StackRadar

cassandra-reaper Helm chart

cloudnativeapp

Scored 14 Sept 2026

Reaper is a centralized, stateful, and highly configurable tool for running Apache Cassandra repairs against single or multi-site clusters.

Latest 0.2.0 5 years agoapp version 1.3.0 0Artifact Hub

cassandra-reaper 0.2.0 deploys 1 container image: thelastpickle/cassandra-reaper. Across them, 182 findings — 6 critical, 31 high — 1 on CISA KEV. The highest contribution is GHSA-p836-389h-j692 in shiro-core 1.2.3, fixed in 1.2.5.

Radar Score

5,0786319451

182 findings over 1 of 1 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
thelastpickle/cassandra-reaper1.3.063194515,078

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

182 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumALPINE-CVE-2018-14599libx11@1.6.5-r11.6.6-r0
MediumGHSA-f3j5-rmmp-3fc5jackson-databind@2.8.112.8.11.5
MediumGHSA-wh8g-3j2c-rqj5jackson-databind@2.8.112.9.10.8
MediumGHSA-4q2v-j639-cp7pshiro-web@1.2.31.3.2
MediumGHSA-5949-rw7g-wx7wjackson-databind@2.8.112.9.10.7
MediumGHSA-qjw2-hr98-qgfhjackson-databind@2.8.112.9.10.6
MediumGHSA-r679-m633-g7wcshiro-core@1.2.31.4.2
MediumGHSA-6wqp-v4v6-c87cjackson-databind@2.8.112.8.11.2
MediumGHSA-w3f4-3q6j-rh82jackson-databind@2.8.112.8.11.1
MediumGHSA-p979-4mfw-53vgnetty-all@4.0.44.Final4.1.42.Final
MediumGHSA-fmj5-wv96-r2chhttpclient@4.2.54.3.6
MediumGHSA-cjjf-94ff-43w7jackson-databind@2.8.112.8.11.2
MediumGHSA-9vjp-v76f-g363netty-codec@4.0.56.Final4.1.68.Final
MediumGHSA-8w26-6f25-cm9xjackson-databind@2.8.112.9.10.8
MediumGHSA-v585-23hc-c647jackson-databind@2.8.112.9.10.8
MediumGHSA-r695-7vr9-jgc2jackson-databind@2.8.112.9.10.8
MediumGHSA-8c4j-34r4-xr8gjackson-databind@2.8.112.9.10.8
MediumGHSA-84q7-p226-4x5wjetty-server@9.4.6.v201705319.4.11.v20180605
MediumGHSA-89qr-369f-5m5xjackson-databind@2.8.112.9.10.8
MediumGHSA-cvm9-fjm9-3572jackson-databind@2.8.112.9.10.8
MediumGHSA-8jpx-m2wh-2v34dropwizard-validation@1.1.71.3.21
MediumGHSA-vfqx-33qm-g869jackson-databind@2.8.112.9.10.8
MediumGHSA-9m6f-7xcq-8vf8jackson-databind@2.8.112.9.10.8
MediumALPINE-CVE-2019-14697musl@1.1.19-r101.1.19-r11
MediumGHSA-grg4-wf29-r9vvnetty-codec@4.0.56.Final4.1.68.Final
MediumGHSA-45x9-q6vj-cqgqshiro-core@1.2.31.10.0
MediumALPINE-CVE-2018-14550libpng@1.6.34-r11.6.37-r0
MediumGHSA-cf6r-3wgc-h863jackson-databind@2.8.112.8.11.5
MediumGHSA-p2v9-g2qv-p635netty-handler@4.0.56.Final4.1.45
MediumGHSA-cmfg-87vq-g5g4jackson-databind@2.8.112.8.11.4
MediumGHSA-7vx9-xjhr-rw6hjetty-server@9.4.6.v201705319.4.16.v20190411
MediumGHSA-h2f4-v4c4-6wx4jetty-server@9.4.6.v201705319.4.12.v20180830
MediumGHSA-57j2-w4cx-62h2jackson-databind@2.8.112.12.6.1
MediumGHSA-pmhc-2g4f-85cgshiro-web@1.2.31.12.0
MediumGHSA-88cc-g835-76rppostgresql@42.2.2.jre742.2.13
MediumALPINE-CVE-2020-11655sqlite@3.24.0-r03.25.0-r4
MediumGHSA-mwcx-532g-8pq3jetty-server@9.4.6.v201705319.4.11.v20180605
MediumALPINE-CVE-2018-14598libx11@1.6.5-r11.6.6-r0
MediumGHSA-rpr3-cw39-3pxhjackson-databind@2.8.112.9.10.4
MediumGHSA-cfh5-3ghh-wfjxhttpclient@4.2.54.3.5
MediumGHSA-g3wg-6mcf-8jj6jetty-webapp@9.4.6.v201705319.4.33.v20201020
MediumALPINE-CVE-2019-19244sqlite@3.24.0-r03.25.3-r3
MediumALPINE-CVE-2019-7317libpng@1.6.34-r11.6.37-r0
MediumGHSA-98qh-xjc8-98pqpostgresql@42.2.2.jre742.7.11
MediumALPINE-CVE-2018-11813libjpeg-turbo@1.5.3-r11.5.3-r3
MediumGHSA-7r82-7xv7-xcpjhttpclient@4.2.54.5.13
MediumGHSA-h4x4-5qp2-wp46jackson-datatype-jsr310@2.8.112.9.8
MediumGHSA-668q-qrv7-99fmlogback-core@1.2.31.2.9
MediumGHSA-wxr5-93ph-8wr9commons-beanutils@1.8.31.11.0
MediumGHSA-jjjh-jjxp-wpffjackson-databind@2.8.112.12.7.1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.2.0latest5 years ago1.3.063194515,078

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/cloudnativeapp/cassandra-reaper.svg)](https://charts.stackradar.io/charts/cloudnativeapp/cassandra-reaper)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.