StackRadar

amundsen 1.1.0 Helm chart

duyet

Scored 14 Sept 2026

Amundsen is a metadata driven application for improving the productivity of data analysts, data scientists and engineers when interacting with data.

Version 1.1.0 1 month agodeploys tag 2.1.1 0Artifact Hub

amundsen 1.1.0 deploys 7 container images: amundsendev/amundsen-frontend, amundsendev/amundsen-metadata, appropriate/curl, library/neo4j and 3 more. Across the 5 measured, 684 findings2 critical, 22 high 2 on CISA KEV. The highest contribution is ALPINE-CVE-2020-15999 in freetype 2.9.1-r2, fixed in 2.9.1-r3.

Radar Score

11,174222245415

684 findings over 5 of 7 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images
ImageTagVulnerabilitiesRadar Score
amundsendev/amundsen-frontend2.1.1091141934,917
amundsendev/amundsen-metadata2.5.401391072,039
appropriate/curllatest0591551
library/neo4j3.3.02643241,758
amundsendev/amundsen-search2.4.00140901,909
bitnami/os-shell×412-debian-12-r16unmeasured
bitnami/elasticsearch×88.12.2-debian-12-r0unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

451 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumGHSA-g3rq-g295-4j3mjinja2@2.11.22.11.3
MediumGHSA-hwj9-h5mp-3pm3postcss@7.0.237.0.36
MediumALPINE-CVE-2019-19242sqlite@3.26.0-r33.28.0-r2
MediumPYSEC-2022-203werkzeug@0.15.32.1.1
MediumGHSA-jr5f-v2jv-69x6axios@0.19.00.30.0
MediumGHSA-95m3-7q98-8xr5sha.js@2.4.112.4.12
MediumGHSA-hggm-jpg3-v476cryptography@2.93.2
MediumGHSA-pfq8-rq6v-vf5mhtml-minifier@3.5.21no fix listed
MediumGHSA-qw69-rqj8-6qw8jetty-server@9.2.22.v201706069.4.51.v20230217
MediumGHSA-4w2v-q235-vp99axios@0.19.00.21.1
MediumGHSA-2xpw-w6gg-jr37urllib3@1.222.6.0
MediumGHSA-gm62-xv2j-4w53urllib3@1.25.102.6.0
MediumGHSA-3ww4-gg4f-jr7fcryptography@2.942.0.0
MediumGHSA-r64q-w8jr-g9qpurllib3@1.221.24.3
MediumALPINE-CVE-2019-5094e2fsprogs@1.44.5-r01.44.5-r1
MediumGHSA-3329-pjwv-fjpgurijs@1.19.11.19.4
MediumPYSEC-2023-221werkzeug@0.15.32.3.8
MediumDSA-4807-1openssl@1.1.1d-0+deb10u31.1.1d-0+deb10u4
MediumGHSA-f23m-r3pf-42rhlodash@4.17.154.18.0
MediumGHSA-xxjr-mmjv-4gpglodash@4.17.154.17.23
MediumGHSA-8w49-h785-mj3ctornado@4.5.36.4.2
MediumGHSA-gcv8-gh4r-25x6urijs@1.19.11.19.8
MediumGHSA-6fc8-4gx4-v693ws@5.2.25.2.3
MediumGHSA-67hx-6x53-jw92babel-traverse@6.26.0no fix listed
MediumGHSA-67hx-6x53-jw92@babel/traverse@7.7.47.23.2
MediumDLA-3530-1openssl@1.1.1d-0+deb10u31.1.1n-0+deb10u6
MediumGHSA-v88g-cgmw-v5xwajv@5.5.26.12.3
MediumGHSA-c8xf-m4ff-jcxjbcprov-jdk15on@1.531.56
MediumGHSA-9wv6-86v2-598jpath-to-regexp@1.7.01.9.0
MediumGHSA-r9p9-mrjm-926welliptic@6.5.26.5.4
MediumGHSA-cpq7-6gpm-g9rccipher-base@1.0.41.0.5
MediumGHSA-3mfm-83xf-c92rhandlebars@4.5.34.7.9
MediumGHSA-xhpv-hc6g-r9c6handlebars@4.5.34.7.9
MediumGHSA-566m-qj78-rww5postcss@7.0.237.0.36
MediumGHSA-3xgq-45jj-v275cross-spawn@5.1.06.0.6
MediumGHSA-p92q-9vqr-4j8vaxios@0.19.00.32.0
MediumGHSA-w8qv-6jwh-64r5browserslist@4.8.34.16.5
MediumGHSA-w7pp-m8wf-vj6rcryptography@2.939.0.1
MediumPYSEC-2024-225cryptography@2.942.0.4
MediumDLA-3152-1glibc@2.28-102.28-10+deb10u2
MediumGHSA-96hv-2xvq-fx4pws@5.2.25.2.5
MediumGHSA-3ppc-4f35-3m26minimatch@3.0.43.1.3
MediumGHSA-pf86-5x62-jrwfaxios@0.19.00.31.1
MediumGHSA-vh95-rmgr-6w4mminimist@1.2.01.2.3
MediumGHSA-5xp3-jfq3-5q8xpip@20.2.221.1
LowPYSEC-2026-2132click@6.78.3.3
LowALPINE-CVE-2018-1000654libtasn1@4.13-r04.14-r0
LowGHSA-vcc3-ghjq-m6frdecode-uri-component@0.2.00.5.0
LowGHSA-hj48-42vr-x3v9path-parse@1.0.51.0.7
LowGHSA-hc5x-x2vx-497ggunicorn@20.0.422.0.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.1.0latest1 month ago2.1.122224541511,174

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/duyet/amundsen.svg)](https://charts.stackradar.io/charts/duyet/amundsen)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.