rundeck Helm chart
cloudnativeappScored 14 Sept 2026
A Rundeck chart for Kubernetes
Latest 0.1.0 5 years agoapp version 3.0.16 0Artifact Hub
rundeck 0.1.0 deploys 2 container images: library/nginx and rundeck/rundeck. Across them, 1,261 findings — 27 critical, 72 high — 6 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webmvc 4.3.18.RELEASE, fixed in 5.2.20.RELEASE.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
2 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| library/ | stable | 0030145 | 1,827 |
| rundeck/ | 3.0.16 | 2772458528 | 21,838 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
1,191 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2023-21968 | openjdk-8 | 8u372-ga~us1-0ubuntu1~16.04 |
| Low | UBUNTU-CVE-2026-13595 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2024-21131 | openjdk-8 | 8u432-ga~us1-0ubuntu2~16.04.4 |
| Low | DEBIAN-CVE-2023-31439 | systemd | no fix listed |
| Low | GHSA-5jmj-h7xm-6q6v | jackson-databind | 2.18.9 |
| Low | GHSA-562r-vg33-8x8h | postgresql | 42.2.27 |
| Low | UBUNTU-CVE-2024-21208 | openjdk-8 | 8u432-ga~us1-0ubuntu2~16.04.4 |
| Low | DEBIAN-CVE-2026-76957 | expat | no fix listed |
| Low | DEBIAN-CVE-2023-31437 | systemd | no fix listed |
| Low | GHSA-6p4f-wcwh-5vvm | spring-webmvc | no fix listed |
| Low | UBUNTU-CVE-2026-16599 | wget | no fix listed |
| Low | GHSA-qh8g-58pp-2wxh | jetty-http | 12.0.12 |
| Low | DEBIAN-CVE-2023-31438 | systemd | no fix listed |
| Low | GHSA-x2r2-rvhq-2mqv | spring-security-web | no fix listed |
| Low | GHSA-wwpq-f5c3-7hvx | spring-boot | no fix listed |
| Low | UBUNTU-CVE-2026-72522 | expat | no fix listed |
| Low | GHSA-7p3p-8qv8-m2vh | jetty-server | no fix listed |
| Low | UBUNTU-CVE-2026-56403 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56404 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56405 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56408 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56406 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56407 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56410 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56411 | expat | no fix listed |
| Low | GHSA-g9jj-cgmh-9f38 | mariadb-java-client | 2.7.14 |
| Low | UBUNTU-CVE-2026-78410 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2016-5011 | util-linux | 2.27.1-6ubuntu3.10+esm2 |
| Low | UBUNTU-CVE-2026-22021 | openjdk-8 | 8u492-ga~us2-0ubuntu1~16.04.1 |
| Low | UBUNTU-CVE-2026-47021 | openjdk-8 | 8u502-ga~us1-0ubuntu1~16.04 |
| Low | UBUNTU-CVE-2026-58472 | wget | 1.17.1-1ubuntu1.5+esm3 |
| Low | GHSA-9cmq-m9j5-mvww | spring-expression | 5.3.39 |
| Low | UBUNTU-CVE-2023-22025 | openjdk-8 | 8u392-ga-1~16.04 |
| Low | DEBIAN-CVE-2026-89161 | pcre2 | 10.46-1~deb13u2 |
| Low | UBUNTU-CVE-2025-30754 | openjdk-8 | 8u462-ga~us1-0ubuntu2~16.04.2 |
| Low | UBUNTU-CVE-2025-14104 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2025-64505 | libpng | 1.2.54-1ubuntu1.1+esm2 |
| Low | DEBIAN-CVE-2026-86142 | libxml2 | no fix listed |
| Low | GHSA-3gh6-v5v9-6v9j | jetty-servlets | 9.4.52 |
| Low | UBUNTU-CVE-2024-20945 | openjdk-8 | 8u432-ga~us1-0ubuntu2~16.04.4 |
| Low | UBUNTU-CVE-2026-46917 | openjdk-8 | no fix listed |
| Low | UBUNTU-CVE-2026-47027 | openjdk-8 | 8u502-ga~us1-0ubuntu1~16.04 |
| Low | UBUNTU-CVE-2026-78409 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2024-13176 | openssl | no fix listed |
| Low | UBUNTU-CVE-2025-52099 | sqlite3 | 3.11.0-1ubuntu1.5+esm3 |
| Low | GHSA-293q-567p-wmwq | spring-security-web | no fix listed |
| Low | GHSA-q3v6-hm2v-pw99 | spring-security-core | 5.7.14 |
| Low | UBUNTU-CVE-2026-22013 | openjdk-8 | 8u492-ga~us2-0ubuntu1~16.04.1 |
| Low | UBUNTU-CVE-2026-70907 | openjdk-8 | no fix listed |
| Low | GHSA-m6cp-vxjx-65j6 | jetty-server | 9.4.41 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/cloudnativeapp/rundeck)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.