management-portal Helm chart

Name: management-portal Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

eclipse-aerios

Scored 14 Sept 2026

aeriOS Management Portal

Latest 1.1.0 12 days agoapp version 1.2.2 0Artifact Hub

management-portal 1.1.0 deploys 2 container images: eclipseaerios/management-portal-backend and eclipseaerios/management-portal-frontend. Across them, 283 findings — 3 critical, 5 high — 1 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 10.1.19, fixed in 10.1.35.

Radar Score

3,8883576199

283 findings over 2 of 2 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
eclipseaerios/management-portal-backend	1.2.2	3555137	2,852
eclipseaerios/management-portal-frontend	1.2.2	002162	1,036

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

239 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-293q-567p-wmwq	spring-security-web@6.2.2	no fix listed
Low	GHSA-q3v6-hm2v-pw99	spring-security-core@6.2.2	6.2.8
Low	ALPINE-CVE-2026-45446	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-7009	curl@8.19.0-r0	8.20.0-r0
Low	GHSA-25qh-j22f-pwp8	logback-core@1.4.14	1.5.19
Low	ALPINE-CVE-2026-56412	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-3832	gnutls@3.8.11-r0	3.8.13-r0
Low	ALPINE-CVE-2026-50219	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56409	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-27171	zlib@1.3.1-r2	1.3.2-r0
Low	ALPINE-CVE-2026-32777	expat@2.7.4-r0	2.7.5-r0
Low	GHSA-hvcg-qmg6-jm4c	netty-codec-http@4.1.107.Final	4.1.135.Final
Low	ALPINE-CVE-2026-56132	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-40930	libpng@1.6.54-r0	1.6.58-r1
Low	GHSA-957g-f97v-vppc	spring-webmvc@6.1.4	no fix listed
Low	ALPINE-CVE-2026-42768	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-32778	expat@2.7.4-r0	2.7.5-r0
Low	GHSA-cjpg-rgq5-fr37	spring-webmvc@6.1.4	no fix listed
Low	ALPINE-CVE-2026-32776	expat@2.7.4-r0	2.7.5-r0
Low	ALPINE-CVE-2026-6042	musl@1.2.5-r21	1.2.5-r22
Low	ALPINE-CVE-2026-42770	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-7fch-4f2f-jcgm	spring-websocket@6.1.4	no fix listed
Low	ALPINE-CVE-2026-56131	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-5419	gnutls@3.8.11-r0	3.8.13-r0
Low	GHSA-q723-847q-5g8g	spring-websocket@6.1.4	no fix listed
Low	GHSA-9m89-8frq-c98c	tomcat-embed-core@10.1.19	10.1.55
Low	ALPINE-CVE-2026-34757	libpng@1.6.54-r0	1.6.57-r0
Low	GHSA-659m-px2c-25wj	spring-core@6.1.4	no fix listed
Low	GHSA-4wp7-92pw-q264	spring-context@6.1.4	6.1.20
Low	GHSA-h3qp-gqrc-q736	spring-webmvc@6.1.4	no fix listed
Low	ALPINE-CVE-2026-41080	expat@2.7.5-r0	2.8.1-r0
Low	GHSA-9f52-rjqv-25qv	spring-expression@6.1.4	no fix listed
Low	GHSA-w573-9ffj-6ff9	netty-transport-native-epoll@4.1.107.Final	4.1.135.Final
Low	GHSA-wg35-8jpf-2xv3	spring-webmvc@6.1.4	no fix listed
Low	GHSA-fghv-69vj-qj49	netty-codec-http@4.1.107.Final	4.1.125.Final
Low	GHSA-p47f-322f-whfh	logback-core@1.4.14	1.5.33
Low	GHSA-6v67-2wr5-gvf4	logback-core@1.4.14	1.5.13
Low	GHSA-6hcq-hmm3-jj3c	spring-webmvc@6.1.4	no fix listed
Low	GHSA-qqpg-mvqg-649v	logback-core@1.4.14	1.5.25

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.0latest	12 days ago	1.2.2	3576199	3,888

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/eclipse-aerios/management-portal.svg)](https://charts.stackradar.io/charts/eclipse-aerios/management-portal)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.