codefresh 2.12.18 Helm chart

Name: codefresh Helm chart 2.12.18: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

codefresh-onprem

Not scored yet

Helm Chart for Codefresh On-Prem

Version 2.12.18deploys tag 0.1.48 7Artifact Hub

codefresh 2.12.18 deploys 42 container images: us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-hub-platform, us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-platform-abac, us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-platform-analytics-reporter, us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-platform-api-events and 38 more. The highest contribution is BIT-redis-2025-49844 in redis 7.4.3-0, fixed in 6.2.20.

Radar Score

Not yet scored

The daily scoring run has not folded the 42 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

42 images

Image	Tag	Vulnerabilities	Radar Score
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-hub-platform	0.1.48	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-platform-abac	1.4123.2-onprem-b97b7bd	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-platform-analytics-reporter	1.4123.2-onprem-b97b7bd	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-platform-api-events	1.4123.2-onprem-b97b7bd	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-platform-api-graphql	1.4123.2-onprem-b97b7bd	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-platform-audit	1.4123.2-onprem-b97b7bd	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-platform-broadcaster	1.4123.2-onprem-b97b7bd	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-platform-cron-executor	1.4123.2-onprem-b97b7bd	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-platform-event-handler	1.4123.2-onprem-b97b7bd	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-platform-promotion-orchestrator	1.4123.2-onprem-b97b7bd	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-platform-ui	1.4123.2-onprem-b97b7bd	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/cf-broadcaster	1.15.14-onprem-4c3812b	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/cf-platform-analytics×2	0.54.15-onprem-5a83aa5	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/cf-api	22.8.17-onprem-ed8b05d	—	unmeasured
us-docker.pkg.dev/codefresh-inc/public-gcr-io/codefresh/curl×2	8.22.0	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/cf-tls-sign	1.8.23-onprem-8952a52	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/cf-ui	14.100.23-onprem-6391a08	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/charts-manager	1.28.9-onprem-bb53e7e	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/cluster-providers	1.20.4-onprem-3354d39	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/context-manager	2.41.12-onprem-64a094f	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/cronus	0.9.7-onprem-9b4f304	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/gitops-dashboard-manager	1.16.15-onprem-80311d6	—	unmeasured
ghcr.io/helm/chartmuseum	v0.16.6	00817	293
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/helm-repo-manager	0.23.7-onprem-2ccb379	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/hermes	0.22.13-onprem-b0e7023	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/k8s-monitor	4.12.4-onprem-20160ad	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/kube-integration	2.1.8-onprem-16c5c4a	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/nomios	0.12.5-onprem-1fd6b3a	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/pipeline-manager	4.2.8-onprem-bfe2885	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/runtime-environment-manager	4.1.10-onprem-d8c0c4d	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/tasker-kubernetes	1.29.6-onprem-ded2db0	—	unmeasured
nginxinc/nginx-unprivileged	1.31.4-alpine-otel	00612	238
quay.io/codefresh/dind	3.0.25	001569	813
quay.io/codefresh/redis×2	7.4.3-debian-12-r0	2054218	3,047
bitnamilegacy/consul	1.21.4-debian-12-r1	1051246	3,140
bitnamilegacy/mongodb×2	7.0.14-debian-12-r3	2176376	5,075
bitnamilegacy/nats	2.11.8-debian-12-r0	001278	809
us-docker.pkg.dev/codefresh-inc/public-gcr-io/codefresh/postgresql×2	17.6.0-debian-12-r4	—	unmeasured
bitnamilegacy/rabbitmq×2	4.1.3	1055174	2,764
us-docker.pkg.dev/codefresh-inc/public-gcr-io/codefresh/kubectl×3	1.37.0	—	unmeasured
us-docker.pkg.dev/codefresh-inc/public-gcr-io/codefresh/mongosh×2	2.8.3-cf-1	—	unmeasured
us-docker.pkg.dev/codefresh-inc/public-gcr-io/codefresh/rabbitmqadmin	2.8.1-cf-2	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

