backstage Helm chart

Name: backstage Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

deliveryhero

Scored 14 Sept 2026

A Helm chart for Backstage

Latest 0.1.15 2 months agodeploys tag test1 3Artifact Hub

backstage 0.1.15 deploys 2 container images: martinaif/backstage-k8s-demo-backend and martinaif/backstage-k8s-demo-frontend. Across them, 513 findings — 0 critical, 20 high — 6 on CISA KEV. The highest contribution is GHSA-c4w7-xm78-47vh in y18n 4.0.0, fixed in 4.0.1.

Radar Score

8,213020169324

513 findings over 2 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
martinaif/backstage-k8s-demo-backend	test1	017140260	6,676
martinaif/backstage-k8s-demo-frontend	test1	032964	1,537

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

High findings

17 distinct across the version’s images

High: findings whose contribution to the Radar Score is 40–69. Show every band

Severity	Advisory	Package	Fixed in
High	GHSA-c4w7-xm78-47vh	y18n@4.0.0	4.0.1
High	GHSA-r5fr-rjxr-66jc	lodash@4.17.15	4.18.0
High	GHSA-r5fr-rjxr-66jc	lodash-es@4.17.15	4.18.0
High	GHSA-r5fr-rjxr-66jc	lodash.template@4.5.0	4.18.0
High	GHSA-w573-4hg7-7wgq	decode-uri-component@0.2.0	0.2.1
High	GHSA-hw8r-x6gr-5gjp	jsonpath-plus@0.19.0	10.3.0
High	GHSA-pppg-cpfq-h7wr	jsonpath-plus@0.19.0	10.2.0
High	GHSA-3jfq-g458-7qm9	tar@2.2.2	3.2.2
High	GHSA-35jh-r3h4-6jhm	lodash@4.17.15	4.17.21
High	GHSA-35jh-r3h4-6jhm	lodash.template@4.5.0	no fix listed
High	GHSA-35jh-r3h4-6jhm	lodash-es@4.17.15	4.17.21
High	GHSA-x3m8-899r-f7c3	xml-crypto@1.5.3	2.1.6
High	GHSA-9p8x-f768-wp2g	xml-crypto@1.5.3	2.1.6
High	GHSA-f2jv-r9rf-7988	handlebars@4.7.6	4.7.7
High	DLA-3570-1KEV	libwebp@0.6.1-2	0.6.1-2+deb10u3
High	DLA-3621-1KEV	nghttp2@1.36.0-2+deb10u1	1.36.0-2+deb10u2
High	DSA-4777-1KEV	freetype@2.9.1-3+deb10u1	2.9.1-3+deb10u2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.15latest	2 months ago	test1	020169324	8,213

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/deliveryhero/backstage.svg)](https://charts.stackradar.io/charts/deliveryhero/backstage)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.