StackRadar

hdfs 1.0.1 Helm chart

dmwm-bigdataVerified publisher

Scored 14 Sept 2026

The Apache Hadoop software library is a framework that allows for the distributed processing of large data sets across clusters of computers using simple programming models.

Version 1.0.1 4 years agoapp version 3.2.2 2Artifact Hub

hdfs 1.0.1 deploys 2 container images: gradiant/hdfs and marcelmay/hadoop-hdfs-fsimage-exporter. Across them, 318 findings — 13 critical, 35 high — 2 on CISA KEV. The highest contribution is GHSA-2qrg-x229-3v8q in log4j 1.2.17, with no fix listed.

Radar Score

7,9481335156114

318 findings over 2 of 2 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
gradiant/hdfs×53.2.27251181025,902
marcelmay/hadoop-hdfs-fsimage-exporter1.261038122,046

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

287 distinct across the version’s images
SeverityAdvisoryPackageFixed in
CriticalGHSA-2qrg-x229-3v8qlog4j@1.2.17no fix listed
CriticalGHSA-65fg-84f6-3jq3log4j@1.2.17no fix listed
CriticalGHSA-mjmj-j48q-9wg2snakeyaml@1.162.0
CriticalGHSA-f7vh-qwp3-x37mlog4j@1.2.17no fix listed
CriticalGHSA-rfx6-vp9g-rh7vjackson-databind@2.4.02.7.9.2
CriticalGHSA-w9p3-5cr8-m3jjlog4j@1.2.17no fix listed
CriticalALPINE-CVE-2019-8457sqlite@3.21.0-r03.25.3-r1
CriticalGHSA-qxxx-2pp7-5hmxjackson-databind@2.4.02.6.7.1
HighGHSA-fp5r-v3w9-4333log4j@1.2.17no fix listed
HighGHSA-ghgj-3xqr-6jfmjetty-server@8.1.22.v201609229.2.9.v20150224
HighGHSA-4w82-r329-3q67jackson-databind@2.4.02.6.7.4
HighGHSA-26vr-8j45-3r4wjetty-server@9.4.20.v201908139.4.39
HighALPINE-CVE-2018-0732libressl@2.6.3-r02.6.5-r0
HighGHSA-cggj-fvv3-cqwvjackson-databind@2.4.02.6.7.5
HighGHSA-6x9x-8qw9-9pp6jetty-server@8.1.22.v201609229.2.25.v20180606
HighGHSA-q93h-jc49-78ggjackson-databind@2.4.02.7.9.7
HighGHSA-p43x-xfjf-5jhrjackson-databind@2.4.02.7.9.7
HighGHSA-vgg8-72f2-qm23jetty-server@8.1.22.v201609229.2.25.v20180606
HighGHSA-645p-88qh-w398jackson-databind@2.4.02.6.7.3
HighGHSA-m394-8rww-3jr7jetty-server@9.4.20.v201908139.4.37
HighGHSA-rvwf-54qp-4r6vsnakeyaml@1.161.26
HighGHSA-9gph-22xh-8x98jackson-databind@2.9.10.42.9.10.8
HighGHSA-h822-r4r5-v8jgjackson-databind@2.4.02.6.7.3
HighGHSA-c8hm-7hpq-7jhgjackson-databind@2.4.02.6.7.3
HighGHSA-mph4-vhrx-mv67jackson-databind@2.4.02.6.7.3
HighGHSA-5ww9-j83m-q7qxjackson-databind@2.4.02.6.7.3
HighGHSA-4gq5-ch57-c2mgjackson-databind@2.4.02.7.9.5
HighALPINE-CVE-2018-14600libx11@1.6.5-r11.6.6-r0
HighGHSA-2363-cqg2-863cjdom@1.1no fix listed
HighGHSA-gww7-p5w4-wrfvjackson-databind@2.4.02.6.7.4
HighGHSA-h592-38cm-4ggpjackson-databind@2.4.02.6.7.3
HighALPINE-CVE-2017-15088krb5@1.15.2-r11.15.3-r0
HighGHSA-6fpp-rgj9-8rwcjackson-databind@2.4.02.7.9.6
HighGHSA-288c-cq4h-88gqjackson-databind@2.9.10.42.9.10.7
HighALPINE-CVE-2019-12900bzip2@1.0.6-r61.0.6-r7
HighGHSA-cqqj-4p63-rrmmnetty@3.10.6.Finalno fix listed
HighGHSA-cqqj-4p63-rrmmnetty-codec-http@4.1.17.Final4.1.44
HighGHSA-5r5r-6hpj-8gg9jackson-databind@2.9.10.42.9.10.8
HighDSA-5514-1KEVglibc@2.31-132.31-13+deb11u7
HighDSA-5570-1KEVnghttp2@1.43.0-11.43.0-1+deb11u1
MediumDLA-3859-1systemd@247.3-6247.3-7+deb11u6
MediumDSA-5169-1openssl@1.1.1k-1+deb11u11.1.1n-0+deb11u3
MediumGHSA-f9xh-2qgp-cq57jackson-databind@2.9.10.42.9.10.8
MediumDSA-5673-1glibc@2.31-132.31-13+deb11u9
MediumGHSA-m6x4-97wx-4q27jackson-databind@2.9.10.42.9.10.8
MediumALPINE-CVE-2018-20346sqlite@3.21.0-r03.25.3-r0
MediumGHSA-fqwf-pjwf-7vqvjackson-databind@2.4.02.6.7.4
MediumGHSA-mc84-pj99-q6hhcommons-compress@1.191.21
MediumDLA-3898-1nghttp2@1.43.0-11.43.0-1+deb11u2
MediumGHSA-3f7h-mf4q-vrm4woodstox-core@5.0.35.4.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.1latest4 years ago3.2.213351561147,948

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/dmwm-bigdata/hdfs.svg)](https://charts.stackradar.io/charts/dmwm-bigdata/hdfs)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.