StackRadar

netbox Helm chart

bootcVerified publisher

Scored 20 Oct 2026

IP address management (IPAM) and data center infrastructure management (DCIM) tool

Latest 4.1.1 4 years agoapp version v3.2.8 20Artifact Hub

netbox 4.1.1 deploys 4 container images: library/busybox, netboxcommunity/netbox, bitnami/postgresql and bitnami/redis. Across the 2 measured, 710 findings — 10 critical, 22 high — 4 on CISA KEV. The highest contribution is UBUNTU-CVE-2023-38545 in curl 7.81.0-1ubuntu1.3, fixed in 7.81.0-1ubuntu1.14.

Radar Score

9,9341022165512

710 findings over 2 of 4 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
library/busybox1.32.100000
netboxcommunity/netbox×3v3.2.810221655129,934
bitnami/postgresql11.14.0-debian-10-r28—unmeasured
bitnami/redis×26.2.6-debian-10-r97—unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

710 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGHSA-m4p7-r5rc-7g4jpyasn1@0.4.80.6.4
LowGHSA-gw84-84pc-xp82djangorestframework@3.13.13.15.2
LowUBUNTU-CVE-2026-48959perl@5.34.0-3ubuntu1no fix listed
LowGHSA-gm37-52c6-37mwpymdown-extensions@9.511.0.1
LowGHSA-vjc4-5qp5-m44jpillow@9.2.012.3.0
LowUBUNTU-CVE-2026-6637postgresql-14@14.4-0ubuntu0.22.04.114.23-0ubuntu0.22.04.1
LowUBUNTU-CVE-2026-6479postgresql-14@14.4-0ubuntu0.22.04.114.23-0ubuntu0.22.04.1
LowUBUNTU-CVE-2024-33600glibc@2.35-0ubuntu3.12.35-0ubuntu3.8
LowUBUNTU-CVE-2025-69419openssl@3.0.2-0ubuntu1.63.0.2-0ubuntu1.21
LowGHSA-5wmx-573v-2qwqmarkdown@3.4.13.8.1
LowUBUNTU-CVE-2025-69534python3.10@3.10.4-3ubuntu0.13.10.12-1~22.04.16
LowUSN-5900-1tar@1.34+dfsg-1build31.34+dfsg-1ubuntu0.1.22.04.1
LowGHSA-q2x7-8rv6-6q7hjinja2@3.1.23.1.5
LowUBUNTU-CVE-2025-32990gnutls28@3.7.3-4ubuntu1.13.7.3-4ubuntu1.7
LowGHSA-xj96-63gp-2gmrpillow@9.2.012.3.0
LowUBUNTU-CVE-2026-3833gnutls28@3.7.3-4ubuntu1.13.7.3-4ubuntu1.9
LowUBUNTU-CVE-2023-7104sqlite3@3.37.2-23.37.2-2ubuntu0.3
LowUBUNTU-CVE-2023-23915curl@7.81.0-1ubuntu1.37.81.0-1ubuntu1.8
LowUBUNTU-CVE-2026-18408postgresql-14@14.4-0ubuntu0.22.04.114.24-0ubuntu0.22.04.1
LowUBUNTU-CVE-2023-27538curl@7.81.0-1ubuntu1.37.81.0-1ubuntu1.10
LowGHSA-xqr8-7jwr-rhp7certifi@2022.6.152023.7.22
LowGHSA-wf93-45jw-7689pip@22.2.226.1.2
LowGHSA-vxq7-64xx-v4gwurllib3@1.26.112.8.0
LowUBUNTU-CVE-2026-9669python3.10@3.10.4-3ubuntu0.13.10.12-1~22.04.16
LowUSN-8711-1libgcrypt20@1.9.4-3ubuntu31.9.4-3ubuntu3.3
LowGHSA-3qf3-8w2g-rqmxpython-jose@3.3.0no fix listed
LowPYSEC-2026-4298python-jose@3.3.0no fix listed
LowUSN-7145-1expat@2.4.7-12.4.7-1ubuntu0.5
LowUBUNTU-CVE-2026-0861glibc@2.35-0ubuntu3.12.35-0ubuntu3.13
LowUBUNTU-CVE-2026-31789openssl@3.0.2-0ubuntu1.63.0.2-0ubuntu1.23
LowUSN-7768-1dpkg@1.21.1ubuntu2.11.21.1ubuntu2.6
LowUSN-7012-1curl@7.81.0-1ubuntu1.37.81.0-1ubuntu1.18
LowUBUNTU-CVE-2022-23491ca-certificates@2021101620211016ubuntu0.22.04.1
LowUBUNTU-CVE-2026-6475postgresql-14@14.4-0ubuntu0.22.04.114.23-0ubuntu0.22.04.1
LowUBUNTU-CVE-2023-5868postgresql-14@14.4-0ubuntu0.22.04.114.10-0ubuntu0.22.04.1
LowGHSA-pwgv-4x5q-6m9fsqlparse@0.4.20.6.0
LowUBUNTU-CVE-2025-32989gnutls28@3.7.3-4ubuntu1.13.7.3-4ubuntu1.7
LowUSN-7580-1pam@1.4.0-11ubuntu21.4.0-11ubuntu2.6
LowUBUNTU-CVE-2026-42766openssl@3.0.2-0ubuntu1.63.0.2-0ubuntu1.25
LowUBUNTU-CVE-2026-86145pcre2@10.39-3build1no fix listed
LowUBUNTU-CVE-2026-84782openssl@3.0.2-0ubuntu1.63.0.2-0ubuntu1.30
LowGHSA-r6ph-v2qm-q3c2cryptography@37.0.446.0.5
LowUBUNTU-CVE-2025-6395gnutls28@3.7.3-4ubuntu1.13.7.3-4ubuntu1.7
LowUBUNTU-CVE-2023-6918libssh@0.9.6-2build10.9.6-2ubuntu0.22.04.3
LowUBUNTU-CVE-2026-3644python3.10@3.10.4-3ubuntu0.13.10.12-1~22.04.16
LowGHSA-gmj6-6f8f-6699jinja2@3.1.23.1.5
LowUBUNTU-CVE-2026-5928glibc@2.35-0ubuntu3.12.35-0ubuntu3.14
LowUBUNTU-CVE-2025-15281glibc@2.35-0ubuntu3.12.35-0ubuntu3.13
LowUBUNTU-CVE-2026-82209curl@7.81.0-1ubuntu1.37.81.0-1ubuntu1.29
LowUBUNTU-CVE-2026-59843libssh@0.9.6-2build10.9.6-2ubuntu0.22.04.8

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
4.1.1latest4 years agov3.2.810221655129,934

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/bootc/netbox.svg)](https://charts.stackradar.io/charts/bootc/netbox)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 20 Oct 2026 · scanned 20 Oct 2026 · advisories as of 20 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.