StackRadar

hive-metastore Helm chart

dmwm-bigdataVerified publisher

Scored 14 Sept 2026

The Apache Hive ™ data warehouse software facilitates reading, writing, and managing large datasets residing in distributed storage using SQL. Structure can be projected onto data already in storage. A command line tool and JDBC driver are provided to connect users to Hive.

Latest 0.1.3 5 years agodeploys tag 11.10.0-debian-10-r83 1Artifact Hub

hive-metastore 0.1.3 deploys 2 container images: bitnami/postgresql and bde2020/hive. Across the 1 measured, 283 findings10 critical, 27 high 2 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.6.2, fixed in 2.12.2.

Radar Score

6,8821027142104

283 findings over 1 of 2 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
bitnami/postgresql11.10.0-debian-10-r83unmeasured
bde2020/hive2.3.2-postgresql-metastore10271421046,882

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

283 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumDLA-2009-1tiff@4.0.3-12.3+deb8u54.0.3-12.3+deb8u10
MediumGHSA-3832-9276-x7gfcommons-httpclient@3.0.1no fix listed
MediumGHSA-cfh5-3ghh-wfjxhttpclient@4.2.54.3.5
MediumGHSA-g3wg-6mcf-8jj6jetty-webapp@7.6.0.v201201279.4.33.v20201020
MediumGHSA-7r82-7xv7-xcpjhttpclient@4.2.54.5.13
MediumGHSA-vx85-mj8c-4qm6libthrift@0.9.30.12.0
MediumGHSA-7286-pgfv-vxvhzookeeper@3.4.6-tests3.7.2
MediumGHSA-rrfq-g5fq-fc9chive-exec@2.3.22.3.4
MediumGHSA-jjjh-jjxp-wpffjackson-databind@2.6.52.12.7.1
MediumGHSA-rgv9-q543-rqg4jackson-databind@2.6.52.12.7.1
MediumGHSA-735f-pc8j-v9w8protobuf-java@2.5.03.25.5
MediumGHSA-3vrc-rrpw-r5pwjava-xmlbuilder@0.41.2
MediumGHSA-5m48-vr54-vmh3jersey-core@1.91.13
MediumDLA-1917-1curl@7.38.0-4+deb8u97.38.0-4+deb8u16
MediumGHSA-gwrp-pvrq-jmwvcommons-io@2.42.7
MediumGHSA-mvr2-9pj6-7w5jguava@11.0.224.1.1-android
MediumGHSA-v7wg-cpwc-24m4postgresql@9.4.1209.jre742.2.25
MediumGHSA-f256-j965-7f32netty@3.6.2.Finalno fix listed
MediumDLA-1833-1bzip2@1.0.6-7+b31.0.6-7+deb8u1
MediumDLA-1557-1tiff@4.0.3-12.3+deb8u54.0.3-12.3+deb8u7
MediumDLA-1637-1apt@1.0.9.8.41.0.9.8.5
MediumGHSA-xc67-hjx6-cgg6jetty-server@7.6.0.v201201279.2.28.v20190418
MediumGHSA-hrmr-f5m6-m9pqcommons-compress@1.91.18
MediumDLA-1672-1curl@7.38.0-4+deb8u97.38.0-4+deb8u14
MediumGHSA-vp98-w2p3-mv35log4j@1.2.172.0
MediumDSA-4140-1libvorbis@1.3.4-21.3.4-2+deb8u1
MediumGHSA-h24p-qwf4-84q8hadoop-common@2.7.42.8.1
MediumDLA-1568-1curl@7.38.0-4+deb8u97.38.0-4+deb8u13
MediumGHSA-rhrv-645h-fjfhavro@1.7.71.11.3
MediumDLA-1601-1perl@5.20.2-3+deb8u95.20.2-3+deb8u12
MediumGHSA-r38f-c4h4-hqq2postgresql@9.4.1209.jre742.2.26
MediumDLA-1730-3libssh2@1.4.3-4.1+deb8u11.4.3-4.1+deb8u4
MediumGHSA-qcwq-55hx-v3vhsnappy-java@1.0.4.11.1.10.1
MediumDSA-4136-1curl@7.38.0-4+deb8u97.38.0-4+deb8u10
MediumGHSA-wx5j-54mm-rqqqnetty@3.6.2.Finalno fix listed
MediumGHSA-qxp4-27vx-xmm3jetty-server@7.6.0.v201201278.1.0.RC4
MediumGHSA-7vpq-g998-qpv7netty@3.6.2.Final3.6.9.Final
MediumDLA-1498-1curl@7.38.0-4+deb8u97.38.0-4+deb8u12
MediumGHSA-wrvw-hg22-4m67protobuf-java@2.5.03.16.1
MediumDSA-4172-1perl@5.20.2-3+deb8u95.20.2-3+deb8u10
MediumGHSA-x27m-9w8j-5vcwjettison@1.11.5.2
MediumGHSA-pvp8-3xj6-8c6xcommons-configuration@1.6no fix listed
MediumGHSA-9rgv-h7x4-qw8gjetty-server@9.2.5.v201411129.3.24.v20180605
MediumGHSA-j288-q9x7-2f5vcommons-lang@2.6no fix listed
MediumGHSA-j288-q9x7-2f5vcommons-lang3@3.3.23.18.0
MediumGHSA-r28m-g6j9-r2h5jetty-server@9.2.5.v201411129.2.28.v20190418
MediumDLA-1482-1libx11@2:1.6.2-3+deb8u12:1.6.2-3+deb8u2
MediumDLA-1730-1libssh2@1.4.3-4.1+deb8u11.4.3-4.1+deb8u2
MediumGHSA-7rf3-mqpx-h7xgjettison@1.11.5.2
MediumGHSA-grr4-wv38-f68wjettison@1.11.5.2

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.3latest5 years ago11.10.0-debian-10-r8310271421046,882

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/dmwm-bigdata/hive-metastore.svg)](https://charts.stackradar.io/charts/dmwm-bigdata/hive-metastore)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.