codefresh 2.12.21 Helm chart

Name: codefresh Helm chart 2.12.21: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

codefresh-onprem

Scored 9 Oct 2026

Helm Chart for Codefresh On-Prem

Version 2.12.21deploys tag 0.1.51 7Artifact Hub

codefresh 2.12.21 deploys 42 container images: us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-hub-platform, us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-platform-abac, us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-platform-analytics-reporter, us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-platform-api-events and 38 more. Across the 8 measured, 1,701 findings — 6 critical, 1 high — 1 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.4.3-0, fixed in 6.2.20.

Radar Score

18,934612911,403

1,701 findings over 8 of 42 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

42 images

Image	Tag	Vulnerabilities	Radar Score
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-hub-platform	0.1.51	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-platform-abac	1.4123.3-onprem-1802758	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-platform-analytics-reporter	1.4123.3-onprem-1802758	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-platform-api-events	1.4123.3-onprem-1802758	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-platform-api-graphql	1.4123.3-onprem-1802758	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-platform-audit	1.4123.3-onprem-1802758	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-platform-broadcaster	1.4123.3-onprem-1802758	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-platform-cron-executor	1.4123.3-onprem-1802758	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-platform-event-handler	1.4123.3-onprem-1802758	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-platform-promotion-orchestrator	1.4123.3-onprem-1802758	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/argo-platform-ui	1.4123.3-onprem-1802758	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/cf-broadcaster	1.15.16-onprem-8f670ad	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/cf-platform-analytics×2	0.54.16-onprem-fee3eef	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/cf-api	22.8.18-onprem-0635e09	—	unmeasured
us-docker.pkg.dev/codefresh-inc/public-gcr-io/codefresh/curl×2	8.22.0	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/cf-tls-sign	1.8.23-onprem-8952a52	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/cf-ui	14.100.24-onprem-c5b8df3	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/charts-manager	1.28.10-onprem-3eff428	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/cluster-providers	1.20.5-onprem-01c13a8	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/context-manager	2.41.13-onprem-c002da3	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/cronus	0.9.8-onprem-8b64dee	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/gitops-dashboard-manager	1.16.17-onprem-7926bc5	—	unmeasured
ghcr.io/helm/chartmuseum	v0.16.6	00936	422
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/helm-repo-manager	0.23.7-onprem-2ccb379	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/hermes	0.22.14-onprem-aa9f39c	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/k8s-monitor	4.12.4-onprem-20160ad	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/kube-integration	2.1.11-onprem-db12fab	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/nomios	0.12.6-onprem-2b5d493	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/pipeline-manager	4.2.9-onprem-9c246b2	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/runtime-environment-manager	4.1.11-onprem-95e1163	—	unmeasured
us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/tasker-kubernetes	1.29.8-onprem-e9bd580	—	unmeasured
nginxinc/nginx-unprivileged	1.31.4-alpine-otel	00425	332
quay.io/codefresh/dind	3.0.25	0013101	1,106
quay.io/codefresh/redis×2	7.4.3-debian-12-r0	2057242	3,453
bitnamilegacy/consul	1.21.4-debian-12-r1	1056275	3,635
bitnamilegacy/mongodb×2	7.0.14-debian-12-r3	2184404	5,666
bitnamilegacy/nats	2.11.8-debian-12-r0	001786	1,115
us-docker.pkg.dev/codefresh-inc/public-gcr-io/codefresh/postgresql×2	17.6.0-debian-12-r4	—	unmeasured
bitnamilegacy/rabbitmq×2	4.1.3	1051234	3,205
us-docker.pkg.dev/codefresh-inc/public-gcr-io/codefresh/kubectl×3	1.37.1	—	unmeasured
us-docker.pkg.dev/codefresh-inc/public-gcr-io/codefresh/mongosh×2	2.8.3-cf-1	—	unmeasured
us-docker.pkg.dev/codefresh-inc/public-gcr-io/codefresh/rabbitmqadmin	2.8.1-cf-2	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

