flyway Helm chart

Name: flyway Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

eosc-lot-1

Scored 14 Sept 2026

A Helm chart for applying database migrations with Flyway

Latest 0.7.0 3 months agodeploys tag 9.15 0Artifact Hub

flyway 0.7.0 deploys 3 container images: alpine/git, library/busybox and flyway/flyway. Across them, 723 findings — 7 critical, 18 high — 2 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.17, fixed in 1.1.1f-1ubuntu2.fips.16.

Radar Score

9,334718153544

723 findings over 3 of 3 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
alpine/git	v2.49.1	0333136	1,897
library/busybox	1	0000	0
flyway/flyway	9.15	715120408	7,437

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

544 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-3783	curl@7.68.0-1ubuntu2.16	7.68.0-1ubuntu2.25+esm3
Low	UBUNTU-CVE-2026-4873	curl@7.68.0-1ubuntu2.16	no fix listed
Low	UBUNTU-CVE-2023-39804	tar@1.30+dfsg-7ubuntu0.20.04.3	1.30+dfsg-7ubuntu0.20.04.4
Low	UBUNTU-CVE-2022-47011	binutils@2.34-6ubuntu1.4	2.34-6ubuntu1.8
Low	UBUNTU-CVE-2026-34743	xz-utils@5.2.4-1ubuntu1.1	5.2.4-1ubuntu1.1+esm1
Low	UBUNTU-CVE-2022-47008	binutils@2.34-6ubuntu1.4	2.34-6ubuntu1.8
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.13.4	2.18.8
Low	UBUNTU-CVE-2026-54411	pam@1.3.1-5ubuntu4.6	no fix listed
Low	UBUNTU-CVE-2026-84366	python3.8@3.8.10-0ubuntu1~20.04.6	no fix listed
Low	UBUNTU-CVE-2026-25210	expat@2.2.9-1ubuntu0.6	2.2.9-1ubuntu0.8+esm1
Low	UBUNTU-CVE-2022-35205	binutils@2.34-6ubuntu1.4	2.34-6ubuntu1.7
Low	UBUNTU-CVE-2023-25585	binutils@2.34-6ubuntu1.4	2.34-6ubuntu1.5
Low	UBUNTU-CVE-2023-25588	binutils@2.34-6ubuntu1.4	2.34-6ubuntu1.5
Low	UBUNTU-CVE-2026-19487	perl@5.30.0-9ubuntu0.3	5.30.0-9ubuntu0.5+esm4
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.43.0	0.52.0
Low	UBUNTU-CVE-2026-45409	python-pip@20.0.2-5ubuntu1.8	no fix listed
Low	UBUNTU-CVE-2024-35195	python-pip@20.0.2-5ubuntu1.8	no fix listed
Low	ALPINE-CVE-2026-42769	openssl@3.5.4-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-3442	binutils@2.34-6ubuntu1.4	no fix listed
Low	UBUNTU-CVE-2026-78408	util-linux@2.34-0.1ubuntu9.3	no fix listed
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.13.4.2	2.18.8
Low	UBUNTU-CVE-2026-54369	acl@2.2.53-6	no fix listed
Low	UBUNTU-CVE-2026-41989	libgcrypt20@1.8.5-5ubuntu1.1	no fix listed
Low	UBUNTU-CVE-2024-11053	curl@7.68.0-1ubuntu2.16	7.68.0-1ubuntu2.25
Low	UBUNTU-CVE-2025-5372	libssh@0.9.3-2ubuntu2.2	no fix listed
Low	UBUNTU-CVE-2026-13595	util-linux@2.34-0.1ubuntu9.3	no fix listed
Low	UBUNTU-CVE-2025-66866	binutils@2.34-6ubuntu1.4	no fix listed
Low	UBUNTU-CVE-2026-54371	attr@1:2.4.48-5	1:2.4.48-5ubuntu0.1~esm1
Low	GO-2026-4981	stdlib@go1.24.8	1.25.10
Low	UBUNTU-CVE-2026-6019	python3.8@3.8.10-0ubuntu1~20.04.6	3.8.10-0ubuntu1~20.04.18+esm7
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.13.4.2	2.18.9
Low	GO-2026-4977	stdlib@go1.24.8	1.25.10
Low	UBUNTU-CVE-2026-0964	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm3
Low	ALPINE-CVE-2026-76957	expat@2.7.3-r0	2.8.4-r0
Low	UBUNTU-CVE-2026-59848	libssh@0.9.3-2ubuntu2.2	no fix listed
Low	ALPINE-CVE-2025-68973	gnupg@2.4.7-r0	2.4.9-r0
Low	UBUNTU-CVE-2026-16599	wget@1.20.3-1ubuntu2	no fix listed
Low	GO-2026-4986	stdlib@go1.24.8	1.25.10
Low	UBUNTU-CVE-2026-5704	tar@1.30+dfsg-7ubuntu0.20.04.3	1.30+dfsg-7ubuntu0.20.04.4+esm3
Low	GO-2026-4918	stdlib@go1.24.8	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.45.0	0.53.0
Low	GO-2026-4337	stdlib@go1.24.8	1.24.13
Low	UBUNTU-CVE-2023-6004	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5
Low	UBUNTU-CVE-2026-44431	python-pip@20.0.2-5ubuntu1.8	no fix listed
Low	GO-2026-4601	stdlib@go1.24.8	1.25.8
Low	UBUNTU-CVE-2026-72522	expat@2.2.9-1ubuntu0.6	no fix listed
Low	UBUNTU-CVE-2026-22695	libpng1.6@1.6.37-2	1.6.37-2ubuntu0.1~esm2
Low	ALPINE-CVE-2026-56403	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56404	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56405	expat@2.7.3-r0	2.8.2-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.7.0latest	3 months ago	9.15	718153544	9,334

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/eosc-lot-1/flyway.svg)](https://charts.stackradar.io/charts/eosc-lot-1/flyway)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.