flyway Helm chart

Name: flyway Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

eosc-lot-1

Scored 14 Sept 2026

A Helm chart for applying database migrations with Flyway

Latest 0.7.0 3 months agodeploys tag 9.15 0Artifact Hub

flyway 0.7.0 deploys 3 container images: alpine/git, library/busybox and flyway/flyway. Across them, 723 findings — 7 critical, 18 high — 2 on CISA KEV. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.1.1f-1ubuntu2.17, fixed in 1.1.1f-1ubuntu2.fips.16.

Radar Score

9,334718153544

723 findings over 3 of 3 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
alpine/git	v2.49.1	0333136	1,897
library/busybox	1	0000	0
flyway/flyway	9.15	715120408	7,437

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

723 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-42015	gnutls28@3.6.13-2ubuntu1.8	3.6.13-2ubuntu1.12+esm3
Low	UBUNTU-CVE-2025-11468	python3.8@3.8.10-0ubuntu1~20.04.6	3.8.10-0ubuntu1~20.04.18+esm5
Low	UBUNTU-CVE-2024-28834	gnutls28@3.6.13-2ubuntu1.8	3.6.13-2ubuntu1.11
Low	UBUNTU-CVE-2022-48065	binutils@2.34-6ubuntu1.4	2.34-6ubuntu1.9
Low	UBUNTU-CVE-2026-1502	python3.8@3.8.10-0ubuntu1~20.04.6	no fix listed
Low	UBUNTU-CVE-2026-4786	python3.8@3.8.10-0ubuntu1~20.04.6	no fix listed
Low	GHSA-jqhc-m2j3-fjrx	sqlfluff@1.2.1	2.1.2
Low	UBUNTU-CVE-2025-40909	perl@5.30.0-9ubuntu0.3	no fix listed
Low	UBUNTU-CVE-2026-19672	python3.8@3.8.10-0ubuntu1~20.04.6	no fix listed
Low	UBUNTU-CVE-2022-48064	binutils@2.34-6ubuntu1.4	no fix listed
Low	UBUNTU-CVE-2026-48961	perl@5.30.0-9ubuntu0.3	no fix listed
Low	UBUNTU-CVE-2026-0865	python3.8@3.8.10-0ubuntu1~20.04.6	3.8.10-0ubuntu1~20.04.18+esm5
Low	ALPINE-CVE-2026-63074	openssl@3.5.4-r0	3.5.8-r0
Low	UBUNTU-CVE-2025-14524	curl@7.68.0-1ubuntu2.16	no fix listed
Low	ALPINE-CVE-2025-14831	gnutls@3.8.8-r0	3.8.12-r0
Low	UBUNTU-CVE-2025-14831	gnutls28@3.6.13-2ubuntu1.8	3.6.13-2ubuntu1.12+esm2
Low	UBUNTU-CVE-2026-6238	glibc@2.31-0ubuntu9.9	no fix listed
Low	UBUNTU-CVE-2024-37891	python-pip@20.0.2-5ubuntu1.8	20.0.2-5ubuntu1.11
Low	GHSA-4xh5-x5gv-qwph	pip@20.0.2	25.3
Low	UBUNTU-CVE-2025-8869	python-pip@20.0.2-5ubuntu1.8	no fix listed
Low	ALPINE-CVE-2026-34181	openssl@3.5.4-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-3731	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4
Low	UBUNTU-CVE-2026-8328	python3.8@3.8.10-0ubuntu1~20.04.6	no fix listed
Low	UBUNTU-CVE-2025-0840	binutils@2.34-6ubuntu1.4	2.34-6ubuntu1.10
Low	ALPINE-CVE-2026-25210	expat@2.7.3-r0	2.7.4-r0
Low	UBUNTU-CVE-2025-65018	libpng1.6@1.6.37-2	1.6.37-2ubuntu0.1~esm1
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.43.0	0.52.0
Low	UBUNTU-CVE-2026-5435	glibc@2.31-0ubuntu9.9	no fix listed
Low	GHSA-h35f-9h28-mq5c	setuptools@45.2.0	83.0.0
Low	UBUNTU-CVE-2026-59890	setuptools@45.2.0-1ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2026-0672	python3.8@3.8.10-0ubuntu1~20.04.6	3.8.10-0ubuntu1~20.04.18+esm5
Low	UBUNTU-CVE-2025-1181	binutils@2.34-6ubuntu1.4	2.34-6ubuntu1.11+esm1
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.45.0	0.55.0
Low	UBUNTU-CVE-2026-7017	perl@5.30.0-9ubuntu0.3	no fix listed
Low	ALPINE-CVE-2026-40200	musl@1.2.5-r10	1.2.5-r12
Low	UBUNTU-CVE-2026-15806	python3.8@3.8.10-0ubuntu1~20.04.6	no fix listed
Low	ALPINE-CVE-2025-62408	c-ares@1.34.5-r0	1.34.6-r0
Low	GHSA-mrwq-x4v8-fh7p	pygments@2.14.0	2.15.0
Low	ALPINE-CVE-2025-66199	openssl@3.5.4-r0	3.5.5-r0
Low	UBUNTU-CVE-2025-0395	glibc@2.31-0ubuntu9.9	2.31-0ubuntu9.17
Low	UBUNTU-CVE-2025-1176	binutils@2.34-6ubuntu1.4	2.34-6ubuntu1.11
Low	UBUNTU-CVE-2023-4039	gcc-10@10.3.0-1ubuntu1~20.04	10.5.0-1ubuntu1~20.04.1+esm1
Low	UBUNTU-CVE-2023-4039	gcc-9@9.4.0-1ubuntu1~20.04.1	no fix listed
Low	UBUNTU-CVE-2026-76642	util-linux@2.34-0.1ubuntu9.3	no fix listed
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.43.0	0.45.0
Low	UBUNTU-CVE-2026-11822	sqlite3@3.31.1-4ubuntu0.5	no fix listed
Low	UBUNTU-CVE-2026-11824	sqlite3@3.31.1-4ubuntu0.5	no fix listed
Low	UBUNTU-CVE-2022-48063	binutils@2.34-6ubuntu1.4	2.34-6ubuntu1.9
Low	UBUNTU-CVE-2025-4598	systemd@245.4-4ubuntu3.19	245.4-4ubuntu3.24+esm1
Low	UBUNTU-CVE-2026-6846	binutils@2.34-6ubuntu1.4	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.7.0latest	3 months ago	9.15	718153544	9,334

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/eosc-lot-1/flyway.svg)](https://charts.stackradar.io/charts/eosc-lot-1/flyway)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.