StackRadar

elk-stack 1.0.2 Helm chart

elk-stack-test

Scored 14 Sept 2026

A complete ELK Stack (Elasticsearch, Logstash, Kibana) with Filebeat and APM Server

Version 1.0.2 1 year agoapp version 9.1.3 0Artifact Hub

elk-stack 1.0.2 deploys 9 container images: docker.elastic.co/beats/filebeat, docker.elastic.co/apm/apm-server, library/node, library/busybox and 5 more. Across the 5 measured, 266 findings3 critical, 1 high. The highest contribution is RHSA-2026:1473 in openssl 1:3.2.2-6.el9_5.1, fixed in 1:3.5.1-7.el9_7.

Radar Score

2,9423129231

266 findings over 5 of 9 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

9 images
ImageTagVulnerabilitiesRadar Score
docker.elastic.co/beats/filebeat8.18.6unmeasured
docker.elastic.co/apm/apm-server9.1.3unmeasured
library/node18-alpine011241681
library/busybox×3latest00000
docker.elastic.co/elasticsearch/elasticsearch9.1.3unmeasured
docker.elastic.co/kibana/kibana9.1.3unmeasured
library/logstash9.1.230171902,261
alpine/openssllatest00000
curlimages/curllatest00000

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

266 distinct across the version’s images
SeverityAdvisoryPackageFixed in
CriticalRHSA-2026:1473openssl@1:3.2.2-6.el9_5.11:3.5.1-7.el9_7
CriticalRHSA-2026:1503openssl@1:3.2.2-6.el9_5.11:3.2.2-7.el9_6.2
CriticalRHSA-2025:20936sqlite@3.34.1-8.el9_60:3.34.1-9.el9_7
HighALPINE-CVE-2025-15467openssl@3.3.3-r03.3.6-r0
MediumRHSA-2026:25239openssl@1:3.2.2-6.el9_5.11:3.5.5-4.el9_8
MediumGHSA-5j98-mcp5-4vw2glob@10.4.210.5.0
MediumRHSA-2026:20612gnutls@3.8.3-6.el90:3.8.10-4.el9_8
MediumRHSA-2026:30004gnutls@3.8.3-6.el90:3.8.3-6.el9_6.4
MediumALPINE-CVE-2025-9230openssl@3.3.3-r03.3.5-r0
MediumALPINE-CVE-2025-9231openssl@3.3.3-r03.3.5-r0
MediumGHSA-q339-8rmv-2mhverb@2.2.34.0.3.1
MediumGHSA-3qp7-7mw8-wx86netty-handler@4.1.118.Final4.1.135.Final
MediumRHSA-2026:8510libarchive@3.5.3-6.el9_60:3.5.3-9.el9_7
MediumRHSA-2026:8866libarchive@3.5.3-6.el9_60:3.5.3-7.el9_6.1
MediumGHSA-rmj7-2vxq-3g9fjackson-databind@2.16.22.18.8
MediumGHSA-j3rv-43j4-c7qmjackson-databind@2.16.22.18.8
MediumALPINE-CVE-2026-31790openssl@3.3.3-r03.3.7-r0
MediumGHSA-f6hv-jmp6-3vwvnetty-codec-http@4.1.118.Final4.1.133.Final
MediumALPINE-CVE-2025-9232openssl@3.3.3-r03.3.5-r0
MediumGHSA-jppx-w49h-x2qqnetty-codec-http@4.1.118.Final4.1.136.Final
MediumGHSA-p543-xpfm-54cprack@3.1.163.1.17
MediumGHSA-wpv5-97wm-hp9crack@3.1.163.1.17
MediumRHSA-2026:28254libxml2@2.9.13-12.el9_60:2.9.13-14.el9_8.1
MediumALPINE-CVE-2026-28388openssl@3.3.3-r03.3.7-r0
MediumALPINE-CVE-2025-69421openssl@3.3.3-r03.3.6-r0
MediumGHSA-3xgq-45jj-v275cross-spawn@7.0.37.0.5
MediumGHSA-x4gw-5cx5-pgmhnetty-handler@4.1.118.Final4.1.135.Final
MediumALPINE-CVE-2026-28387openssl@3.3.3-r03.3.7-r0
MediumRHSA-2025:16116gnutls@3.8.3-6.el90:3.8.3-6.el9_6.2
MediumGHSA-3ppc-4f35-3m26minimatch@9.0.59.0.6
MediumALPINE-CVE-2026-28389openssl@3.3.3-r03.3.7-r0
MediumALPINE-CVE-2026-28390openssl@3.3.3-r03.3.7-r0
MediumRHSA-2026:22312openssl@1:3.2.2-6.el9_5.11:3.5.5-3.el9_8
LowALPINE-CVE-2025-69420openssl@3.3.3-r03.3.6-r0
LowRHSA-2026:2786glibc@2.34-168.el9_6.230:2.34-231.el9_7.10
LowRHSA-2026:7668nghttp2@1.43.0-6.el90:1.43.0-6.el9_7.1
LowGHSA-3pxv-7cmr-fjr4log4j-core@2.17.22.25.4
LowGHSA-34x7-hfp2-rc4vtar@6.2.17.5.7
LowGHSA-57rv-r2g8-2cj3netty-codec-http@4.1.118.Final4.1.133.Final
LowRHSA-2026:5080libarchive@3.5.3-6.el9_60:3.5.3-7.el9_7
LowGHSA-5qcv-4rpc-jp93kafka-clients@3.9.13.9.2
LowGHSA-h8w8-99g7-qmvjconcurrent-ruby@1.1.91.3.7
LowGHSA-mxw3-3hh2-x2mhrack@3.1.163.1.20
LowGHSA-68mj-5wr7-6fggamqp-client@5.25.05.33.1
LowGHSA-6xw4-3v39-52mmrack@3.1.163.1.18
LowRHSA-2025:21174openssl@1:3.2.2-6.el9_5.11:3.2.2-7.el9_6.1
LowGHSA-pwqr-wmgm-9rr8netty-codec-http@4.1.118.Final4.1.132.Final
LowGHSA-qpgp-93vx-g8v8puma@6.6.17.2.1
LowGHSA-rgw5-rvv9-x895brace-expansion@2.0.12.1.4
LowGHSA-93j5-89vc-pph4amqp-client@5.25.05.33.1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.2latest1 year ago9.1.331292312,942

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/elk-stack-test/elk-stack.svg)](https://charts.stackradar.io/charts/elk-stack-test/elk-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.