StackRadar

amundsen Helm chart

duyet

Scored 14 Sept 2026

Amundsen is a metadata driven application for improving the productivity of data analysts, data scientists and engineers when interacting with data.

Latest 1.1.0 1 month agodeploys tag 2.1.1 0Artifact Hub

amundsen 1.1.0 deploys 7 container images: amundsendev/amundsen-frontend, amundsendev/amundsen-metadata, appropriate/curl, library/neo4j and 3 more. Across the 5 measured, 684 findings — 2 critical, 22 high — 2 on CISA KEV. The highest contribution is ALPINE-CVE-2020-15999 in freetype 2.9.1-r2, fixed in 2.9.1-r3.

Radar Score

11,174222245415

684 findings over 5 of 7 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images
ImageTagVulnerabilitiesRadar Score
amundsendev/amundsen-frontend2.1.1091141934,917
amundsendev/amundsen-metadata2.5.401391072,039
appropriate/curllatest0591551
library/neo4j3.3.02643241,758
amundsendev/amundsen-search2.4.00140901,909
bitnami/os-shell×412-debian-12-r16—unmeasured
bitnami/elasticsearch×88.12.2-debian-12-r0—unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

172 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-72xf-g2v4-qvf3tough-cookie@2.4.34.1.3
MediumGHSA-5955-9wpr-37jhtar@2.2.24.4.18
MediumGHSA-j8r2-6x86-q33qrequests@2.24.02.31.0
MediumGHSA-pvp8-3xj6-8c6xcommons-configuration@1.10no fix listed
MediumGHSA-p28h-cc7q-c4fgcss-what@2.1.22.1.3
MediumPYSEC-2023-192urllib3@1.222.0.6
MediumGHSA-9rgv-h7x4-qw8gjetty-server@9.2.22.v201706069.3.24.v20180605
MediumGHSA-j288-q9x7-2f5vcommons-lang3@3.53.18.0
MediumGHSA-j288-q9x7-2f5vcommons-lang@2.6no fix listed
MediumGHSA-wqvq-5m8c-6g24urllib3@1.221.25.9
MediumGHSA-grv7-fg5c-xmjgbraces@2.3.23.0.3
MediumGHSA-cgfm-xwp7-2cvrsanitize-html@1.19.12.7.1
MediumGHSA-h436-432x-8fvxcommons-compress@1.121.16
MediumGHSA-xg9f-g7g7-2323werkzeug@0.15.32.2.3
MediumGHSA-r28m-g6j9-r2h5jetty-server@9.2.22.v201706069.2.28.v20190418
MediumPYSEC-2024-60idna@2.103.7
MediumGHSA-3h5v-q93c-6h6qws@5.2.25.2.4
MediumDSA-4942-1systemd@241-7~deb10u4241-7~deb10u8
MediumGHSA-78wr-2p64-hpwjcommons-io@2.42.14.0
MediumGHSA-pjwm-pj3p-43mvaxios@0.19.00.32.0
MediumGHSA-ffqj-6fqr-9h24pyjwt@1.7.12.4.0
MediumGHSA-jgrx-mgxx-jf9vtmpl@1.0.41.0.5
MediumGHSA-43f8-2h32-f4cjhosted-git-info@2.6.02.8.9
MediumGHSA-9gp4-qrff-c648bcprov-jdk15on@1.531.56
MediumGHSA-r9ch-m4fh-fc7qbcprov-jdk15on@1.531.56
MediumGHSA-m2qf-hxjv-5gpqflask@1.0.22.2.5
MediumGHSA-9v9h-cgj8-h64pcryptography@2.942.0.2
MediumGHSA-g3rq-g295-4j3mjinja2@2.11.22.11.3
MediumGHSA-hwj9-h5mp-3pm3postcss@7.0.237.0.36
MediumALPINE-CVE-2019-19242sqlite@3.26.0-r33.28.0-r2
MediumPYSEC-2022-203werkzeug@0.15.32.1.1
MediumGHSA-jr5f-v2jv-69x6axios@0.19.00.30.0
MediumGHSA-95m3-7q98-8xr5sha.js@2.4.112.4.12
MediumGHSA-hggm-jpg3-v476cryptography@2.93.2
MediumGHSA-pfq8-rq6v-vf5mhtml-minifier@3.5.21no fix listed
MediumGHSA-qw69-rqj8-6qw8jetty-server@9.2.22.v201706069.4.51.v20230217
MediumGHSA-4w2v-q235-vp99axios@0.19.00.21.1
MediumGHSA-2xpw-w6gg-jr37urllib3@1.222.6.0
MediumGHSA-gm62-xv2j-4w53urllib3@1.25.102.6.0
MediumGHSA-3ww4-gg4f-jr7fcryptography@2.942.0.0
MediumGHSA-r64q-w8jr-g9qpurllib3@1.221.24.3
MediumALPINE-CVE-2019-5094e2fsprogs@1.44.5-r01.44.5-r1
MediumGHSA-3329-pjwv-fjpgurijs@1.19.11.19.4
MediumPYSEC-2023-221werkzeug@0.15.32.3.8
MediumDSA-4807-1openssl@1.1.1d-0+deb10u31.1.1d-0+deb10u4
MediumGHSA-f23m-r3pf-42rhlodash@4.17.154.18.0
MediumGHSA-xxjr-mmjv-4gpglodash@4.17.154.17.23
MediumGHSA-8w49-h785-mj3ctornado@4.5.36.4.2
MediumGHSA-gcv8-gh4r-25x6urijs@1.19.11.19.8
MediumGHSA-6fc8-4gx4-v693ws@5.2.25.2.3

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.1.0latest1 month ago2.1.122224541511,174

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/duyet/amundsen.svg)](https://charts.stackradar.io/charts/duyet/amundsen)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.