clamapi Helm chart

Name: clamapi Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cnieg

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 2.0.5 3 years agoapp version 2.1.6 0Artifact Hub

clamapi 2.0.5 deploys 2 container images: audig/clamapi and ghcr.io/mailu/clamav. Across them, 217 findings — 8 critical, 19 high — 6 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-beans 5.2.8.RELEASE, fixed in 5.2.20.RELEASE.

Radar Score

4,67181989101

217 findings over 2 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
audig/clamapi	2.1.6	6134958	2,901
ghcr.io/mailu/clamav	1.9.50	264043	1,770

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

89 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	GHSA-2rvv-w9r2-rg7m	tomcat-embed-core@9.0.37	9.0.40
Medium	ALPINE-CVE-2024-5535	openssl@3.0.8-r0	3.0.14-r0
Medium	GHSA-cr3q-pqgq-m8c2	swagger-ui@3.49.0	4.1.3
Medium	GHSA-jgwr-3qm3-26f3	tomcat-embed-core@9.0.37	9.0.41
Medium	GHSA-g5mm-vmx4-3rg7	spring-context@5.2.8.RELEASE	5.2.21.RELEASE
Medium	GHSA-f4qf-m5gf-8jm8	tomcat-embed-core@9.0.37	9.0.44
Medium	GHSA-ccgv-vj62-xf9h	spring-web@5.2.8.RELEASE	no fix listed
Medium	GHSA-57j2-w4cx-62h2	jackson-databind@2.11.1	2.12.6.1
Medium	ALPINE-CVE-2021-36159	apk-tools@2.10.4-r2	2.10.7-r0
Medium	GHSA-wm9w-rjj3-j356	tomcat-embed-core@9.0.37	9.0.90
Medium	ALPINE-CVE-2024-6197	curl@7.87.0-r2	8.9.0-r0
Medium	ALPINE-CVE-2023-0464	openssl@3.0.8-r0	3.0.8-r1
Medium	ALPINE-CVE-2021-23841	openssl@1.1.1d-r2	1.1.1j-r0
Medium	ALPINE-CVE-2023-27534	curl@7.87.0-r2	7.88.1-r1
Medium	GHSA-gqp3-2cvr-x8m3	tomcat-embed-core@9.0.37	9.0.108
Medium	GHSA-r29c-68gh-xp6x	tomcat-embed-core@9.0.37	9.0.118
Medium	ALPINE-CVE-2020-1971	openssl@1.1.1d-r2	1.1.1i-r0
Medium	ALPINE-CVE-2023-5363	openssl@3.0.8-r0	3.0.12-r0
Medium	GHSA-q3mw-pvr8-9ggc	tomcat-embed-core@9.0.37	9.0.80
Medium	GHSA-hgjh-9rj2-g67j	spring-web@5.2.8.RELEASE	5.3.33
Medium	ALPINE-CVE-2023-27533	curl@7.87.0-r2	7.88.1-r1
Medium	ALPINE-CVE-2024-6345	py3-setuptools@65.6.0-r0	70.3.0-r0
Medium	GHSA-cx63-2mw6-8hw5	setuptools@65.6.0	70.0.0
Medium	ALPINE-CVE-2024-45492	expat@2.5.0-r0	2.6.3-r0
Medium	GHSA-668q-qrv7-99fm	logback-core@1.2.3	1.2.9
Medium	ALPINE-CVE-2024-4741	openssl@3.0.8-r0	3.0.14-r0
Medium	GHSA-jjjh-jjxp-wpff	jackson-databind@2.11.1	2.12.7.1
Medium	GHSA-rgv9-q543-rqg4	jackson-databind@2.11.1	2.12.7.1
Medium	GHSA-h6fc-48rj-7qqh	tomcat-embed-core@9.0.37	9.0.118
Medium	GHSA-3mc7-4q67-w48m	snakeyaml@1.26	1.31
Medium	GHSA-fccv-jmmp-qg76	tomcat-embed-core@9.0.37	9.0.83
Medium	GHSA-7jqf-v358-p8g7	tomcat-embed-core@9.0.37	9.0.90
Medium	ALPINE-CVE-2024-45491	expat@2.5.0-r0	2.6.3-r0
Medium	GHSA-g5h3-w546-pj7f	spring-boot-actuator-autoconfigure@2.3.2.RELEASE	2.5.15
Medium	ALPINE-CVE-2023-28319	curl@7.87.0-r2	8.1.0-r0
Medium	PYSEC-2025-49	setuptools@65.6.0	78.1.1
Medium	ALPINE-CVE-2023-3446	openssl@3.0.8-r0	3.0.9-r3
Medium	ALPINE-CVE-2024-7592	python3@3.10.10-r0	3.10.15-r0
Medium	ALPINE-CVE-2024-6232	python3@3.10.10-r0	3.10.15-r0
Medium	ALPINE-CVE-2020-12762	libfastjson@0.99.9-r0	1.2304.0-r0
Medium	GHSA-wc4r-xq3c-5cf3	tomcat-embed-core@9.0.37	9.0.106
Medium	GHSA-r6j3-px5g-cq3x	tomcat-embed-core@9.0.37	9.0.81
Medium	GHSA-wr62-c79q-cv37	tomcat-embed-core@9.0.37	9.0.107
Medium	GHSA-5m62-pw8w-7w9f	tomcat-embed-core@9.0.37	9.0.118
Medium	ALPINE-CVE-2024-28757	expat@2.5.0-r0	2.6.2-r0
Medium	GHSA-25xr-qj8w-c4vf	tomcat-embed-core@9.0.37	9.0.107
Medium	ALPINE-CVE-2024-8088	python3@3.10.10-r0	3.10.14-r2
Medium	GHSA-hh26-6xwr-ggv7	spring-beans@5.2.8.RELEASE	5.2.22.RELEASE
Medium	GHSA-4j3c-42xv-3f84	tomcat-embed-core@9.0.37	9.0.107
Medium	ALPINE-CVE-2023-52425	expat@2.5.0-r0	2.6.0-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.0.5latest	3 years ago	2.1.6	81989101	4,671

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cnieg/clamapi.svg)](https://charts.stackradar.io/charts/cnieg/clamapi)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.