StackRadar

castlemock 2.0.1 Helm chart

cnieg

Scored 14 Sept 2026

Castlemock webapp chart

Version 2.0.1 4 years agoapp version latest 0Artifact Hub

castlemock 2.0.1 deploys 1 container image: castlemock/castlemock. Across them, 415 findings — 3 critical, 5 high. The highest contribution is GHSA-3p2h-wqq4-wf4h in tomcat-embed-core 11.0.5, fixed in 11.0.6.

Radar Score

4,5783560346

415 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
castlemock/castlemocklatest35603464,578

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

415 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowUBUNTU-CVE-2026-11822sqlite3@3.45.1-1ubuntu2.13.45.1-1ubuntu2.6
LowUBUNTU-CVE-2026-11824sqlite3@3.45.1-1ubuntu2.13.45.1-1ubuntu2.6
LowUBUNTU-CVE-2025-4598systemd@255.4-1ubuntu8.4255.4-1ubuntu8.8
LowUBUNTU-CVE-2026-6846binutils@2.42-4ubuntu2.3no fix listed
LowUBUNTU-CVE-2025-15079curl@8.5.0-2ubuntu10.68.5.0-2ubuntu10.7
LowGHSA-4773-3jfm-qmx3spring-webmvc@6.2.56.2.17
LowUBUNTU-CVE-2026-6429curl@8.5.0-2ubuntu10.68.5.0-2ubuntu10.9
LowUBUNTU-CVE-2026-22796openssl@3.0.13-0ubuntu3.53.0.13-0ubuntu3.7
LowGHSA-72pg-x5f8-j25jspring-webmvc@6.2.56.2.19
LowUBUNTU-CVE-2025-10148curl@8.5.0-2ubuntu10.68.5.0-2ubuntu10.7
LowUBUNTU-CVE-2025-1182binutils@2.42-4ubuntu2.32.42-4ubuntu2.5
LowUBUNTU-CVE-2024-26462krb5@1.20.1-6ubuntu2.21.20.1-6ubuntu2.5
LowUBUNTU-CVE-2026-1965curl@8.5.0-2ubuntu10.68.5.0-2ubuntu10.8
LowUBUNTU-CVE-2025-3576krb5@1.20.1-6ubuntu2.21.20.1-6ubuntu2.6
LowUBUNTU-CVE-2025-68973gnupg2@2.4.4-2ubuntu172.4.4-2ubuntu17.4
LowUBUNTU-CVE-2026-7168curl@8.5.0-2ubuntu10.68.5.0-2ubuntu10.9
LowGHSA-mq64-j8f9-9gcjspring-webmvc@6.2.56.2.19
LowUBUNTU-CVE-2026-59847libssh@0.10.6-2build20.10.6-2ubuntu0.5
LowUBUNTU-CVE-2026-3783curl@8.5.0-2ubuntu10.68.5.0-2ubuntu10.8
LowUBUNTU-CVE-2026-4873curl@8.5.0-2ubuntu10.68.5.0-2ubuntu10.9
LowUBUNTU-CVE-2026-34743xz-utils@5.6.1+really5.4.5-1build0.15.6.1+really5.4.5-1ubuntu0.3
LowGHSA-r7wm-3cxj-wff9jackson-core@2.18.32.18.8
LowUBUNTU-CVE-2026-54411pam@1.5.3-5ubuntu5.11.5.3-5ubuntu5.6
LowUBUNTU-CVE-2026-25210expat@2.6.1-2ubuntu0.22.6.1-2ubuntu0.4
LowGHSA-vqxh-445g-37fcspring-security-core@6.4.46.4.5
LowUBUNTU-CVE-2026-19487perl@5.38.2-3.2build2.1no fix listed
LowUBUNTU-CVE-2026-4878libcap2@1:2.66-5ubuntu21:2.66-5ubuntu2.4
LowUBUNTU-CVE-2026-3442binutils@2.42-4ubuntu2.3no fix listed
LowGHSA-3chg-m5w7-qfv5spring-webmvc@6.2.56.2.19
LowUBUNTU-CVE-2026-78408util-linux@2.39.3-9ubuntu6.2no fix listed
LowGHSA-hgj6-7826-r7m5jackson-databind@2.18.32.18.8
LowUBUNTU-CVE-2026-54369acl@2.3.2-1build1.1no fix listed
LowUBUNTU-CVE-2026-41989libgcrypt20@1.10.3-2build11.10.3-2ubuntu0.1
LowUBUNTU-CVE-2025-5372libssh@0.10.6-2build20.10.6-2ubuntu0.1
LowUBUNTU-CVE-2025-5702glibc@2.39-0ubuntu8.42.39-0ubuntu8.5
LowGHSA-wxpp-56q6-5pcgspring-expression@6.2.56.2.19
LowUBUNTU-CVE-2026-13595util-linux@2.39.3-9ubuntu6.22.39.3-9ubuntu6.6
LowUBUNTU-CVE-2025-66866binutils@2.42-4ubuntu2.3no fix listed
LowUBUNTU-CVE-2026-54371attr@1:2.5.2-1build11:2.5.2-1ubuntu0.1
LowGHSA-5jmj-h7xm-6q6vjackson-databind@2.18.32.18.9
LowUBUNTU-CVE-2026-0964libssh@0.10.6-2build20.10.6-2ubuntu0.3
LowGHSA-6p4f-wcwh-5vvmspring-webmvc@6.2.56.2.18
LowUBUNTU-CVE-2026-59848libssh@0.10.6-2build20.10.6-2ubuntu0.5
LowUBUNTU-CVE-2026-16599wget@1.21.4-1ubuntu4.1no fix listed
LowUBUNTU-CVE-2026-5704tar@1.35+dfsg-3build11.35+dfsg-3ubuntu0.4
LowUBUNTU-CVE-2026-4438glibc@2.39-0ubuntu8.42.39-0ubuntu8.8
LowGHSA-wwpq-f5c3-7hvxspring-boot@3.4.4no fix listed
LowUBUNTU-CVE-2026-72522expat@2.6.1-2ubuntu0.2no fix listed
LowUBUNTU-CVE-2026-22695libpng1.6@1.6.43-5build11.6.43-5ubuntu0.3
LowUBUNTU-CVE-2026-56403expat@2.6.1-2ubuntu0.2no fix listed

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
2.0.1latest4 years agolatest35603464,578

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/cnieg/castlemock.svg)](https://charts.stackradar.io/charts/cnieg/castlemock)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.