StackRadar

unifi Helm chart

cloudnativeapp

Scored 13 Sept 2026

Ubiquiti Network's Unifi Controller

Latest 0.4.2 5 years agoapp version 5.10.19 0Artifact Hub

unifi 0.4.2 deploys 1 container image: jacobalberty/unifi. Across them, 1,163 findings — 24 critical, 56 high — 9 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.11.1, fixed in 2.12.2.

Radar Score

22,7542456546535

1,163 findings over 1 of 1 images measured

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
jacobalberty/unifi5.10.19245654653522,754

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,163 distinct across the version’s images
SeverityAdvisoryPackageFixed in
CriticalGHSA-jfh8-c2jp-5v3qKEVlog4j-core@2.11.12.12.2
CriticalGHSA-36p3-wjmg-h94xKEVspring-beans@5.1.2.RELEASE5.2.20.RELEASE
CriticalGHSA-83qj-6fr2-vhqgKEVtomcat-embed-core@8.5.34no fix listed
CriticalGHSA-c9hw-wf7x-jp9jKEVtomcat-embed-core@8.5.348.5.51
CriticalUBUNTU-CVE-2015-4852KEVopenjdk-8@8u191-b12-2ubuntu0.16.04.1no fix listed
CriticalUBUNTU-CVE-2022-2068openssl@1.0.2g-1ubuntu4.141.0.2g-1ubuntu4.20+esm5
CriticalUBUNTU-CVE-2020-15999KEVfreetype@2.6.1-0.1ubuntu2.32.6.1-0.1ubuntu2.5
CriticalUBUNTU-CVE-2022-1292openssl@1.0.2g-1ubuntu4.141.0.2g-1ubuntu4.20+esm3
CriticalGHSA-7rjr-3q55-vv33KEVlog4j-core@2.11.12.12.2
CriticalGHSA-p6xc-xr62-6r2glog4j-core@2.11.12.12.3
CriticalUBUNTU-CVE-2022-29155openldap@2.4.42+dfsg-2ubuntu3.42.4.42+dfsg-2ubuntu3.13+esm1
CriticalUBUNTU-CVE-2025-27363KEVfreetype@2.6.1-0.1ubuntu2.32.6.1-0.1ubuntu2.5+esm2
CriticalGHSA-8vmx-qmch-mpqgtomcat-embed-core@8.5.348.5.40
CriticalUBUNTU-CVE-2019-8457db5.3@5.3.28-11ubuntu0.15.3.28-11ubuntu0.2
CriticalUBUNTU-CVE-2019-8457sqlite3@3.11.0-1ubuntu1.13.11.0-1ubuntu1.2
CriticalGHSA-p66x-2cv9-qq3vcommons-beanutils@1.9.31.9.4
CriticalGHSA-5j33-cvvr-w245tomcat-embed-core@8.5.34no fix listed
CriticalUBUNTU-CVE-2024-47175cups@2.1.3-4ubuntu0.72.1.3-4ubuntu0.11+esm8
CriticalGHSA-3p2h-wqq4-wf4htomcat-embed-core@8.5.34no fix listed
CriticalGHSA-m7jv-hq7h-mq7ctomcat-embed-websocket@8.5.348.5.57
CriticalUBUNTU-CVE-2020-36221openldap@2.4.42+dfsg-2ubuntu3.42.4.42+dfsg-2ubuntu3.12
CriticalUBUNTU-CVE-2020-36228openldap@2.4.42+dfsg-2ubuntu3.42.4.42+dfsg-2ubuntu3.12
CriticalUBUNTU-CVE-2025-6965sqlite3@3.11.0-1ubuntu1.13.11.0-1ubuntu1.5+esm3
CriticalUBUNTU-CVE-2024-2961glibc@2.23-0ubuntu102.23-0ubuntu11.3+esm6
HighUBUNTU-CVE-2022-34169openjdk-8@8u191-b12-2ubuntu0.16.04.18u342-b07-0ubuntu1~16.04
HighUBUNTU-CVE-2022-25236expat@2.1.0-7ubuntu0.16.04.32.1.0-7ubuntu0.16.04.5+esm2
HighUBUNTU-CVE-2020-36222openldap@2.4.42+dfsg-2ubuntu3.42.4.42+dfsg-2ubuntu3.12
HighUBUNTU-CVE-2020-36227openldap@2.4.42+dfsg-2ubuntu3.42.4.42+dfsg-2ubuntu3.12
HighUBUNTU-CVE-2022-0778openssl@1.0.2g-1ubuntu4.141.0.2g-1ubuntu4.20+esm2
HighGHSA-4wrc-f8pq-fpqpspring-web@5.1.2.RELEASE6.0.0
HighGHSA-qcxh-w3j9-58qrtomcat-embed-core@8.5.348.5.38
HighGHSA-q4hg-rmq2-52q9tomcat-embed-core@8.5.348.5.41
HighGHSA-8489-44mv-ggj8log4j-core@2.11.12.12.4
HighGHSA-wmwf-9ccg-fff5tomcat-embed-core@8.5.34no fix listed
HighUBUNTU-CVE-2021-27212openldap@2.4.42+dfsg-2ubuntu3.42.4.42+dfsg-2ubuntu3.13
HighGHSA-4w82-r329-3q67jackson-databind@2.9.72.9.10.3
HighUBUNTU-CVE-2023-0286openssl@1.0.2g-1ubuntu4.141.0.2g-1ubuntu4.20+esm6
HighGHSA-h3gc-qfqq-6h8ftomcat-embed-core@8.5.34no fix listed
HighUBUNTU-CVE-2019-5436curl@7.47.0-1ubuntu2.127.47.0-1ubuntu2.13
HighUBUNTU-CVE-2024-2398curl@7.47.0-1ubuntu2.127.47.0-1ubuntu2.19+esm12
HighUBUNTU-CVE-2018-25032zlib@1:1.2.8.dfsg-2ubuntu4.11:1.2.8.dfsg-2ubuntu4.3+esm1
HighUBUNTU-CVE-2021-23840openssl@1.0.2g-1ubuntu4.141.0.2g-1ubuntu4.19
HighUBUNTU-CVE-2023-2650openssl@1.0.2g-1ubuntu4.141.0.2g-1ubuntu4.20+esm9
HighUBUNTU-CVE-2021-3712openssl@1.0.2g-1ubuntu4.141.0.2g-1ubuntu4.20+esm1
HighGHSA-344f-f5vg-2jfjtomcat-embed-core@8.5.348.5.55
HighGHSA-q93h-jc49-78ggjackson-databind@2.9.72.9.10.4
HighGHSA-p43x-xfjf-5jhrjackson-databind@2.9.72.9.10.4
HighUBUNTU-CVE-2019-5482curl@7.47.0-1ubuntu2.127.47.0-1ubuntu2.14
HighUBUNTU-CVE-2022-37434zlib@1:1.2.8.dfsg-2ubuntu4.11:1.2.8.dfsg-2ubuntu4.3+esm2
HighUBUNTU-CVE-2021-43527nss@2:3.28.4-0ubuntu0.16.04.42:3.28.4-0ubuntu0.16.04.14+esm2

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.4.2latest5 years ago5.10.19245654653522,754

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/cloudnativeapp/unifi.svg)](https://charts.stackradar.io/charts/cloudnativeapp/unifi)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 13 Sept 2026 · advisories as of 13 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.