gerrit-operator Helm chart

Name: gerrit-operator Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

epmdedp

Scored 14 Sept 2026

A Helm chart for KubeRocketCI Gerrit Operator

Latest 2.25.0 1 month agoapp version 2.25.0 0Artifact Hub

gerrit-operator 2.25.0 deploys 2 container images: epamedp/edp-gerrit and epamedp/gerrit-operator. Across them, 91 findings — 0 critical, 2 high. The highest contribution is ALPINE-CVE-2018-18312 in perl 5.42.2-r0, fixed in 5.26.3-r0.

Radar Score

1,159022564

91 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
epamedp/edp-gerrit	3.14.2	022552	1,077
epamedp/gerrit-operator	2.25.0	00012	82

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

91 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2025-26519	musl@1.2.4-r2	1.2.4-r3
Low	ALPINE-CVE-2026-9080	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-9545	curl@8.20.0-r0	8.22.0-r0
Low	ALPINE-CVE-2026-11822	sqlite@3.51.2-r0	3.53.4-r0
Low	ALPINE-CVE-2026-11824	sqlite@3.51.2-r0	3.53.4-r0
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-rcqc-6cw3-h962	jackson-databind@2.21.1	2.21.4
Low	GHSA-5gvw-p9qm-jgwh	jackson-databind@2.21.1	2.21.5
Low	GHSA-3pjw-73gf-8qr5	jackson-databind@2.21.1	2.21.4
Low	GHSA-9fxm-vc8v-hj55	jackson-databind@2.21.1	2.21.4
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.21.1	2.21.4
Low	GHSA-5hh8-q8hv-fr38	jackson-databind@2.21.1	2.21.4
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.21.1	2.21.4
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.21.1	2.21.5
Low	ALPINE-CVE-2026-76957	expat@2.8.1-r0	2.8.4-r0
Low	ALPINE-CVE-2026-56403	expat@2.8.1-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56404	expat@2.8.1-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56405	expat@2.8.1-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56408	expat@2.8.1-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56406	expat@2.8.1-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56407	expat@2.8.1-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56410	expat@2.8.1-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56411	expat@2.8.1-r0	2.8.2-r0
Low	GO-2026-5026	stdlib@go1.25.12	1.25.13
Low	ALPINE-CVE-2026-56412	expat@2.8.1-r0	2.8.2-r0
Low	ALPINE-CVE-2026-50219	expat@2.8.1-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56409	expat@2.8.1-r0	2.8.2-r0
Low	GO-2026-5972	stdlib@go1.25.12	1.25.13
Low	GO-2026-6088	stdlib@go1.25.12	1.25.13
Low	GO-2026-6089	stdlib@go1.25.12	1.25.13
Low	GO-2026-6090	stdlib@go1.25.12	1.25.13
Low	ALPINE-CVE-2026-56132	expat@2.8.1-r0	2.8.2-r0
Low	GO-2026-6218	stdlib@go1.25.12	1.25.13
Low	GHSA-mhm7-754m-9p8w	jackson-databind@2.21.1	2.21.5
Low	GO-2026-6355	golang.org/x/crypto@v0.53.0	0.56.0
Low	ALPINE-CVE-2026-56131	expat@2.8.1-r0	2.8.2-r0
Low	GO-2026-6303	golang.org/x/crypto@v0.53.0	0.55.0
Low	GO-2026-6354	golang.org/x/crypto@v0.53.0	0.56.0
Low	GO-2026-6091	stdlib@go1.25.12	1.25.13
Low	GHSA-pmhh-3w7g-xqp8	jsoup@1.14.3	1.23.1
Low	GO-2026-5932	golang.org/x/crypto@v0.53.0	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.25.0latest	1 month ago	2.25.0	022564	1,159

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/epmdedp/gerrit-operator.svg)](https://charts.stackradar.io/charts/epmdedp/gerrit-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.