spinnaker Helm chart

Name: spinnaker Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dwardu-helm-charts

Scored 14 Sept 2026

Open source, multi-cloud continuous delivery platform for releasing software changes with high velocity and confidence.

Latest 2.2.6 5 years agodeploys tag 5.0.7-debian-10-r0 1Artifact Hub

spinnaker 2.2.6 deploys 2 container images: bitnami/redis and gcr.io/spinnaker-marketplace/halyard. Across the 1 measured, 366 findings — 15 critical, 39 high — 9 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webmvc 5.2.3.RELEASE, fixed in 5.2.20.RELEASE.

Radar Score

8,7521539174138

366 findings over 1 of 2 images measured

KEV ×9 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
bitnami/redis	5.0.7-debian-10-r0	—	unmeasured
gcr.io/spinnaker-marketplace/halyard×4	1.32.0	1539174138	8,752

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

366 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-hr8g-6v94-x4m9	bcprov-ext-jdk15on@1.61	no fix listed
Low	GHSA-775g-4xr8-78h8	spring-expression@5.2.3.RELEASE	no fix listed
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.45.Final	4.1.136.Final
Low	ALPINE-CVE-2020-28928	musl@1.1.24-r0	1.1.24-r3
Low	GHSA-rfmp-97jj-h8m6	spring-core@5.2.3.RELEASE	5.2.18
Low	GHSA-x83m-pf6f-pf9g	hibernate-validator@6.0.18.Final	6.2.0.Final
Low	GHSA-6cqp-g7gg-8hr5	netty-codec-http@4.1.45.Final	4.1.136.Final
Low	GHSA-m4cv-j2px-7723	netty-codec-http@4.1.45.Final	4.1.133.Final
Low	GHSA-34jh-p97f-mpxf	urllib3@1.25.8	1.26.19
Low	GHSA-pr98-23f8-jwxv	logback-core@1.2.3	1.3.15
Low	ALPINE-CVE-2021-42374	busybox@1.31.1-r9	1.31.1-r11
Low	GHSA-jhq6-gfmj-v8fx	logback-core@1.2.3	1.5.34
Low	GHSA-4gc7-5j7h-4qph	spring-context@5.2.3.RELEASE	no fix listed
Low	GHSA-4gc7-5j7h-4qph	spring-web@5.2.3.RELEASE	no fix listed
Low	GHSA-c2gf-v879-257j	netty-codec-http2@4.1.45.Final	4.1.135.Final
Low	GHSA-hqvf-45jj-mccq	awscli@1.18.18	1.45.28
Low	GHSA-4g9r-vxhx-9pgx	commons-compress@1.19	1.26.0
Low	GHSA-84h7-rjj3-6jx4	netty-codec-http@4.1.45.Final	4.1.129.Final
Low	GHSA-c69g-56f8-xwqj	netty-codec-http2@4.1.45.Final	4.1.136.Final
Low	GHSA-72pg-x5f8-j25j	spring-webmvc@5.2.3.RELEASE	no fix listed
Low	GHSA-mq64-j8f9-9gcj	spring-webmvc@5.2.3.RELEASE	no fix listed
Low	GHSA-38f8-5428-x5cv	netty-codec-http@4.1.45.Final	4.1.133.Final
Low	GHSA-xq3w-v528-46rv	netty-common@4.1.45.Final	4.1.115.Final
Low	GHSA-6gf2-pvqw-37ph	spring-core@5.2.3.RELEASE	5.2.19
Low	GHSA-8c42-7qj2-3j46	netty-codec-http@4.1.45.Final	4.1.137.Final
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.10.2	2.18.8
Low	GHSA-pq67-6m6q-mj2v	urllib3@1.25.8	2.5.0
Low	GHSA-389x-839f-4rhx	netty-common@4.1.45.Final	4.1.118.Final
Low	GHSA-4mp9-239f-g9hg	netty-codec-http@4.1.45.Final	4.1.136.Final
Low	GHSA-3chg-m5w7-qfv5	spring-webmvc@5.2.3.RELEASE	no fix listed
Low	GHSA-jcwr-x25h-x5fh	plexus-utils@3.0.22	3.0.24
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.10.2	2.18.8
Low	GHSA-wxpp-56q6-5pcg	spring-expression@5.2.3.RELEASE	no fix listed
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.10.2	2.18.9
Low	GHSA-6p4f-wcwh-5vvm	spring-webmvc@5.2.3.RELEASE	no fix listed
Low	GHSA-qccp-gfcp-xxvc	urllib3@1.25.8	2.7.0
Low	GHSA-x2r2-rvhq-2mqv	spring-security-web@5.2.1.RELEASE	no fix listed
Low	GHSA-wwpq-f5c3-7hvx	spring-boot@2.2.4.RELEASE	no fix listed
Low	GHSA-gcjf-9mgh-3p7g	netty-codec-http@4.1.45.Final	4.1.136.Final
Low	GHSA-v8h7-rr48-vmmv	netty-codec-http@4.1.45.Final	4.1.133.Final
Low	GHSA-9cmq-m9j5-mvww	spring-expression@5.2.3.RELEASE	5.3.39
Low	GHSA-563q-j3cm-6jxm	netty-codec-http2@4.1.45.Final	4.1.135.Final
Low	GHSA-5x3r-wrvg-rp6q	netty-codec-http2@4.1.45.Final	4.1.135.Final
Low	GHSA-xpw8-rcwv-8f8p	netty-codec-http2@4.1.45.Final	4.1.100.Final
Low	GHSA-293q-567p-wmwq	spring-security-web@5.2.1.RELEASE	no fix listed
Low	GHSA-q3v6-hm2v-pw99	spring-security-core@5.2.1.RELEASE	5.7.14
Low	GHSA-7g45-4rm6-3mm3	guava@28.2-jre	32.0.0-android
Low	GHSA-g4mx-q9vg-27p4	urllib3@1.25.8	1.26.18
Low	GHSA-25qh-j22f-pwp8	logback-core@1.2.3	1.3.16
Low	GHSA-5mg8-w23w-74h3	guava@28.2-jre	32.0.0-android

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.2.6latest	5 years ago	5.0.7-debian-10-r0	1539174138	8,752

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dwardu-helm-charts/spinnaker.svg)](https://charts.stackradar.io/charts/dwardu-helm-charts/spinnaker)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.