rundeck 0.3.4 Helm chart

Name: rundeck Helm chart 0.3.4: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dwardu-helm-charts

Scored 13 Sept 2026

A Rundeck chart for Kubernetes

Version 0.3.4 5 years agoapp version 3.2.7 0Artifact Hub

rundeck 0.3.4 deploys 2 container images: library/nginx and rundeck/rundeck. Across them, 1,108 findings — 25 critical, 55 high — 6 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webmvc 4.3.24.RELEASE, fixed in 5.2.20.RELEASE.

Radar Score

19,6752555390637

1,108 findings over 2 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
library/nginx	stable	0030145	1,827
rundeck/rundeck	3.2.7	2556365486	17,975

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,038 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webmvc@4.3.24.RELEASE	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@4.3.24.RELEASE	5.2.20.RELEASE
Critical	UBUNTU-CVE-2015-4852KEV	openjdk-8@8u252-b09-1~16.04	no fix listed
Critical	UBUNTU-CVE-2022-2068	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm5
Critical	UBUNTU-CVE-2020-15999KEV	freetype@2.6.1-0.1ubuntu2.4	2.6.1-0.1ubuntu2.5
Critical	UBUNTU-CVE-2022-1292	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm3
Critical	UBUNTU-CVE-2023-38408	openssh@1:7.2p2-4ubuntu2.8	1:7.2p2-4ubuntu2.10+esm3
Critical	GHSA-2qrg-x229-3v8q	log4j@1.2.17	no fix listed
Critical	GHSA-65fg-84f6-3jq3	log4j@1.2.17	no fix listed
Critical	GHSA-45hx-wfhj-473x	h2@1.4.199	2.1.210
Critical	UBUNTU-CVE-2022-29155	openldap@2.4.42+dfsg-2ubuntu3.8	2.4.42+dfsg-2ubuntu3.13+esm1
Critical	GHSA-h376-j262-vhq6	h2@1.4.199	2.0.206
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.24	2.0
Critical	UBUNTU-CVE-2025-27363KEV	freetype@2.6.1-0.1ubuntu2.4	2.6.1-0.1ubuntu2.5+esm2
Critical	GHSA-f7vh-qwp3-x37m	log4j@1.2.17	no fix listed
Critical	UBUNTU-CVE-2021-3156KEV	sudo@1.8.16-0ubuntu1.9	1.8.16-0ubuntu1.10
Critical	GHSA-rfx6-vp9g-rh7v	jackson-databind@2.3.3	2.7.9.2
Critical	GHSA-w9p3-5cr8-m3jj	log4j@1.2.17	no fix listed
Critical	GHSA-vv7r-c36w-3prj	commons-fileupload@1.3.3	1.6.0
Critical	UBUNTU-CVE-2024-47175	cups@2.1.3-4ubuntu0.11	2.1.3-4ubuntu0.11+esm8
Critical	UBUNTU-CVE-2020-36221	openldap@2.4.42+dfsg-2ubuntu3.8	2.4.42+dfsg-2ubuntu3.12
Critical	UBUNTU-CVE-2020-36228	openldap@2.4.42+dfsg-2ubuntu3.8	2.4.42+dfsg-2ubuntu3.12
Critical	GHSA-qxxx-2pp7-5hmx	jackson-databind@2.3.3	2.6.7.1
Critical	UBUNTU-CVE-2025-6965	sqlite3@3.11.0-1ubuntu1.4	3.11.0-1ubuntu1.5+esm3
Critical	UBUNTU-CVE-2024-2961	glibc@2.23-0ubuntu11	2.23-0ubuntu11.3+esm6
High	GHSA-fp5r-v3w9-4333	log4j@1.2.17	no fix listed
High	UBUNTU-CVE-2022-34169	openjdk-8@8u252-b09-1~16.04	8u342-b07-0ubuntu1~16.04
High	UBUNTU-CVE-2022-25236	expat@2.1.0-7ubuntu0.16.04.5	2.1.0-7ubuntu0.16.04.5+esm2
High	UBUNTU-CVE-2020-36222	openldap@2.4.42+dfsg-2ubuntu3.8	2.4.42+dfsg-2ubuntu3.12
High	UBUNTU-CVE-2020-36227	openldap@2.4.42+dfsg-2ubuntu3.8	2.4.42+dfsg-2ubuntu3.12
High	GHSA-ghgj-3xqr-6jfm	jetty-server@8.1.15.v20140411	9.2.9.v20150224
High	UBUNTU-CVE-2022-0778	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm2
High	GHSA-4wrc-f8pq-fpqp	spring-web@4.3.24.RELEASE	6.0.0
High	UBUNTU-CVE-2021-27212	openldap@2.4.42+dfsg-2ubuntu3.8	2.4.42+dfsg-2ubuntu3.13
High	UBUNTU-CVE-2023-22809	sudo@1.8.16-0ubuntu1.9	1.8.16-0ubuntu1.10+esm1
High	GHSA-4w82-r329-3q67	jackson-databind@2.3.3	2.6.7.4
High	UBUNTU-CVE-2023-0286	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm6
High	GHSA-g5vr-rgqm-vf78	spring-webmvc@4.3.24.RELEASE	no fix listed
High	UBUNTU-CVE-2024-2398	curl@7.47.0-1ubuntu2.14	7.47.0-1ubuntu2.19+esm12
High	GHSA-26vr-8j45-3r4w	jetty-server@8.1.15.v20140411	9.4.39
High	UBUNTU-CVE-2018-25032	zlib@1:1.2.8.dfsg-2ubuntu4.3	1:1.2.8.dfsg-2ubuntu4.3+esm1
High	UBUNTU-CVE-2021-23840	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.19
High	UBUNTU-CVE-2023-2650	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm9
High	GHSA-hfrx-6qgj-fp6c	commons-fileupload@1.3.3	1.5
High	UBUNTU-CVE-2021-3712	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm1
High	UBUNTU-CVE-2023-48795	openssh@1:7.2p2-4ubuntu2.8	1:7.2p2-4ubuntu2.10+esm5
High	GHSA-cggj-fvv3-cqwv	jackson-databind@2.3.3	2.6.7.5
High	GHSA-6x9x-8qw9-9pp6	jetty-server@8.1.15.v20140411	9.2.25.v20180606
High	GHSA-q93h-jc49-78gg	jackson-databind@2.3.3	2.7.9.7
High	GHSA-p43x-xfjf-5jhr	jackson-databind@2.3.3	2.7.9.7

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.3.4latest	5 years ago	3.2.7	2555390637	19,675

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dwardu-helm-charts/rundeck.svg)](https://charts.stackradar.io/charts/dwardu-helm-charts/rundeck)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.