StackRadar

netbox Helm chart

bootcVerified publisher

Scored 20 Oct 2026

IP address management (IPAM) and data center infrastructure management (DCIM) tool

Latest 4.1.1 4 years agoapp version v3.2.8 20Artifact Hub

netbox 4.1.1 deploys 4 container images: library/busybox, netboxcommunity/netbox, bitnami/postgresql and bitnami/redis. Across the 2 measured, 710 findings — 10 critical, 22 high — 4 on CISA KEV. The highest contribution is UBUNTU-CVE-2023-38545 in curl 7.81.0-1ubuntu1.3, fixed in 7.81.0-1ubuntu1.14.

Radar Score

9,9341022165512

710 findings over 2 of 4 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
library/busybox1.32.100000
netboxcommunity/netbox×3v3.2.8112116652210,077
bitnami/postgresql11.14.0-debian-10-r28—unmeasured
bitnami/redis×26.2.6-debian-10-r97—unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

721 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowUBUNTU-CVE-2026-35189openssl@3.0.2-0ubuntu1.63.0.2-0ubuntu1.30
LowUBUNTU-CVE-2026-19542glibc@2.35-0ubuntu3.12.35-0ubuntu3.15
LowUBUNTU-CVE-2025-29088sqlite3@3.37.2-23.37.2-2ubuntu0.4
LowUBUNTU-CVE-2026-2297python3.10@3.10.4-3ubuntu0.13.10.12-1~22.04.16
LowUBUNTU-CVE-2025-13837python3.10@3.10.4-3ubuntu0.13.10.12-1~22.04.14
LowUBUNTU-CVE-2025-8291python3.10@3.10.4-3ubuntu0.13.10.12-1~22.04.12
LowUBUNTU-CVE-2026-12345python3.10@3.10.4-3ubuntu0.1no fix listed
LowUBUNTU-CVE-2026-13757p11-kit@0.24.0-6build10.24.0-6ubuntu0.1
LowUBUNTU-CVE-2026-50813sqlite3@3.37.2-23.37.2-2ubuntu0.7
LowUBUNTU-CVE-2026-11850krb5@1.19.2-21.19.2-2ubuntu0.8
LowUBUNTU-CVE-2026-56132expat@2.4.7-12.4.7-1ubuntu0.9
LowUBUNTU-CVE-2026-88648gnutls28@3.7.3-4ubuntu1.1no fix listed
LowUBUNTU-CVE-2026-75805openssl@3.0.2-0ubuntu1.63.0.2-0ubuntu1.30
LowGHSA-27jp-wm6q-gp25sqlparse@0.4.20.5.4
LowGHSA-vx6w-vv9f-6gvgpillow@9.2.013.0.0
LowUBUNTU-CVE-2026-56409expat@2.4.7-12.4.7-1ubuntu0.9
LowUSN-5745-1shadow@1:4.8.1-2ubuntu21:4.8.1-2ubuntu2.1
LowUSN-5906-1postgresql-14@14.4-0ubuntu0.22.04.114.7-0ubuntu0.22.04.1
LowPYSEC-2026-2275requests@2.28.12.33.0
LowGHSA-3496-9g83-7v6xsqlparse@0.4.20.6.0
LowUSN-8685-1bzip2@1.0.8-5build11.0.8-5ubuntu0.1
LowGHSA-g47c-3xmw-q6m2djangorestframework@3.13.13.17.2
LowGHSA-r73j-pqj5-w3x7pillow@9.2.012.2.0
LowUBUNTU-CVE-2025-0167curl@7.81.0-1ubuntu1.37.81.0-1ubuntu1.23
LowUSN-8119-1systemd@249.11-0ubuntu3.4249.11-0ubuntu3.19
LowUBUNTU-CVE-2025-14017curl@7.81.0-1ubuntu1.37.81.0-1ubuntu1.22
LowUBUNTU-CVE-2026-22795openssl@3.0.2-0ubuntu1.63.0.2-0ubuntu1.21
LowPYSEC-2025-185python-jose@3.3.0no fix listed
LowUBUNTU-CVE-2024-10041pam@1.4.0-11ubuntu2no fix listed
LowUBUNTU-CVE-2026-59850libssh@0.9.6-2build10.9.6-2ubuntu0.22.04.8
LowGHSA-m959-cc7f-wv43cryptography@37.0.446.0.6
LowUBUNTU-CVE-2023-5870postgresql-14@14.4-0ubuntu0.22.04.114.10-0ubuntu0.22.04.1
LowUBUNTU-CVE-2026-50812sqlite3@3.37.2-23.37.2-2ubuntu0.7
LowUSN-6640-1shadow@1:4.8.1-2ubuntu21:4.8.1-2ubuntu2.2
LowGHSA-wjx4-4jcj-g98jpillow@9.2.012.2.0
LowUBUNTU-CVE-2026-14663postgresql-14@14.4-0ubuntu0.22.04.114.24-0ubuntu0.22.04.1
LowUBUNTU-CVE-2026-6470postgresql-14@14.4-0ubuntu0.22.04.114.24-0ubuntu0.22.04.1
LowUBUNTU-CVE-2026-45446openssl@3.0.2-0ubuntu1.63.0.2-0ubuntu1.25
LowUBUNTU-CVE-2026-18938p11-kit@0.24.0-6build10.24.0-6ubuntu0.1
LowUBUNTU-CVE-2026-42770openssl@3.0.2-0ubuntu1.63.0.2-0ubuntu1.25
LowGHSA-jp4c-xjxw-mgf9pip@22.2.226.1
LowUBUNTU-CVE-2026-2003postgresql-14@14.4-0ubuntu0.22.04.114.22-0ubuntu0.22.04.1
LowUBUNTU-CVE-2025-5278coreutils@8.32-4.1ubuntu18.32-4.1ubuntu1.4
LowGHSA-cfqr-cjx5-5jcmsqlparse@0.4.20.6.0
LowUBUNTU-CVE-2026-6472postgresql-14@14.4-0ubuntu0.22.04.114.23-0ubuntu0.22.04.1
LowUSN-7849-1libssh@0.9.6-2build10.9.6-2ubuntu0.22.04.5
LowUBUNTU-CVE-2025-6075python3.10@3.10.4-3ubuntu0.13.10.12-1~22.04.12
LowUBUNTU-CVE-2026-40226systemd@249.11-0ubuntu3.4249.11-0ubuntu3.21
LowUBUNTU-CVE-2026-86805glibc@2.35-0ubuntu3.1no fix listed
LowGHSA-gj48-438w-jh9vbleach@5.0.16.4.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
4.1.1latest4 years agov3.2.810221655129,934

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/bootc/netbox.svg)](https://charts.stackradar.io/charts/bootc/netbox)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 20 Oct 2026 · scanned 21 Oct 2026 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.