StackRadar

management-portal 1.1.0 Helm chart

eclipse-aeriosVerified publisher

Scored 14 Sept 2026

aeriOS Management Portal

Version 1.1.0 11 days agoapp version 1.2.2 0Artifact Hub

management-portal 1.1.0 deploys 2 container images: eclipseaerios/management-portal-backend and eclipseaerios/management-portal-frontend. Across them, 283 findings3 critical, 5 high 1 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 10.1.19, fixed in 10.1.35.

Radar Score

3,8883576199

283 findings over 2 of 2 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
eclipseaerios/management-portal-backend1.2.235551372,852
eclipseaerios/management-portal-frontend1.2.20021621,036

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

65 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-cx7f-g6mp-7hqmspring-webmvc@6.1.46.1.13
MediumALPINE-CVE-2026-45447openssl@3.5.6-r03.5.7-r0
MediumGHSA-wm9w-rjj3-j356tomcat-embed-core@10.1.1910.1.25
MediumGHSA-gqp3-2cvr-x8m3tomcat-embed-core@10.1.1910.1.44
MediumGHSA-r29c-68gh-xp6xtomcat-embed-core@10.1.1910.1.55
MediumGHSA-hgjh-9rj2-g67jspring-web@6.1.46.1.5
MediumGHSA-ff77-26x5-69crtomcat-embed-core@10.1.1910.1.40
MediumGHSA-c4q5-6c82-3qpwspring-security-web@6.2.26.2.7
MediumGHSA-h6fc-48rj-7qqhtomcat-embed-core@10.1.1910.1.55
MediumALPINE-CVE-2026-19931curl@8.19.0-r08.22.0-r0
MediumGHSA-7jqf-v358-p8g7tomcat-embed-core@10.1.1910.1.25
MediumALPINE-CVE-2026-9079curl@8.19.0-r08.22.0-r0
MediumALPINE-CVE-2026-42010gnutls@3.8.11-r03.8.13-r0
MediumGHSA-4g8c-wm8x-jfhwnetty-handler@4.1.107.Final4.1.118.Final
MediumGHSA-wc4r-xq3c-5cf3tomcat-embed-core@10.1.1910.1.42
MediumALPINE-CVE-2026-63073openssl@3.5.6-r03.5.8-r0
MediumGHSA-wr62-c79q-cv37tomcat-embed-core@10.1.1910.1.43
MediumGHSA-5m62-pw8w-7w9ftomcat-embed-core@10.1.1910.1.55
MediumGHSA-25xr-qj8w-c4vftomcat-embed-core@10.1.1910.1.43
MediumALPINE-CVE-2026-10536curl@8.19.0-r08.22.0-r0
MediumGHSA-h2fw-rfh5-95r3tomcat-embed-core@10.1.1910.1.41
MediumGHSA-9xv2-5v5q-p794tomcat-embed-core@10.1.1910.1.58
MediumALPINE-CVE-2026-18924curl@8.19.0-r08.22.0-r0
MediumALPINE-CVE-2026-11856curl@8.19.0-r08.22.0-r0
MediumALPINE-CVE-2026-8925curl@8.19.0-r08.22.0-r0
MediumGHSA-2wrp-6fg6-hmc5spring-web@6.1.46.1.6
MediumALPINE-CVE-2026-18798openssl@3.5.6-r03.5.8-r0
MediumALPINE-CVE-2026-33845gnutls@3.8.11-r03.8.13-r0
MediumALPINE-CVE-2026-42009gnutls@3.8.11-r03.8.13-r0
MediumALPINE-CVE-2026-63076openssl@3.5.6-r03.5.8-r0
MediumALPINE-CVE-2026-1584gnutls@3.8.11-r03.8.12-r0
MediumGHSA-3qp7-7mw8-wx86netty-handler@4.1.107.Final4.1.135.Final
MediumALPINE-CVE-2026-33846gnutls@3.8.11-r03.8.13-r0
MediumGHSA-f3jh-qvm4-mg39spring-security-core@6.2.26.2.3
MediumALPINE-CVE-2026-25646libpng@1.6.54-r01.6.55-r0
MediumALPINE-CVE-2026-42764openssl@3.5.6-r03.5.7-r0
MediumALPINE-CVE-2026-2100p11-kit@0.25.5-r20.26.2-r0
MediumGHSA-h3x4-894j-xpx5tomcat-embed-core@10.1.1910.1.58
MediumGHSA-rmj7-2vxq-3g9fjackson-databind@2.15.42.18.8
MediumGHSA-j3rv-43j4-c7qmjackson-databind@2.15.42.18.8
MediumALPINE-CVE-2026-34182openssl@3.5.6-r03.5.7-r0
MediumGHSA-gcx9-497g-6cp6tomcat-embed-core@10.1.1910.1.58
MediumALPINE-CVE-2026-33416libpng@1.6.54-r01.6.56-r0
MediumALPINE-CVE-2026-34183openssl@3.5.6-r03.5.7-r0
MediumALPINE-CVE-2026-31790openssl@3.5.5-r03.5.6-r0
MediumALPINE-CVE-2026-34180openssl@3.5.6-r03.5.7-r0
MediumALPINE-CVE-2026-7383openssl@3.5.6-r03.5.7-r0
MediumALPINE-CVE-2026-8924curl@8.19.0-r08.22.0-r0
MediumGHSA-r936-gwx5-v52fspring-webmvc@6.1.4no fix listed
MediumGHSA-f6hv-jmp6-3vwvnetty-codec-http@4.1.107.Final4.1.133.Final

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.1.0latest11 days ago1.2.235761993,888

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/eclipse-aerios/management-portal.svg)](https://charts.stackradar.io/charts/eclipse-aerios/management-portal)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.