flyway 0.7.0 Helm chart
eosc-lot-1Verified publisherScored 14 Sept 2026
A Helm chart for applying database migrations with Flyway
Version 0.7.0 3 months agodeploys tag 9.15 0Artifact Hub
flyway 0.7.0 deploys 3 container images: alpine/git, library/busybox and flyway/flyway. Across them, 723 findings — 7 critical, 18 high — 2 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.17, fixed in 1.1.1f-1ubuntu2.fips.16.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
3 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| alpine/ | v2.49.1 | 0333136 | 1,897 |
| library/ | 1 | 0000 | 0 |
| flyway/ | 9.15 | 715120408 | 7,437 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
723 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | UBUNTU-CVE-2026-5260 | gnutls28 | 3.6.13-2ubuntu1.12+esm2 |
| Medium | GHSA-rm3j-f69w-wqmq | golang.org/ | 0.52.0 |
| Medium | UBUNTU-CVE-2023-4813 | glibc | 2.31-0ubuntu9.14 |
| Medium | UBUNTU-CVE-2025-0938 | python3.8 | 3.8.10-0ubuntu1~20.04.16 |
| Medium | ALPINE-CVE-2026-66046 | expat | 2.8.4-r0 |
| Medium | UBUNTU-CVE-2026-8927 | curl | 7.68.0-1ubuntu2.25+esm4 |
| Medium | UBUNTU-CVE-2023-27043 | python3.8 | 3.8.10-0ubuntu1~20.04.12 |
| Medium | UBUNTU-CVE-2026-42010 | gnutls28 | 3.6.13-2ubuntu1.12+esm2 |
| Medium | UBUNTU-CVE-2026-9669 | python3.8 | no fix listed |
| Medium | ALPINE-CVE-2026-28388 | openssl | 3.5.6-r0 |
| Medium | UBUNTU-CVE-2026-28388 | openssl | 1.1.1f-1ubuntu2.24+esm3 |
| Medium | UBUNTU-CVE-2023-28321 | curl | 7.68.0-1ubuntu2.19 |
| Medium | ALPINE-CVE-2025-69421 | openssl | 3.5.5-r0 |
| Medium | UBUNTU-CVE-2025-69421 | openssl | 1.1.1f-1ubuntu2.24+esm2 |
| Medium | GHSA-m494-w24q-6f7w | mssql-jdbc | 10.2.4.jre11 |
| Medium | UBUNTU-CVE-2023-1667 | libssh | 0.9.3-2ubuntu2.3 |
| Medium | ALPINE-CVE-2026-28387 | openssl | 3.5.6-r0 |
| Medium | UBUNTU-CVE-2026-28387 | openssl | 1.1.1f-1ubuntu2.24+esm3 |
| Medium | UBUNTU-CVE-2026-11940 | python3.8 | no fix listed |
| Medium | UBUNTU-CVE-2025-32988 | gnutls28 | 3.6.13-2ubuntu1.12+esm1 |
| Medium | UBUNTU-CVE-2021-46174 | binutils | 2.34-6ubuntu1.7 |
| Medium | GHSA-gvpg-vgmx-xg6w | nimbus-jose-jwt | 9.37.2 |
| Medium | ALPINE-CVE-2026-28389 | openssl | 3.5.6-r0 |
| Medium | ALPINE-CVE-2026-28390 | openssl | 3.5.6-r0 |
| Medium | UBUNTU-CVE-2026-28389 | openssl | 1.1.1f-1ubuntu2.24+esm3 |
| Medium | UBUNTU-CVE-2026-28390 | openssl | 1.1.1f-1ubuntu2.24+esm3 |
| Medium | UBUNTU-CVE-2026-33845 | gnutls28 | 3.6.13-2ubuntu1.12+esm2 |
| Medium | GHSA-5xp3-jfq3-5q8x | pip | 21.1 |
| Low | ALPINE-CVE-2025-69420 | openssl | 3.5.5-r0 |
| Low | UBUNTU-CVE-2025-69420 | openssl | 1.1.1f-1ubuntu2.24+esm2 |
| Low | UBUNTU-CVE-2026-57433 | perl | 5.30.0-9ubuntu0.5+esm3 |
| Low | PYSEC-2026-2132 | click | 8.3.3 |
| Low | UBUNTU-CVE-2026-25646 | libpng1.6 | 1.6.37-2ubuntu0.1~esm2 |
| Low | UBUNTU-CVE-2024-3651 | python-pip | 20.0.2-5ubuntu1.10+esm2 |
| Low | UBUNTU-CVE-2023-27535 | curl | 7.68.0-1ubuntu2.18 |
| Low | UBUNTU-CVE-2023-4806 | glibc | 2.31-0ubuntu9.14 |
| Low | UBUNTU-CVE-2024-0397 | python3.8 | 3.8.10-0ubuntu1~20.04.11 |
| Low | ALPINE-CVE-2026-27135 | nghttp2 | 1.68.1 |
| Low | UBUNTU-CVE-2026-27135 | nghttp2 | 1.40.0-1ubuntu0.3+esm1 |
| Low | UBUNTU-CVE-2026-13221 | perl | 5.30.0-9ubuntu0.5+esm3 |
| Low | UBUNTU-CVE-2026-42496 | perl | 5.30.0-9ubuntu0.5+esm2 |
| Low | UBUNTU-CVE-2026-33636 | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 |
| Low | UBUNTU-CVE-2023-27536 | curl | 7.68.0-1ubuntu2.18 |
| Low | GHSA-89gr-r52h-f8rx | golang.org/ | 0.52.0 |
| Low | UBUNTU-CVE-2024-37370 | krb5 | 1.17-6ubuntu4.6 |
| Low | UBUNTU-CVE-2023-38546 | curl | 7.68.0-1ubuntu2.20 |
| Low | GHSA-jppx-rxg9-jmrx | golang.org/ | 0.52.0 |
| Low | UBUNTU-CVE-2026-6100 | python3.8 | no fix listed |
| Low | ALPINE-CVE-2026-14456 | openssl | 3.5.8-r0 |
| Low | UBUNTU-CVE-2024-9287 | python3.8 | 3.8.10-0ubuntu1~20.04.16 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/eosc-lot-1/flyway)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.