countly 5.3.1 Helm chart

Name: countly Helm chart 5.3.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

christianhuth

Scored 26 Sept 2026

Countly is a product analytics platform that helps teams track, analyze and act-on their user actions and behaviour on mobile, web and desktop applications.

Version 5.3.1 todayapp version 25.05.4 0Artifact Hub

countly 5.3.1 deploys 3 container images: countly/api, countly/frontend and bitnami/mongodb. Across them, 708 findings — 0 critical, 13 high — 11 on CISA KEV. The highest contribution is GHSA-r5fr-rjxr-66jc in lodash 4.17.21, fixed in 4.18.0.

Radar Score

7,852013108587

708 findings over 3 of 3 images measured

KEV ×11 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
countly/api	25.05.4	0758307	4,136
countly/frontend	25.05.4	0650279	3,712
bitnami/mongodb×2	latest	0001	4

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

308 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-66ff-xgx4-vchm	protobufjs@7.2.6	7.5.6
Low	GHSA-rhx6-c78j-4q9w	path-to-regexp@0.1.7	0.1.12
Low	GHSA-j5f8-grm9-p9fc	axios@1.6.5	1.16.0
Low	GHSA-9cx6-37pm-9jff	handlebars@4.7.7	4.7.9
Low	GHSA-8gc5-j5rx-235r	fast-xml-parser@4.3.6	4.5.5
Low	GHSA-mwp4-54f8-5fhr	ip-address@5.9.4	10.3.1
Low	GHSA-xv26-6w52-cph6	websocket-driver@0.7.4	0.7.5
Low	GO-2023-1571	stdlib@go1.19.4	1.19.6
Low	GHSA-685m-2w69-288q	protobufjs@7.2.6	7.5.6
Low	DLA-4235-1	sudo@1.9.5p2-3+deb11u1	1.9.5p2-3+deb11u2
Low	GHSA-554w-wpv2-vw27	node-forge@1.3.1	1.3.2
Low	GHSA-hmw2-7cc7-3qxx	form-data@4.0.0	4.0.6
Low	GHSA-v56q-mh7h-f735	immutable@4.3.0	4.3.9
Low	GHSA-jmr9-qjv8-65gv	extract-zip@2.0.1	no fix listed
Low	GHSA-73wf-gq98-2v4g	browserslist@4.23.1	4.28.7
Low	GHSA-c83g-rgw3-j3cx	browserslist@4.23.1	4.28.7
Low	GHSA-rgw5-rvv9-x895	brace-expansion@1.1.11	1.1.18
Low	GHSA-23hp-3jrh-7fpw	tar@6.2.1	7.5.19
Low	GHSA-8x88-c5mf-7j5w	tar@6.2.1	7.5.18
Low	GHSA-v245-v573-v5vm	linkify-it@5.0.0	5.0.2
Low	GHSA-mh99-v99m-4gvg	brace-expansion@1.1.11	1.1.17
Low	GHSA-r4q5-vmmm-2653	follow-redirects@1.15.6	1.16.0
Low	GHSA-w4pp-8pjf-rmxw	pacote@18.0.3	21.5.1
Low	GHSA-4vvj-4cpr-p986	webpack@5.86.0	5.94.0
Low	GHSA-7r86-cg39-jmmj	minimatch@3.0.8	3.1.3
Low	DLA-3907-1	sqlite3@3.34.1-3	3.34.1-3+deb11u1
Low	GHSA-52cp-r559-cp3m	js-yaml@4.1.0	4.3.0
Low	GO-2023-2102	stdlib@go1.19.4	1.20.10
Low	GHSA-wf93-45jw-7689	pip@21.1.1	26.1.2
Low	GHSA-3w6x-2g7m-8v23	axios@1.6.5	1.15.2
Low	GHSA-rcmh-qjqh-p98v	nodemailer@6.9.13	7.0.11
Low	GHSA-75px-5xx7-5xc7	protobufjs@7.2.6	7.5.6
Low	GHSA-2883-xcg3-v3hh	js-yaml@4.1.0	4.3.2
Low	GHSA-r292-9mhp-454m	tar@6.2.1	7.5.21
Low	GHSA-pmwg-cvhr-8vh7	axios@1.6.5	1.15.1
Low	GHSA-fj3w-jwp8-x2g3	fast-xml-parser@4.3.6	4.5.4
Low	GHSA-23c5-xmqv-rm74	minimatch@3.0.8	3.1.4
Low	GHSA-qffp-2rhf-9h96	tar@6.2.1	7.5.10
Low	GHSA-952p-6rrq-rcjv	micromatch@4.0.5	4.0.8
Low	GHSA-8qq5-rm4j-mr97	tar@6.2.1	7.5.3
Low	GHSA-jvwf-75h9-cwgg	protobufjs@7.2.6	7.5.6
Low	GHSA-c2c7-rcm5-vvqj	picomatch@2.3.1	2.3.2
Low	GHSA-73rr-hh4g-fpgx	diff@5.2.0	5.2.2
Low	GHSA-2328-f5f3-gj25	node-forge@1.3.1	1.4.0
Low	GHSA-qpx9-hpmf-5gmw	underscore@1.13.6	1.13.8
Low	GHSA-q67f-28xg-22rw	node-forge@1.3.1	1.4.0
Low	GHSA-wcpc-wj8m-hjx6	protobufjs@7.2.6	7.6.1
Low	GHSA-j452-xhg8-qg39	protocol-buffers-schema@3.6.0	3.6.1
Low	GHSA-ppp5-5v6c-4jwp	node-forge@1.3.1	1.4.0
Low	GHSA-76p7-773f-r4q5	serialize-javascript@6.0.1	6.0.2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
5.3.1latest	today	25.05.4	013108587	7,852
5.3.0	2 days ago	25.05.4	013108587	7,852
5.2.1	14 days ago	25.05.4	013108599	7,932
5.2.0	15 days ago	25.05.4	013108621	8,150
5.1.26	17 days ago	25.05.4	013108621	8,150
5.1.25	22 days ago	25.05.4	013108644	8,360

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/christianhuth/countly.svg)](https://charts.stackradar.io/charts/christianhuth/countly)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.