spinnaker Helm chart

Name: spinnaker Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dwardu-helm-charts

Scored 14 Sept 2026

Open source, multi-cloud continuous delivery platform for releasing software changes with high velocity and confidence.

Latest 2.2.6 5 years agodeploys tag 5.0.7-debian-10-r0 1Artifact Hub

spinnaker 2.2.6 deploys 2 container images: bitnami/redis and gcr.io/spinnaker-marketplace/halyard. Across the 1 measured, 366 findings — 15 critical, 39 high — 9 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webmvc 5.2.3.RELEASE, fixed in 5.2.20.RELEASE.

Radar Score

8,7521539174138

366 findings over 1 of 2 images measured

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
bitnami/redis	5.0.7-debian-10-r0	—	unmeasured
gcr.io/spinnaker-marketplace/halyard×4	1.32.0	1539174138	8,752

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

366 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GHSA-56h3-78gp-v83r	jettison@1.3.7	1.5.1
Medium	GHSA-4p6w-m9wc-c9c9	ant@1.9.13	1.9.15
Medium	GHSA-gcx9-497g-6cp6	tomcat-embed-core@9.0.30	9.0.121
Medium	GHSA-prj3-ccx8-p6x4	netty-codec-http2@4.1.45.Final	4.1.124.Final
Medium	GHSA-5v34-g2px-j4fw	ant@1.9.13	1.9.16
Medium	GHSA-h46c-h94j-95f3	jackson-core@2.10.2	2.15.0
Medium	GHSA-2ppp-9496-p23q	spring-security-core@5.2.1.RELEASE	5.2.4
Medium	GHSA-q6g2-g7f3-rr83	jettison@1.3.7	1.5.4
Medium	GHSA-w37g-rhq8-7m4j	snakeyaml@1.25	1.32
Medium	GHSA-5mcr-gq6c-3hq2	netty-codec-http@4.1.45.Final	4.1.59.Final
Medium	GHSA-q5r4-cfpx-h6fh	ant@1.9.13	1.9.16
Medium	GHSA-f6hv-jmp6-3vwv	netty-codec-http@4.1.45.Final	4.1.133.Final
Medium	GHSA-f6hv-jmp6-3vwv	netty-codec-http2@4.1.45.Final	4.1.133.Final
Medium	GHSA-jppx-w49h-x2qq	netty-codec-http@4.1.45.Final	4.1.136.Final
Medium	GHSA-xf96-w227-r7c4	spring-boot-autoconfigure@2.2.4.RELEASE	2.5.15
Medium	GHSA-3cqm-mf7h-prrj	okhttp@3.14.6	4.9.2
Medium	GHSA-mf92-479x-3373	spring-security-web@5.2.1.RELEASE	no fix listed
Medium	GHSA-x4gw-5cx5-pgmh	netty-handler@4.1.45.Final	4.1.135.Final
Medium	GHSA-gx5v-xp9w-j4cg	tomcat-embed-core@9.0.30	9.0.118
Medium	GHSA-g5ww-5jh7-63cx	protobuf-java@3.9.1	3.16.3
Medium	GHSA-gp7f-rwcx-9369	jsoup@1.8.1	1.15.3
Medium	GHSA-wx54-3278-m5g4	spring-security-core@5.2.1.RELEASE	5.5.7
Medium	GHSA-264p-99wq-f4j6	ion-java@1.0.2	no fix listed
Medium	GHSA-gvpg-vgmx-xg6w	nimbus-jose-jwt@6.5.1	9.37.2
Medium	GHSA-rmrm-75hp-phr2	hibernate-validator@6.0.18.Final	6.0.20.Final
Medium	GHSA-xrx6-fmxq-rjj2	rsa@3.4.2	4.7
Medium	GHSA-jr27-m4p2-rc6r	pyasn1@0.4.8	0.6.3
Medium	ALPINE-CVE-2020-29362	p11-kit@0.23.18.1-r0	0.23.18.1-r1
Low	GHSA-g3pr-3p32-fp23	micrometer-core@1.3.2	no fix listed
Low	GHSA-vmq6-5m68-f53m	logback-core@1.2.3	1.2.13
Low	GHSA-vmq6-5m68-f53m	logback-classic@1.2.3	1.2.13
Low	GHSA-g8pj-r55q-5c2v	tomcat-embed-core@9.0.30	9.0.81
Low	GHSA-57rv-r2g8-2cj3	netty-codec-http@4.1.45.Final	4.1.133.Final
Low	GHSA-4gg5-vx3j-xwc7	protobuf-java@3.9.1	3.16.3
Low	GHSA-7v6m-28jr-rg84	hibernate-validator@6.0.18.Final	6.2.0.CR1
Low	GHSA-cm59-pr5q-cw85	spring-boot@2.2.4.RELEASE	2.2.11.RELEASE
Low	ALPINE-CVE-2021-22923	curl@7.67.0-r0	7.79.0-r0
Low	GHSA-6fmv-xxpf-w3cw	plexus-utils@3.0.22	3.6.1
Low	ALPINE-CVE-2020-14363	libx11@1.6.9-r0	1.6.12-r0
Low	GHSA-45r8-3495-x6rm	jinjava@2.2.3	2.4.6
Low	GHSA-pwqr-wmgm-9rr8	netty-codec-http@4.1.45.Final	4.1.132.Final
Low	GHSA-564r-hj7v-mcr5	spring-expression@5.2.3.RELEASE	5.2.23.RELEASE
Low	GHSA-45q3-82m4-75jr	netty-handler-proxy@4.1.45.Final	4.1.133.Final
Low	GHSA-3wrr-7qpf-2prh	jackson-databind@2.10.2	2.14.0
Low	GHSA-w33c-445m-f8w7	okio@1.17.2	1.17.6
Low	GHSA-vrpq-qp53-qv56	org.eclipse.jgit@5.4.2.201908231537-r	5.13.4.202507202350-r
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.45.Final	4.1.137.Final
Low	GHSA-mg83-c7gq-rv5c	spring-security-crypto@5.2.1.RELEASE	5.7.16
Low	GHSA-fv25-8xcx-gqjc	tomcat-embed-core@9.0.30	9.0.118
Low	GHSA-23hv-mwm6-g8jf	tomcat-embed-core@9.0.30	9.0.106

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.2.6latest	5 years ago	5.0.7-debian-10-r0	1539174138	8,752

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dwardu-helm-charts/spinnaker.svg)](https://charts.stackradar.io/charts/dwardu-helm-charts/spinnaker)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.