StackRadar

event-store-service Helm chart

choerodon

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 0.8.0 4 years agodeploys tag 0.8.0 0Artifact Hub

event-store-service 0.8.0 deploys 2 container images: choerodon/event-store-service and registry.cn-hangzhou.aliyuncs.com/choerodon-tools/dbtool. Across the 1 measured, 346 findings — 17 critical, 62 high — 8 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webmvc 4.3.8.RELEASE, fixed in 5.2.20.RELEASE.

Radar Score

9,808176216998

346 findings over 1 of 2 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
choerodon/event-store-service×30.8.01762169989,808
registry.cn-hangzhou.aliyuncs.com/choerodon-tools/dbtool×20.5.2—unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

169 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-v585-23hc-c647jackson-databind@2.8.82.9.10.8
MediumGHSA-r695-7vr9-jgc2jackson-databind@2.8.82.9.10.8
MediumGHSA-2q8x-2p7f-574vxstream@1.4.91.4.18
MediumGHSA-8c4j-34r4-xr8gjackson-databind@2.8.82.9.10.8
MediumGHSA-89qr-369f-5m5xjackson-databind@2.8.82.9.10.8
MediumGHSA-cvm9-fjm9-3572jackson-databind@2.8.82.9.10.8
MediumGHSA-vfqx-33qm-g869jackson-databind@2.8.82.9.10.8
MediumGHSA-9m6f-7xcq-8vf8jackson-databind@2.8.82.9.10.8
MediumGHSA-8jrj-525p-826vxstream@1.4.91.4.18
MediumGHSA-grg4-wf29-r9vvnetty-codec@4.0.27.Final4.1.68.Final
MediumGHSA-grg4-wf29-r9vvnetty@3.7.0.Finalno fix listed
MediumGHSA-g5mm-vmx4-3rg7spring-context@4.3.8.RELEASE5.2.21.RELEASE
MediumGHSA-cf6r-3wgc-h863jackson-databind@2.8.82.8.11.5
MediumGHSA-6v52-mj5r-7j2mtomcat-embed-core@8.5.148.5.32
MediumGHSA-43gc-mjxg-gvrqxstream@1.4.91.4.16
MediumGHSA-p2v9-g2qv-p635netty@3.7.0.Finalno fix listed
MediumGHSA-p2v9-g2qv-p635netty-handler@4.0.27.Final4.1.45
MediumGHSA-cmfg-87vq-g5g4jackson-databind@2.8.82.8.11.4
MediumGHSA-xfv3-rrfm-f2rvnetty@3.7.0.Final3.9.8.Final
MediumGHSA-gq28-h5vg-8prxspring-security-web@4.2.2.RELEASE5.2.9
MediumGHSA-f4qf-m5gf-8jm8tomcat-embed-core@8.5.148.5.64
MediumGHSA-cxfm-5m4g-x7xpxstream@1.4.91.4.18
MediumGHSA-ccgv-vj62-xf9hspring-web@4.3.8.RELEASEno fix listed
MediumGHSA-7hwc-46rm-65jhxstream@1.4.91.4.10
MediumGHSA-56p8-3fh9-4cvqxstream@1.4.91.4.16
MediumGHSA-57j2-w4cx-62h2jackson-databind@2.8.82.12.6.1
MediumGHSA-wm9w-rjj3-j356tomcat-embed-core@8.5.14no fix listed
MediumALPINE-CVE-2018-14598libx11@1.6.4-r01.6.6-r0
MediumGHSA-rpr3-cw39-3pxhjackson-databind@2.8.82.9.10.4
MediumGHSA-6wf9-jmg9-vxccxstream@1.4.91.4.18
MediumALPINE-CVE-2018-16842curl@7.60.0-r17.61.1-r1
MediumGHSA-xqj7-j8j5-f2xrbcprov-jdk15on@1.551.60
MediumGHSA-r29c-68gh-xp6xtomcat-embed-core@8.5.149.0.118
MediumGHSA-q3mw-pvr8-9ggctomcat-embed-core@8.5.148.5.93
MediumGHSA-hgjh-9rj2-g67jspring-web@4.3.8.RELEASE5.3.33
MediumGHSA-vhrg-v3cv-p247spring-security-core@4.2.2.RELEASE4.2.3.RELEASE
MediumGHSA-rrvx-pwf8-p59pbcprov-jdk15on@1.551.56
MediumALPINE-CVE-2018-11813libjpeg-turbo@1.5.1-r01.5.3-r2
MediumGHSA-7r82-7xv7-xcpjhttpclient@4.5.34.5.13
MediumGHSA-ff77-26x5-69crtomcat-embed-core@8.5.14no fix listed
MediumGHSA-h4x4-5qp2-wp46jackson-datatype-jsr310@2.8.82.9.8
MediumGHSA-4487-x383-qpphspring-core@4.3.8.RELEASE4.3.15
MediumGHSA-668q-qrv7-99fmlogback-core@1.1.111.2.9
MediumGHSA-jjjh-jjxp-wpffjackson-databind@2.8.82.12.7.1
MediumGHSA-rgv9-q543-rqg4jackson-databind@2.8.82.12.7.1
MediumGHSA-h6fc-48rj-7qqhtomcat-embed-core@8.5.149.0.118
MediumGHSA-3mc7-4q67-w48msnakeyaml@1.171.31
MediumGHSA-h8w4-qv99-f7vjspring-security-oauth2@2.0.13.RELEASE2.0.16
MediumGHSA-fccv-jmmp-qg76tomcat-embed-core@8.5.148.5.96
MediumGHSA-mvr2-9pj6-7w5jguava@18.024.1.1-android

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.8.0latest4 years ago0.8.01762169989,808

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/choerodon/event-store-service.svg)](https://charts.stackradar.io/charts/choerodon/event-store-service)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.