StackRadar

colosseum 1.0.18 Helm chart

book-k8sinfra-v2

Scored 14 Sept 2026

colosseum helm chart

Version 1.0.18 2 months agodeploys tag log 0Artifact Hub

colosseum 1.0.18 deploys 5 container images: sysnet4admin/colosseum-agg, sysnet4admin/colosseum-cms, sysnet4admin/colosseum-nti, sysnet4admin/colosseum-prm and 1 more. Across them, 2,455 findings — 6 critical, 16 high — 4 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 10.1.34, fixed in 10.1.35.

Radar Score

26,9966163972,028

2,455 findings over 5 of 5 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images
ImageTagVulnerabilitiesRadar Score
sysnet4admin/colosseum-agglog26551873,210
sysnet4admin/colosseum-cmslog2415582010,697
sysnet4admin/colosseum-ntilog00452460
sysnet4admin/colosseum-prmlog2415582010,697
sysnet4admin/colosseum-rwdlog02281491,932

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,201 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowDEBIAN-CVE-2026-63384libevent@2.1.12-stable-8no fix listed
LowDEBIAN-CVE-2026-85091zlib@1:1.3.dfsg+really1.3.1-1+b1no fix listed
LowDEBIAN-CVE-2026-6637postgresql-15@15.13-0+deb12u115.18-0+deb12u1
LowDEBIAN-CVE-2026-25989imagemagick@8:6.9.11.60+dfsg-1.6+deb12u38:6.9.11.60+dfsg-1.6+deb12u7
LowDEBIAN-CVE-2021-31879wget@1.21.3-1+deb12u1no fix listed
LowDEBIAN-CVE-2026-60002openssh@1:9.2p1-2+deb12u6no fix listed
LowDEBIAN-CVE-2026-18408postgresql-15@15.13-0+deb12u115.19-0+deb12u1
LowDEBIAN-CVE-2025-69204imagemagick@8:6.9.11.60+dfsg-1.6+deb12u38:6.9.11.60+dfsg-1.6+deb12u5
LowDEBIAN-CVE-2023-1972binutils@2.40-2no fix listed
LowDEBIAN-CVE-2026-11972python3.11@3.11.2-6+deb12u6no fix listed
LowGHSA-qffp-2rhf-9h96tar@6.2.17.5.10
LowGHSA-x9g3-xrwr-cwfgpiscina@4.9.24.9.3
LowDEBIAN-CVE-2025-1179binutils@2.40-2no fix listed
LowGHSA-c4c3-7fpv-j4q5netty-handler@4.1.116.Final4.1.137.Final
LowDEBIAN-CVE-2025-69534python3.11@3.11.2-6+deb12u6no fix listed
LowDEBIAN-CVE-2026-33901imagemagick@8:6.9.11.60+dfsg-1.6+deb12u38:6.9.11.60+dfsg-1.6+deb12u9
LowDEBIAN-CVE-2026-80230curl@7.88.1-10+deb12u12no fix listed
LowDEBIAN-CVE-2026-15741postgresql-15@15.13-0+deb12u115.19-0+deb12u1
LowDEBIAN-CVE-2026-34545openexr@3.1.5-5no fix listed
LowDEBIAN-CVE-2026-50142libheif@1.15.1-1+deb12u1no fix listed
LowGHSA-23hp-3jrh-7fpwtar@6.2.17.5.19
LowGHSA-fv25-8xcx-gqjctomcat-embed-core@10.1.3410.1.55
LowUBUNTU-CVE-2026-42013gnutls28@3.7.3-4ubuntu1.9no fix listed
LowDEBIAN-CVE-2017-13716binutils@2.40-2no fix listed
LowDEBIAN-CVE-2026-0861glibc@2.41-122.41-12+deb13u2
LowDEBIAN-CVE-2026-58469wget@1.21.3-1+deb12u1no fix listed
LowDEBIAN-CVE-2017-7275imagemagick@8:6.9.11.60+dfsg-1.6+deb12u3no fix listed
LowGHSA-52cp-r559-cp3mjs-yaml@4.1.04.3.0
LowDEBIAN-CVE-2026-3833gnutls28@3.7.9-2+deb12u43.7.9-2+deb12u7
LowUBUNTU-CVE-2024-2236libgcrypt20@1.9.4-3ubuntu3.21.9.4-3ubuntu3.3
LowDEBIAN-CVE-2026-34588openexr@3.1.5-5no fix listed
LowUBUNTU-CVE-2026-31789openssl@3.0.2-0ubuntu1.25no fix listed
LowUBUNTU-CVE-2025-69419openssl@3.0.2-0ubuntu1.25no fix listed
LowGHSA-23hv-mwm6-g8jftomcat-embed-core@10.1.3410.1.42
LowDEBIAN-CVE-2023-45322libxml2@2.9.14+dfsg-1.3~deb12u12.9.14+dfsg-1.3~deb12u2
LowGHSA-hmw2-7cc7-3qxxform-data@4.0.24.0.6
LowALPINE-CVE-2026-54874openssl@3.5.7-r03.5.8-r0
LowUBUNTU-CVE-2026-54874openssl@3.0.2-0ubuntu1.253.0.2-0ubuntu1.29
LowDEBIAN-CVE-2026-6475postgresql-15@15.13-0+deb12u115.18-0+deb12u1
LowGHSA-563x-q5rq-57qptomcat-embed-core@10.1.3410.1.52
LowGHSA-7r86-cg39-jmmjminimatch@3.1.23.1.3
LowUBUNTU-CVE-2026-42766openssl@3.0.2-0ubuntu1.25no fix listed
LowDEBIAN-CVE-2026-74860libxml2@2.9.14+dfsg-1.3~deb12u1no fix listed
LowDEBIAN-CVE-2025-66628imagemagick@8:6.9.11.60+dfsg-1.6+deb12u38:6.9.11.60+dfsg-1.6+deb12u5
LowDEBIAN-CVE-2026-33908imagemagick@8:6.9.11.60+dfsg-1.6+deb12u38:6.9.11.60+dfsg-1.6+deb12u9
LowDEBIAN-CVE-2026-34501apr-util@1.6.3-11.6.3-1+deb12u1
LowDEBIAN-CVE-2026-34502apr-util@1.6.3-11.6.3-1+deb12u1
LowDEBIAN-CVE-2018-9996binutils@2.40-2no fix listed
LowDEBIAN-CVE-2024-50602expat@2.5.0-1+deb12u12.5.0-1+deb12u2
LowDEBIAN-CVE-2025-69720ncurses@6.5+20250216-2no fix listed

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.18latest2 months agolog6163972,02826,996

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/book-k8sinfra-v2/colosseum.svg)](https://charts.stackradar.io/charts/book-k8sinfra-v2/colosseum)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.