620 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-58050	libssh2@1.10.0-3+b1	1.10.0-3+deb12u1
Low	DEBIAN-CVE-2020-15719	openldap@2.5.13+dfsg-5	no fix listed
Low	DEBIAN-CVE-2025-6395	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u5
Low	BIT-mongodb-2025-3083	mongodb@7.0.14-1	5.0.31
Low	DEBIAN-CVE-2025-24528	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u3
Low	DEBIAN-CVE-2026-66034	libssh2@1.10.0-3+b1	1.10.0-3+deb12u1
Low	BIT-mongodb-2026-82053	mongodb@7.0.14-1	7.0.41
Low	DEBIAN-CVE-2025-15661	libssh2@1.10.0-3+b1	1.10.0-3+deb12u1
Low	BIT-mongodb-2026-13065	mongodb@7.0.14-1	7.0.39
Low	BIT-mongodb-2026-82052	mongodb@7.0.14-1	7.0.41
Low	DEBIAN-CVE-2026-2219	dpkg@1.21.22	1.21.23
Low	DEBIAN-CVE-2026-42012	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7
Low	BIT-consul-2026-2808	consul@1.21.4-1	1.22.5
Low	GHSA-cpfq-66p2-336j	github.com/hashicorp/consul@v1.21.4	1.21.11
Low	ALPINE-CVE-2026-82208	curl@8.21.0-r0	8.22.0-r0
Low	BIT-mongodb-2026-9746	mongodb@7.0.14-1	7.0.35
Low	BIT-mongodb-2026-9747	mongodb@7.0.14-1	7.0.35
Low	BIT-mongodb-2026-9749	mongodb@7.0.14-1	7.0.35
Low	BIT-mongodb-2026-9752	mongodb@7.0.14-1	7.0.35
Low	DEBIAN-CVE-2026-12064	curl@7.88.1-10+deb12u12	no fix listed
Low	DEBIAN-CVE-2026-8932	curl@7.88.1-10+deb12u12	no fix listed
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0
Low	DEBIAN-CVE-2026-75803	openssl@3.0.17-1~deb12u1	3.0.22-1~deb12u1
Low	DEBIAN-CVE-2025-1372	elfutils@0.188-2.1	no fix listed
Low	DEBIAN-CVE-2024-12133	libtasn1-6@4.19.0-2	4.19.0-2+deb12u1
Low	BIT-mongodb-2025-6706	mongodb@7.0.14-1	6.0.21
Low	DEBIAN-CVE-2025-1365	elfutils@0.188-2.1	no fix listed
Low	BIT-mongodb-2024-8305	mongodb@7.0.14-1	6.0.17
Low	BIT-mongodb-2025-6713	mongodb@7.0.14-1	6.0.22
Low	BIT-mongodb-2026-8199	mongodb@7.0.14-1	7.0.34
Low	GHSA-pxq6-2prw-chj9	github.com/docker/docker@v28.5.2+incompatible	no fix listed
Low	BIT-mongodb-2026-6914	mongodb@7.0.14-1	7.0.32
Low	DEBIAN-CVE-2026-58051	libssh2@1.10.0-3+b1	1.10.0-3+deb12u1
Low	DEBIAN-CVE-2026-48961	perl@5.36.0-7+deb12u2	no fix listed
Low	BIT-nats-2026-58213	nats@2.11.8-0	2.12.9
Low	GHSA-hfg8-hc9c-6c3h	github.com/moby/go-archive@v0.2.1	0.3.0
Low	BIT-mongodb-2025-10060	mongodb@7.0.14-1	6.0.25
Low	BIT-mongodb-2026-25610	mongodb@7.0.14-1	7.0.29
Low	BIT-mongodb-2026-25613	mongodb@7.0.14-1	7.0.29
Low	BIT-mongodb-2026-13078	mongodb@7.0.14-1	7.0.39
Low	DEBIAN-CVE-2026-6253	curl@7.88.1-10+deb12u12	no fix listed
Low	BIT-mongodb-2026-4358	mongodb@7.0.14-1	7.0.31
Low	DEBIAN-CVE-2026-5435	glibc@2.36-9+deb12u10	no fix listed
Low	DEBIAN-CVE-2022-27943	gcc-12@12.2.0-14+deb12u1	no fix listed
Low	BIT-mongodb-2026-13077	mongodb@7.0.14-1	7.0.39
Low	BIT-mongodb-2026-1848	mongodb@7.0.14-1	7.0.29
Low	BIT-mongodb-2026-13071	mongodb@7.0.14-1	7.0.39
Low	BIT-mongodb-2026-8201	mongodb@7.0.14-1	7.0.34
Low	BIT-mongodb-2025-6710	mongodb@7.0.14-1	6.0.21
Low	BIT-mongodb-2026-82076	mongodb@7.0.14-1	7.0.41

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.12.18latest	—	0.1.48	—	—
2.12.17	—	0.1.48	612751,192	16,170
2.12.16	—	0.1.48	612751,192	16,170
2.12.15	—	0.1.48	612751,192	16,170
2.12.14	—	0.1.48	612751,192	16,170
2.12.13	—	0.1.48	612751,192	16,170

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/codefresh-onprem/codefresh.svg)](https://charts.stackradar.io/charts/codefresh-onprem/codefresh)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.