StackRadar

atlas-cmms 0.151.5 Helm chart

f3k-techVerified publisher

Scored 14 Sept 2026

CMMS Software Built to Make Managing Maintenance Easier

Version 0.151.5 2 months agoapp version v1.5.1 1Artifact Hub

atlas-cmms 0.151.5 deploys 4 container images: library/busybox, intelloop/atlas-cmms-backend, intelloop/atlas-cmms-frontend and lachlanevenson/k8s-kubectl. Across them, 304 findings5 critical, 16 high 2 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 10.1.19, fixed in 10.1.35.

Radar Score

5,291516110173

304 findings over 4 of 4 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
library/busybox×31.3600000
intelloop/atlas-cmms-backendv1.5.135571052,708
intelloop/atlas-cmms-frontendv1.5.1022040936
lachlanevenson/k8s-kubectlv1.22.162933281,647

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

290 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGHSA-fv25-8xcx-gqjctomcat-embed-core@10.1.1910.1.55
LowALPINE-CVE-2026-31789openssl@3.5.5-r03.5.6-r0
LowALPINE-CVE-2025-69419openssl@3.0.7-r03.0.19-r0
LowGHSA-23hv-mwm6-g8jftomcat-embed-core@10.1.1910.1.42
LowALPINE-CVE-2026-54874openssl@3.5.5-r03.5.8-r0
LowGHSA-563x-q5rq-57qptomcat-embed-core@10.1.1910.1.52
LowGHSA-7r86-cg39-jmmjminimatch@9.0.39.0.7
LowALPINE-CVE-2026-42766openssl@3.5.5-r03.5.7-r0
LowALPINE-CVE-2024-50602expat@2.6.2-r02.6.4-r0
LowGHSA-8qq5-rm4j-mr97tar@6.2.07.5.3
LowGHSA-h4h5-3hr4-j3g2protobuf-java@3.17.33.19.6
LowGHSA-mgp5-rv84-w37qtomcat-embed-core@10.1.1910.1.52
LowALPINE-CVE-2023-27538curl@7.86.0-r17.88.1-r1
LowGHSA-qv9r-c865-cp47log4j-api@2.21.12.25.5
LowALPINE-CVE-2026-63075openssl@3.5.5-r03.5.8-r0
LowGHSA-6xx3-rg99-gc3pbcprov-jdk15on@1.641.66
LowALPINE-CVE-2026-22184zlib@1.3.1-r21.3.2-r0
LowALPINE-CVE-2024-8096curl@8.5.0-r08.10.0-r0
LowGHSA-23c5-xmqv-rm74minimatch@9.0.39.0.7
LowGHSA-5mp6-jrq3-r938tomcat-embed-core@10.1.1910.1.55
LowGHSA-mh99-v99m-4gvgbrace-expansion@2.0.12.1.3
LowALPINE-CVE-2023-1255openssl@3.0.7-r03.0.8-r4
LowGHSA-jmp9-x22r-554xspring-core@6.1.4no fix listed
LowGHSA-rv64-5gf8-9qq8tomcat-embed-core@10.1.1910.1.54
LowGHSA-73rr-hh4g-fpgxdiff@5.1.05.2.2
LowGHSA-x4m4-345f-5h5gtomcat-embed-core@10.1.1910.1.54
LowGHSA-v435-xc8x-wvr9bcprov-jdk15on@1.641.78
LowGHSA-v435-xc8x-wvr9bcprov-jdk18on@1.771.78
LowGHSA-8x88-c5mf-7j5wtar@6.2.07.5.18
LowGHSA-fpj8-gq4v-p354tomcat-embed-core@10.1.1910.1.50
LowGHSA-hgrr-935x-pq79tomcat-embed-core@10.1.1910.1.47
LowGHSA-c3fc-8qff-9hwxbcprov-jdk18on@1.771.84
LowALPINE-CVE-2023-46219curl@7.86.0-r18.5.0-r0
LowALPINE-CVE-2024-4603openssl@3.0.7-r03.0.13-r0
LowGHSA-x23c-287f-qqv5spring-webmvc@6.1.4no fix listed
LowALPINE-CVE-2024-55549libxslt@1.1.39-r01.1.39-r1
LowALPINE-CVE-2025-24855libxslt@1.1.39-r01.1.39-r1
LowGHSA-xwmg-2g98-w7v9nimbus-jose-jwt@9.24.49.37.4
LowALPINE-CVE-2022-4203openssl@3.0.7-r03.0.8-r0
LowALPINE-CVE-2024-0853curl@7.86.0-r18.6.0-r0
LowGHSA-6r3c-xf4w-jxjmspring-web@6.1.46.1.21
LowGHSA-8xfc-gm6g-vgpvbcprov-jdk18on@1.771.78
LowGHSA-8xfc-gm6g-vgpvbcprov-jdk15on@1.641.78
LowALPINE-CVE-2026-75803openssl@3.5.5-r03.5.8-r0
LowGHSA-r6q2-hw4h-h46wtar@6.2.07.5.4
LowGHSA-rc42-6c7j-7h5rspring-boot@3.2.3no fix listed
LowGHSA-r292-9mhp-454mtar@6.2.07.5.21
LowGHSA-wg6q-6289-32hpbcpkix-jdk15on@1.641.84
LowGHSA-4h8f-2wvx-gg5wbcprov-jdk15on@1.641.78
LowGHSA-4h8f-2wvx-gg5wbcprov-jdk18on@1.771.78

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.151.5latest2 months agov1.5.15161101735,291

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/f3k-tech/atlas-cmms.svg)](https://charts.stackradar.io/charts/f3k-tech/atlas-cmms)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.