atlas-cmms Helm chart

Name: atlas-cmms Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

f3k-tech

Scored 13 Sept 2026

CMMS Software Built to Make Managing Maintenance Easier

Latest 0.151.5 2 months agoapp version v1.5.1 1Artifact Hub

atlas-cmms 0.151.5 deploys 4 container images: library/busybox, intelloop/atlas-cmms-backend, intelloop/atlas-cmms-frontend and lachlanevenson/k8s-kubectl. Across them, 304 findings — 5 critical, 16 high — 2 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 10.1.19, fixed in 10.1.35.

Radar Score

5,284516109174

304 findings over 4 of 4 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox×3	1.36	0000	0
intelloop/atlas-cmms-backend	v1.5.1	3557105	2,708
intelloop/atlas-cmms-frontend	v1.5.1	022040	936
lachlanevenson/k8s-kubectl	v1.22.16	293328	1,647

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

290 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-83qj-6fr2-vhqgKEV	tomcat-embed-core@10.1.19	10.1.35
Critical	ALPINE-CVE-2023-38545	curl@7.86.0-r1	8.4.0-r0
Critical	ALPINE-CVE-2023-44487KEV	nghttp2@1.51.0-r0	1.51.0-r2
Critical	GHSA-5j33-cvvr-w245	tomcat-embed-core@10.1.19	10.1.34
Critical	GHSA-3p2h-wqq4-wf4h	tomcat-embed-core@10.1.19	10.1.40
High	ALPINE-CVE-2025-15467	openssl@3.0.7-r0	3.0.19-r0
High	ALPINE-CVE-2024-6119	openssl@3.0.7-r0	3.0.15-r0
High	GHSA-wmwf-9ccg-fff5	tomcat-embed-core@10.1.19	10.1.45
High	GHSA-h3gc-qfqq-6h8f	tomcat-embed-core@10.1.19	10.1.42
High	ALPINE-CVE-2023-38039	curl@7.86.0-r1	8.3.0-r0
High	ALPINE-CVE-2023-0286	openssl@3.0.7-r0	3.0.8-r0
High	GHSA-g5vr-rgqm-vf78	spring-webmvc@6.1.4	6.1.14
High	ALPINE-CVE-2024-2398	curl@7.86.0-r1	8.7.1-r0
High	ALPINE-CVE-2023-2650	openssl@3.0.7-r0	3.0.9-r0
High	ALPINE-CVE-2024-2511	openssl@3.0.7-r0	3.0.12-r5
High	GHSA-vfww-5hm6-hx2j	tomcat-embed-core@10.1.19	10.1.45
High	ALPINE-CVE-2022-4450	openssl@3.0.7-r0	3.0.8-r0
High	GHSA-27hp-xhwr-wr2m	tomcat-embed-core@10.1.19	10.1.34
High	ALPINE-CVE-2022-43551	curl@7.86.0-r1	7.87.0-r0
Medium	GHSA-cx7f-g6mp-7hqm	spring-webmvc@6.1.4	6.1.13
Medium	ALPINE-CVE-2024-7264	curl@8.5.0-r0	8.9.1-r0
Medium	GHSA-2p57-rm9w-gvfp	ip@2.0.0	no fix listed
Medium	ALPINE-CVE-2024-5535	openssl@3.0.7-r0	3.0.14-r0
Medium	GHSA-qcj6-jqrg-4wp2	thymeleaf-spring5@3.0.11.RELEASE	3.0.13.RELEASE
Medium	ALPINE-CVE-2022-4304	openssl@3.0.7-r0	3.0.8-r0
Medium	ALPINE-CVE-2026-45447	openssl@3.5.5-r0	3.5.7-r0
Medium	GHSA-57j2-w4cx-62h2	jackson-databind@2.11.2	2.12.6.1
Medium	GHSA-wm9w-rjj3-j356	tomcat-embed-core@10.1.19	10.1.25
Medium	ALPINE-CVE-2023-0215	openssl@3.0.7-r0	3.0.8-r0
Medium	ALPINE-CVE-2024-6197	curl@7.86.0-r1	8.9.0-r0
Medium	ALPINE-CVE-2023-0464	openssl@3.0.7-r0	3.0.8-r1
Medium	ALPINE-CVE-2023-27534	curl@7.86.0-r1	7.88.1-r1
Medium	GHSA-gqp3-2cvr-x8m3	tomcat-embed-core@10.1.19	10.1.44
Medium	GHSA-r29c-68gh-xp6x	tomcat-embed-core@10.1.19	10.1.55
Medium	ALPINE-CVE-2023-5363	openssl@3.0.7-r0	3.0.12-r0
Medium	GHSA-98qh-xjc8-98pq	postgresql@42.6.1	42.7.11
Medium	GHSA-hgjh-9rj2-g67j	spring-web@6.1.4	6.1.5
Medium	ALPINE-CVE-2023-27533	curl@7.86.0-r1	7.88.1-r1
Medium	GHSA-ff77-26x5-69cr	tomcat-embed-core@10.1.19	10.1.40
Medium	GHSA-c4q5-6c82-3qpw	spring-security-web@6.2.2	6.2.7
Medium	ALPINE-CVE-2024-45492	expat@2.6.2-r0	2.6.3-r0
Medium	GHSA-5j98-mcp5-4vw2	glob@10.3.10	10.5.0
Medium	ALPINE-CVE-2024-4741	openssl@3.0.7-r0	3.0.14-r0
Medium	GHSA-jjjh-jjxp-wpff	jackson-databind@2.11.2	2.12.7.1
Medium	GHSA-rgv9-q543-rqg4	jackson-databind@2.11.2	2.12.7.1
Medium	GHSA-735f-pc8j-v9w8	protobuf-java@3.17.3	3.25.5
Medium	GHSA-h6fc-48rj-7qqh	tomcat-embed-core@10.1.19	10.1.55
Medium	GHSA-7jqf-v358-p8g7	tomcat-embed-core@10.1.19	10.1.25
Medium	ALPINE-CVE-2024-45491	expat@2.6.2-r0	2.6.3-r0
Medium	ALPINE-CVE-2023-28319	curl@7.86.0-r1	8.1.0-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.151.5latest	2 months ago	v1.5.1	516109174	5,284

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/f3k-tech/atlas-cmms.svg)](https://charts.stackradar.io/charts/f3k-tech/atlas-cmms)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.