StackRadar

hdfs Helm chart

dmwm-bigdataVerified publisher

Scored 14 Sept 2026

The Apache Hadoop software library is a framework that allows for the distributed processing of large data sets across clusters of computers using simple programming models.

Latest 1.0.1 4 years agoapp version 3.2.2 2Artifact Hub

hdfs 1.0.1 deploys 2 container images: gradiant/hdfs and marcelmay/hadoop-hdfs-fsimage-exporter. Across them, 318 findings — 13 critical, 35 high — 2 on CISA KEV. The highest contribution is GHSA-2qrg-x229-3v8q in log4j 1.2.17, with no fix listed.

Radar Score

7,9481335156114

318 findings over 2 of 2 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
gradiant/hdfs×53.2.27251181025,902
marcelmay/hadoop-hdfs-fsimage-exporter1.261038122,046

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

142 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-8w26-6f25-cm9xjackson-databind@2.9.10.42.9.10.8
MediumGHSA-v585-23hc-c647jackson-databind@2.9.10.42.9.10.8
MediumGHSA-r695-7vr9-jgc2jackson-databind@2.9.10.42.9.10.8
MediumGHSA-8c4j-34r4-xr8gjackson-databind@2.9.10.42.9.10.8
MediumGHSA-84q7-p226-4x5wjetty-server@8.1.22.v201609229.3.24.v20180605
MediumGHSA-89qr-369f-5m5xjackson-databind@2.9.10.42.9.10.8
MediumGHSA-cvm9-fjm9-3572jackson-databind@2.9.10.42.9.10.8
MediumGHSA-vfqx-33qm-g869jackson-databind@2.9.10.42.9.10.8
MediumGHSA-9m6f-7xcq-8vf8jackson-databind@2.9.10.42.9.10.8
MediumGHSA-58jx-f5rf-qgqfhadoop-yarn-server-common@3.2.23.2.3
MediumALPINE-CVE-2019-14697musl@1.1.18-r21.1.18-r4
MediumGHSA-grg4-wf29-r9vvnetty@3.10.6.Finalno fix listed
MediumGHSA-grg4-wf29-r9vvnetty-codec@4.1.17.Final4.1.68.Final
MediumGHSA-wfcc-pff6-rgc5jetty-server@8.1.22.v201609229.2.22.v20170606
MediumGHSA-mc6h-4qgp-37qhjackson-databind@2.9.10.42.9.10.5
MediumALPINE-CVE-2018-14550libpng@1.6.34-r11.6.37-r0
MediumGHSA-cf6r-3wgc-h863jackson-databind@2.4.02.6.7.3
MediumGHSA-c2q3-4qrh-fm48jackson-databind@2.9.10.42.9.10.5
MediumGHSA-p2v9-g2qv-p635netty-handler@4.1.17.Final4.1.45
MediumGHSA-p2v9-g2qv-p635netty@3.10.6.Finalno fix listed
MediumGHSA-cmfg-87vq-g5g4jackson-databind@2.4.02.6.7.3
MediumGHSA-7vx9-xjhr-rw6hjetty-server@8.1.22.v201609229.2.27.v20190403
MediumDSA-5197-1curl@7.74.0-1.3+b17.74.0-1.3+deb11u2
MediumGHSA-57j2-w4cx-62h2jackson-databind@2.9.10.42.12.6.1
MediumALPINE-CVE-2018-14598libx11@1.6.5-r11.6.6-r0
MediumGHSA-rpr3-cw39-3pxhjackson-databind@2.4.02.9.10.4
MediumGHSA-g3wg-6mcf-8jj6jetty-webapp@9.4.20.v201908139.4.33.v20201020
MediumALPINE-CVE-2019-7317libpng@1.6.34-r11.6.37-r0
MediumALPINE-CVE-2018-11813libjpeg-turbo@1.5.2-r01.5.3-r2
MediumGHSA-7r82-7xv7-xcpjhttpclient@4.5.54.5.13
MediumGHSA-wxr5-93ph-8wr9commons-beanutils@1.9.41.11.0
MediumALPINE-CVE-2018-6003libtasn1@4.12-r24.12-r3
MediumGHSA-jjjh-jjxp-wpffjackson-databind@2.9.10.42.12.7.1
MediumGHSA-rgv9-q543-rqg4jackson-databind@2.9.10.42.12.7.1
MediumGHSA-735f-pc8j-v9w8protobuf-java@2.5.03.25.5
MediumGHSA-3mc7-4q67-w48msnakeyaml@1.161.31
MediumDSA-5218-1zlib@1:1.2.11.dfsg-21:1.2.11.dfsg-2+deb11u2
MediumGHSA-gwrp-pvrq-jmwvcommons-io@2.52.7
MediumGHSA-mvr2-9pj6-7w5jguava@24.0-jre24.1.1-android
MediumGHSA-f256-j965-7f32netty@3.10.6.Finalno fix listed
MediumALPINE-CVE-2018-1152libjpeg-turbo@1.5.2-r01.5.3-r1
MediumALPINE-CVE-2018-14048libpng@1.6.34-r11.6.37-r0
MediumGHSA-86wm-rrjm-8wh8jetty-server@9.4.20.v201908139.4.35.v20201120
MediumGHSA-xc67-hjx6-cgg6jetty-server@8.1.22.v201609229.2.28.v20190418
MediumALPINE-CVE-2018-5709krb5@1.15.2-r11.15.3-r0
MediumALPINE-CVE-2018-14498libjpeg-turbo@1.5.2-r01.5.3-r3
MediumGHSA-vp98-w2p3-mv35log4j@1.2.172.0
MediumGHSA-h24p-qwf4-84q8hadoop-common@2.7.52.8.1
MediumGHSA-c28r-hw5m-5gv3aws-java-sdk-s3@1.11.5631.12.261
MediumGHSA-rhrv-645h-fjfhavro@1.7.71.11.3

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.1latest4 years ago3.2.213351561147,948

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/dmwm-bigdata/hdfs.svg)](https://charts.stackradar.io/charts/dmwm-bigdata/hdfs)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.