficialVerified publisherScored 14 Sept 2026
Install BlueRange Server in your Kubernetes cluster
Version 1.3.1 4 months agoapp version 26.1.3 0Artifact Hub
bluerange-server 1.3.1 deploys 1 container image: bluerange/bluerange. Across them, 202 findings — 1 critical, 0 high. The highest contribution is GHSA-vv7r-c36w-3prj in commons-fileupload2-core 2.0.0-M1, fixed in 2.0.0-M4.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
1 image
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| bluerange/ | 26.1.3 | 1025176 | 1,816 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
202 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-hc43-m36c-8v33 | spring-data-mongodb | no fix listed |
| Low | GHSA-wxpp-56q6-5pcg | spring-expression | 6.2.19 |
| Low | GHSA-5jmj-h7xm-6q6v | jackson-databind | 2.18.9 |
| Low | GHSA-6p4f-wcwh-5vvm | spring-webflux | 6.2.18 |
| Low | GHSA-6p4f-wcwh-5vvm | spring-webmvc | 6.2.18 |
| Low | GHSA-mfg7-5gfp-c4w3 | netty-codec-dns | 4.1.136.Final |
| Low | GHSA-wwpq-f5c3-7hvx | spring-boot | no fix listed |
| Low | GHSA-gcjf-9mgh-3p7g | netty-codec-http | 4.1.136.Final |
| Low | GHSA-v8h7-rr48-vmmv | netty-codec-http | 4.1.133.Final |
| Low | GHSA-g9jj-cgmh-9f38 | mariadb-java-client | 3.4.3 |
| Low | GHSA-563q-j3cm-6jxm | netty-codec-http2 | 4.1.135.Final |
| Low | GHSA-5x3r-wrvg-rp6q | netty-codec-http2 | 4.1.135.Final |
| Low | GHSA-293q-567p-wmwq | spring-security-web | no fix listed |
| Low | GHSA-qxvw-fvwx-5cp7 | mariadb-java-client | 3.4.3 |
| Low | GHSA-25qh-j22f-pwp8 | logback-core | 1.5.19 |
| Low | GHSA-hvcg-qmg6-jm4c | netty-codec-http | 4.1.135.Final |
| Low | GHSA-957g-f97v-vppc | spring-webmvc | 6.2.19 |
| Low | GHSA-cvc6-q2cp-2xhw | spring-security-oauth2-jose | no fix listed |
| Low | GHSA-cjpg-rgq5-fr37 | spring-webflux | 6.2.19 |
| Low | GHSA-cjpg-rgq5-fr37 | spring-webmvc | 6.2.19 |
| Low | GHSA-mhm7-754m-9p8w | jackson-databind | 2.18.9 |
| Low | GHSA-m452-q8c9-rg2f | async-http-client | 2.16.0 |
| Low | GHSA-3x3v-w654-m28m | undertow-core | no fix listed |
| Low | GHSA-pmhh-3w7g-xqp8 | jsoup | 1.23.1 |
| Low | GHSA-x44p-gvrj-pj2r | amazon-s3-encryption-client-java | 4.0.0 |
| Low | GHSA-659m-px2c-25wj | spring-core | 6.2.19 |
| Low | GHSA-4hfh-6x8g-gwpp | spring-webflux | 6.2.19 |
| Low | GHSA-ggg2-9786-hwc8 | spring-boot-autoconfigure | no fix listed |
| Low | GHSA-x2wq-9x2f-fhj7 | spring-security-core | no fix listed |
| Low | GHSA-4wp7-92pw-q264 | spring-context | 6.2.7 |
| Low | GHSA-vxf7-qj7q-83fh | spring-security-core | no fix listed |
| Low | GHSA-h3qp-gqrc-q736 | spring-webflux | 6.2.19 |
| Low | GHSA-h3qp-gqrc-q736 | spring-webmvc | 6.2.19 |
| Low | GHSA-7m2p-62gw-p8qq | spring-web | 6.2.19 |
| Low | GHSA-9f52-rjqv-25qv | spring-expression | 6.2.19 |
| Low | GHSA-w573-9ffj-6ff9 | netty-transport-native-epoll | 4.1.135.Final |
| Low | GHSA-w573-9ffj-6ff9 | netty-transport-native-kqueue | 4.1.135.Final |
| Low | GHSA-ww38-37g9-m3q3 | spring-security-saml2-service-provider | no fix listed |
| Low | GHSA-wg35-8jpf-2xv3 | spring-webmvc | 6.2.18 |
| Low | GHSA-wg35-8jpf-2xv3 | spring-webflux | 6.2.18 |
| Low | ALSA-2026:10949 | python3.9 | 3.9.25-3.el9_7.3 |
| Low | ALSA-2026:11510 | vim | 2:8.2.2637-23.el9_7.3 |
| Low | ALSA-2026:12441 | libcap | 2.48-10.el9_7.1 |
| Low | ALSA-2026:13677 | systemd | 252-55.el9_7.9.alma.1 |
| Low | ALSA-2026:14791 | libpng | 2:1.6.37-12.el9_7.3 |
| Low | ALSA-2026:15971 | glib2 | 2.68.4-18.el9_7.2 |
| Low | ALSA-2026:18028 | libpng | 2:1.6.37-12.el9_7.4 |
| Low | ALSA-2026:18599 | p11-kit | 0.26.2-1.el9 |
| Low | ALSA-2026:19213 | systemd | 252-67.el9_8.2.alma.1 |
| Low | ALSA-2026:19216 | python3.9 | 3.9.25-7.el9_8 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/bluerange/bluerange-server)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.