720 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	BIT-mongodb-2025-14345	mongodb@7.0.14-1	7.0.26
Low	DEBIAN-CVE-2023-29383	shadow@1:4.13+dfsg1-1+b1	1:4.13+dfsg1-1+deb12u1
Low	BIT-consul-2026-15970	consul@1.21.4-1	2.0.3
Low	DEBIAN-CVE-2026-22185	openldap@2.5.13+dfsg-5	no fix listed
Low	DEBIAN-CVE-2026-97399	glibc@2.36-9+deb12u10	no fix listed
Low	DEBIAN-CVE-2026-41991	gzip@1.12-1	no fix listed
Low	DEBIAN-CVE-2025-9820	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u6
Low	DEBIAN-CVE-2025-15224	curl@7.88.1-10+deb12u7	no fix listed
Low	DEBIAN-CVE-2026-54872	openssl@3.0.17-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2026-42770	openssl@3.0.17-1~deb12u2	3.0.20-1~deb12u2
Low	GO-2026-4403	stdlib@go1.23.8	1.23.9
Low	BIT-mongodb-2025-6707	mongodb@7.0.14-1	5.0.31
Low	BIT-nats-2026-33248	nats@2.11.8-0	2.11.15
Low	DEBIAN-CVE-2026-77696	openssl@3.0.17-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2026-27456	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-18508	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	BIT-redis-2025-46686	redis@7.4.3-0	8.0.4
Low	DEBIAN-CVE-2025-68972	gnupg2@2.2.40-1.1	no fix listed
Low	DEBIAN-CVE-2022-3219	gnupg2@2.2.40-1.1	no fix listed
Low	DEBIAN-CVE-2026-41080	expat@2.5.0-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-102474	dash@0.5.12-2	no fix listed
Low	DEBIAN-CVE-2023-4016	procps@2:4.0.2-3	no fix listed
Low	DEBIAN-CVE-2025-69418	openssl@3.0.17-1~deb12u2	3.0.18-1~deb12u2
Low	DEBIAN-CVE-2007-5686	shadow@1:4.13+dfsg1-1+deb12u1	no fix listed
Low	BIT-mongodb-2025-12893	mongodb@7.0.14-1	7.0.26
Low	DEBIAN-CVE-2026-18477	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	ALPINE-CVE-2026-73281	openssh@10.3_p1-r0	10.3_p1-r1
Low	GO-2026-5932	golang.org/x/crypto@v0.53.0	no fix listed
Low	GO-2026-6599	stdlib@go1.25.13	1.26.9
Low	GO-2026-6600	stdlib@go1.25.13	1.26.9
Low	GO-2026-6603	golang.org/x/net@v0.56.0	0.60.0
Low	GO-2026-6603	stdlib@go1.25.13	1.26.9
Low	GO-2026-6604	stdlib@go1.25.13	1.26.9
Low	GO-2026-6605	stdlib@go1.25.13	1.26.9
Low	GO-2026-6607	stdlib@go1.25.13	1.26.9
Low	GO-2026-6608	stdlib@go1.25.13	1.26.9
Low	GO-2026-6609	stdlib@go1.25.13	1.26.9
Low	GO-2026-6610	golang.org/x/net@v0.56.0	0.60.0
Low	GO-2026-6610	stdlib@go1.25.13	1.26.9
Low	GO-2026-6611	stdlib@go1.25.13	1.26.9
Low	GO-2026-6611	golang.org/x/net@v0.56.0	0.60.0
Low	GO-2026-6612	stdlib@go1.25.13	1.26.9
Low	GO-2026-6612	golang.org/x/net@v0.56.0	0.60.0
Low	GO-2026-6613	stdlib@go1.25.13	1.26.9
Low	GO-2026-6617	stdlib@go1.25.13	1.26.9
Low	GO-2026-6617	golang.org/x/net@v0.56.0	0.60.0
Low	DEBIAN-CVE-2026-95818	glibc@2.36-9+deb12u10	no fix listed
Low	DEBIAN-CVE-2026-105712	gnupg2@2.2.40-1.1	no fix listed
Low	GO-2026-5024	golang.org/x/sys@v0.38.0	0.44.0
Low	ALPINE-CVE-2026-89162	pcre2@10.47-r1	10.48-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.12.21latest	—	0.1.51	612911,403	18,934
2.12.20	—	0.1.51	612911,403	18,934
2.12.19	—	0.1.51	612911,403	18,934
2.12.18	—	0.1.48	612911,403	18,934
2.12.17	—	0.1.48	612911,403	18,934
2.12.16	—	0.1.48	612911,403	18,934
2.12.15	—	0.1.48	612911,403	18,934
2.12.14	—	0.1.48	612911,403	18,934
2.12.13	—	0.1.48	612911,403	18,934

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/codefresh-onprem/codefresh.svg)](https://charts.stackradar.io/charts/codefresh-onprem/codefresh)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.