StackRadar

puppet-forge 0.1.8 Helm chart

cloudnativeapp

Scored 14 Sept 2026

Distribute locally developed Puppet modules and proxy to the official Puppet Forge server

Version 0.1.8 5 years agoapp version 1.10.0 0Artifact Hub

puppet-forge 0.1.8 deploys 2 container images: library/busybox and hickey/puppet_forge. Across them, 244 findings1 critical, 3 high. The highest contribution is GHSA-6vvc-c2m3-cjf3 in mercurial 3.1.2, fixed in 3.2.3.

Radar Score

4,08613105135

244 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
library/busyboxlatest00000
hickey/puppet_forge1.10.0131051354,086

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

244 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowDLA-2105-1postgresql-9.4@9.4.13-0+deb8u19.4.26-0+deb8u1
LowGHSA-hxx2-7vcw-mqr3sinatra@1.4.84.1.0
LowDLA-1935-1e2fsprogs@1.42.12-2+b11.42.12-2+deb8u1
LowDLA-2156-1e2fsprogs@1.42.12-2+b11.42.12-2+deb8u2
LowDLA-2221-1sqlite3@3.8.7.1-1+deb8u23.8.7.1-1+deb8u6
LowGHSA-c33w-24p9-8m24configobj@5.0.65.0.9
LowDLA-1405-1libgcrypt20@1.6.3-2+deb8u41.6.3-2+deb8u5
LowGHSA-x8cg-fq8g-mxfxrack@1.5.52.2.23
LowGHSA-89vf-4333-qx8vactivesupport@4.2.107.2.3.1
LowGHSA-qv7j-4883-hwh7rack@1.5.52.2.23
LowGHSA-vgpv-f759-9wx3rack@1.5.52.2.23
LowGHSA-7mqq-6cf9-v2qprack@1.5.52.2.23
LowGHSA-whrj-4476-wvmprack@1.5.52.2.22
LowDLA-1623-1tar@1.27.1-2+deb8u11.27.1-2+deb8u2
LowDLA-1931-1libgcrypt20@1.6.3-2+deb8u41.6.3-2+deb8u6
LowDLA-2002-1libice@2:1.0.9-1+b12:1.0.9-1+deb8u1
LowGHSA-q4qf-9j86-f5mhrack@1.5.52.2.23
LowDLA-1726-1bash@4.3-11+deb8u14.3-11+deb8u2
LowDLA-1711-1systemd@215-17+deb8u7215-17+deb8u11
LowGHSA-wv3x-4vxv-whppconcurrent-ruby@1.0.51.3.7
LowGHSA-vpfw-47h7-xj4grack@1.5.52.2.14
LowGHSA-q2ww-5357-x388rack@1.5.52.2.23
LowGHSA-54rr-7fvw-6x8frack@1.5.52.0.9.4
LowGHSA-j6gc-792m-qgm2activesupport@4.2.106.1.7.1
LowGHSA-xj5v-6v4g-jfw6rack@1.5.52.2.8.1
LowDLA-1417-1ca-certificates@20141019+deb8u320141019+deb8u4
LowDLA-1500-2openssh@1:6.7p1-5+deb8u31:6.7p1-5+deb8u7
LowDLA-1563-1tzdata@2017b-0+deb8u12018g-0+deb8u1
LowDLA-1606-1gcc-4.9@4.9.2-104.9.2-10+deb8u2
LowDLA-1625-1tzdata@2017b-0+deb8u12018i-0+deb8u1
LowDLA-1628-2jasper@1.900.1-debian1-2.4+deb8u31.900.1-debian1-2.4+deb8u6
LowDLA-1642-1postgresql-9.4@9.4.13-0+deb8u19.4.20-0+deb8u1
LowDLA-1698-2file@1:5.22+15-2+deb8u31:5.22+15-2+deb8u7
LowDLA-1730-2libssh2@1.4.3-4.1+deb8u11.4.3-4.1+deb8u3
LowDLA-1744-1tzdata@2017b-0+deb8u12019a-0+deb8u1
LowDLA-1762-2systemd@215-17+deb8u7215-17+deb8u13
LowDLA-1777-2jquery@1.7.2+dfsg-3.21.7.2+dfsg-3.2+deb8u7
LowDLA-1784-1postgresql-9.4@9.4.13-0+deb8u19.4.22-0+deb8u1
LowDLA-1833-2bzip2@1.0.6-7+b31.0.6-7+deb8u2
LowDLA-1957-1tzdata@2017b-0+deb8u12019c-0+deb8u1
LowDLA-2006-1libxdmcp@1:1.1.1-1+b11:1.1.1-1+deb8u1
LowDLA-2043-2gdk-pixbuf@2.31.1-2+deb8u62.31.1-2+deb8u9
LowDSA-4117-1gcc-4.9@4.9.2-104.9.2-10+deb8u1
LowGHSA-6wx8-w4f5-wwcrconcurrent-ruby@1.0.51.3.7

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.8latest5 years ago1.10.0131051354,086

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/cloudnativeapp/puppet-forge.svg)](https://charts.stackradar.io/charts/cloudnativeapp/puppet-forge)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.