gerrit-operator Helm chart

Name: gerrit-operator Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

epmdedp

Scored 14 Sept 2026

A Helm chart for KubeRocketCI Gerrit Operator

Latest 2.25.0 1 month agoapp version 2.25.0 0Artifact Hub

gerrit-operator 2.25.0 deploys 2 container images: epamedp/edp-gerrit and epamedp/gerrit-operator. Across them, 91 findings — 0 critical, 2 high. The highest contribution is ALPINE-CVE-2018-18312 in perl 5.42.2-r0, fixed in 5.26.3-r0.

Radar Score

1,159022564

91 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
epamedp/edp-gerrit	3.14.2	022552	1,077
epamedp/gerrit-operator	2.25.0	00012	82

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

91 distinct across the version’s images

Severity	Advisory	Package	Fixed in
High	ALPINE-CVE-2018-18312	perl@5.42.2-r0	5.26.3-r0
High	ALPINE-CVE-2018-18311	perl@5.42.2-r0	5.26.3-r0
Medium	ALPINE-CVE-2026-19931	curl@8.20.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-9079	curl@8.20.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-63073	openssl@3.5.7-r0	3.5.8-r0
Medium	GHSA-vf5j-865m-mq7c	mina-core@2.2.4	2.2.7
Medium	ALPINE-CVE-2026-10536	curl@8.20.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-18924	curl@8.20.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-11856	curl@8.20.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-8925	curl@8.20.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-18798	openssl@3.5.7-r0	3.5.8-r0
Medium	GHSA-995c-6rp3-4m4x	mina-core@2.2.4	2.2.7
Medium	GHSA-8297-v2rf-2p32	mina-core@2.2.4	2.2.6
Medium	GHSA-cgp8-4m63-fhh5	commons-net@3.6	3.9.0
Medium	ALPINE-CVE-2026-63076	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-2100	p11-kit@0.25.5-r2	0.26.2-r0
Medium	GHSA-rmj7-2vxq-3g9f	jackson-databind@2.21.1	2.21.4
Medium	GHSA-v3pr-hxpr-mfm8	mina-core@2.2.4	2.2.8
Medium	GHSA-j3rv-43j4-c7qm	jackson-databind@2.21.1	2.21.4
Medium	ALPINE-CVE-2026-8924	curl@8.20.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-14457	openssl@3.5.7-r0	3.5.8-r0
Medium	GHSA-f2wh-grmh-r6jm	mina-core@2.2.4	2.2.6
Medium	ALPINE-CVE-2026-80231	curl@8.20.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-66046	expat@2.8.1-r0	2.8.4-r0
Medium	ALPINE-CVE-2026-80229	curl@8.20.0-r0	8.22.0-r0
Medium	ALPINE-CVE-2026-8927	curl@8.20.0-r0	8.22.0-r0
Medium	GHSA-gp7f-rwcx-9369	jsoup@1.14.3	1.15.3
Low	ALPINE-CVE-2026-8926	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-11352	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-82209	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-80255	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-11564	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-13608	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-63072	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-11586	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-80230	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-76641	expat@2.8.1-r0	2.8.4-r0
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-9546	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-82208	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-12064	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-8932	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-8286	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-jw7r-rxff-gv24	apache-mime4j-core@0.8.1	0.8.10
Low	ALPINE-CVE-2026-8458	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-9547	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-76956	expat@2.8.1-r0	2.8.4-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.25.0latest	1 month ago	2.25.0	022564	1,159

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/epmdedp/gerrit-operator.svg)](https://charts.stackradar.io/charts/epmdedp/gerrit-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.