category-microservice Helm chart

Name: category-microservice Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

busi-ads

Scored 14 Sept 2026

A Helm chart for category Application

Latest 1.0.0 4 years agodeploys tag distributed 0Artifact Hub

category-microservice 1.0.0 deploys 2 container images: dellcloud/category and library/mongo. Across them, 717 findings — 17 critical, 31 high — 7 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webmvc 5.2.7.RELEASE, fixed in 5.2.20.RELEASE.

Radar Score

11,8691731214455

717 findings over 2 of 2 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
dellcloud/category	distributed	1731204313	10,615
library/mongo	latest	0010142	1,254

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

645 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webmvc@5.2.7.RELEASE	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@5.2.7.RELEASE	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-boot-starter-web@2.3.1.RELEASE	2.5.12
Critical	GHSA-83qj-6fr2-vhqgKEV	tomcat-embed-core@9.0.36	9.0.99
Critical	UBUNTU-CVE-2022-2068	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.15
Critical	UBUNTU-CVE-2021-3711	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.8
Critical	UBUNTU-CVE-2022-1292	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.13
Critical	UBUNTU-CVE-2022-29155	openldap@2.4.49+dfsg-2ubuntu1.5	2.4.49+dfsg-2ubuntu1.9
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.26	2.0
Critical	UBUNTU-CVE-2025-27363KEV	freetype@2.10.1-2ubuntu0.1	2.10.1-2ubuntu0.4
Critical	UBUNTU-CVE-2023-44487KEV	nghttp2@1.40.0-1build1	1.40.0-1ubuntu0.2
Critical	GHSA-5j33-cvvr-w245	tomcat-embed-core@9.0.36	9.0.98
Critical	GHSA-m7jv-hq7h-mq7c	tomcat-embed-websocket@9.0.36	9.0.37
Critical	UBUNTU-CVE-2020-36221	openldap@2.4.49+dfsg-2ubuntu1.5	2.4.49+dfsg-2ubuntu1.6
Critical	UBUNTU-CVE-2020-36228	openldap@2.4.49+dfsg-2ubuntu1.5	2.4.49+dfsg-2ubuntu1.6
Critical	UBUNTU-CVE-2025-6965	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.7+esm1
Critical	UBUNTU-CVE-2024-2961	glibc@2.31-0ubuntu9.1	2.31-0ubuntu9.15
High	UBUNTU-CVE-2022-25236	expat@2.2.9-1build1	2.2.9-1ubuntu0.2
High	UBUNTU-CVE-2020-36222	openldap@2.4.49+dfsg-2ubuntu1.5	2.4.49+dfsg-2ubuntu1.6
High	UBUNTU-CVE-2020-36227	openldap@2.4.49+dfsg-2ubuntu1.5	2.4.49+dfsg-2ubuntu1.6
High	UBUNTU-CVE-2022-0778	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.12
High	GHSA-4wrc-f8pq-fpqp	spring-web@5.2.7.RELEASE	6.0.0
High	GHSA-wmwf-9ccg-fff5	tomcat-embed-core@9.0.36	9.0.109
High	UBUNTU-CVE-2021-27212	openldap@2.4.49+dfsg-2ubuntu1.5	2.4.49+dfsg-2ubuntu1.7
High	GHSA-h3gc-qfqq-6h8f	tomcat-embed-core@9.0.36	9.0.106
High	UBUNTU-CVE-2023-0286	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.17
High	GHSA-g5vr-rgqm-vf78	spring-webmvc@5.2.7.RELEASE	no fix listed
High	UBUNTU-CVE-2024-2398	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.22
High	UBUNTU-CVE-2018-25032	zlib@1:1.2.11.dfsg-2ubuntu1.2	1:1.2.11.dfsg-2ubuntu1.3
High	UBUNTU-CVE-2021-23840	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.2
High	UBUNTU-CVE-2023-2650	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.19
High	GHSA-hfrx-6qgj-fp6c	tomcat-embed-core@9.0.36	9.0.71
High	UBUNTU-CVE-2021-3712	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.8
High	UBUNTU-CVE-2023-48795	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.4
High	UBUNTU-CVE-2022-37434	zlib@1:1.2.11.dfsg-2ubuntu1.2	1:1.2.11.dfsg-2ubuntu1.5
High	GHSA-qppj-fm5r-hxr3KEV	tomcat-embed-core@9.0.36	9.0.81
High	GHSA-w24x-87mr-4r23	spring-data-mongodb@3.0.1.RELEASE	3.3.5
High	UBUNTU-CVE-2021-3449	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.3
High	UBUNTU-CVE-2024-28182	nghttp2@1.40.0-1build1	1.40.0-1ubuntu0.3
High	UBUNTU-CVE-2024-2511	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.23
High	UBUNTU-CVE-2024-3596	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.8
High	GHSA-558x-2xjg-6232	spring-expression@5.2.7.RELEASE	5.2.20.RELEASE
High	GHSA-7w75-32cg-r6g2	tomcat-embed-core@9.0.36	9.0.86
High	UBUNTU-CVE-2022-35737	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.5
High	UBUNTU-CVE-2022-32206	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.12
High	UBUNTU-CVE-2022-4450	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.17
High	GHSA-j39c-c8hj-x4j3	tomcat-embed-core@9.0.36	9.0.43
High	GHSA-27hp-xhwr-wr2m	tomcat-embed-core@9.0.36	9.0.98
Medium	UBUNTU-CVE-2020-36230	openldap@2.4.49+dfsg-2ubuntu1.5	2.4.49+dfsg-2ubuntu1.6
Medium	GHSA-2rvv-w9r2-rg7m	tomcat-embed-core@9.0.36	9.0.40

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.0latest	4 years ago	distributed	1731214455	11,869

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/busi-ads/category-microservice.svg)](https://charts.stackradar.io/charts/busi-ads/category-microservice)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.