StackRadar

atlas-cmms Helm chart

f3k-techVerified publisher

Scored 14 Sept 2026

CMMS Software Built to Make Managing Maintenance Easier

Latest 0.151.5 2 months agoapp version v1.5.1 1Artifact Hub

atlas-cmms 0.151.5 deploys 4 container images: library/busybox, intelloop/atlas-cmms-backend, intelloop/atlas-cmms-frontend and lachlanevenson/k8s-kubectl. Across them, 304 findings5 critical, 16 high 2 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 10.1.19, fixed in 10.1.35.

Radar Score

5,291516110173

304 findings over 4 of 4 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
library/busybox×31.3600000
intelloop/atlas-cmms-backendv1.5.135571052,708
intelloop/atlas-cmms-frontendv1.5.1022040936
lachlanevenson/k8s-kubectlv1.22.162933281,647

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

166 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowALPINE-CVE-2025-69420openssl@3.0.7-r03.0.19-r0
LowGHSA-g3pr-3p32-fp23micrometer-core@1.12.3no fix listed
LowALPINE-CVE-2023-27535curl@7.86.0-r17.88.1-r1
LowGHSA-9342-92gg-6v29smtp@2.0.22.0.4
LowGHSA-h7rh-xfpj-hpcmminio@8.5.178.6.0
LowALPINE-CVE-2023-27536curl@7.86.0-r17.88.1-r1
LowALPINE-CVE-2023-38546curl@7.86.0-r18.4.0-r0
LowGHSA-c9ph-gxww-7744thymeleaf-spring5@3.0.11.RELEASE3.1.5.RELEASE
LowGHSA-c9ph-gxww-7744thymeleaf@3.0.11.RELEASE3.1.5.RELEASE
LowALPINE-CVE-2026-14456openssl@3.5.5-r03.5.8-r0
LowGHSA-34x7-hfp2-rc4vtar@6.2.07.5.7
LowGHSA-4gg5-vx3j-xwc7protobuf-java@3.17.33.19.6
LowALPINE-CVE-2026-9076openssl@3.5.5-r03.5.7-r0
LowGHSA-rgw5-rvv9-x895brace-expansion@2.0.12.1.4
LowGHSA-3wrr-7qpf-2prhjackson-databind@2.11.22.14.0
LowALPINE-CVE-2026-63072openssl@3.5.5-r03.5.8-r0
LowGHSA-f5x3-32g6-xq36tar@6.2.06.2.1
LowALPINE-CVE-2026-45445openssl@3.5.5-r03.5.7-r0
LowGHSA-574f-3g2m-x479bcprov-jdk18on@1.771.80.2
LowGHSA-pq2g-wx69-c263json-smart@2.5.02.5.2
LowGHSA-qffp-2rhf-9h96tar@6.2.07.5.10
LowALPINE-CVE-2023-0466openssl@3.0.7-r03.0.8-r3
LowGHSA-mg83-c7gq-rv5cspring-security-crypto@6.2.26.2.10
LowALPINE-CVE-2023-23915curl@7.86.0-r17.87.0-r2
LowALPINE-CVE-2023-0465openssl@3.0.7-r03.0.8-r2
LowGHSA-23hp-3jrh-7fpwtar@6.2.07.5.19
LowGHSA-fv25-8xcx-gqjctomcat-embed-core@10.1.1910.1.55
LowALPINE-CVE-2026-31789openssl@3.5.5-r03.5.6-r0
LowALPINE-CVE-2025-69419openssl@3.0.7-r03.0.19-r0
LowGHSA-23hv-mwm6-g8jftomcat-embed-core@10.1.1910.1.42
LowALPINE-CVE-2026-54874openssl@3.5.5-r03.5.8-r0
LowGHSA-563x-q5rq-57qptomcat-embed-core@10.1.1910.1.52
LowGHSA-7r86-cg39-jmmjminimatch@9.0.39.0.7
LowALPINE-CVE-2026-42766openssl@3.5.5-r03.5.7-r0
LowALPINE-CVE-2024-50602expat@2.6.2-r02.6.4-r0
LowGHSA-8qq5-rm4j-mr97tar@6.2.07.5.3
LowGHSA-h4h5-3hr4-j3g2protobuf-java@3.17.33.19.6
LowGHSA-mgp5-rv84-w37qtomcat-embed-core@10.1.1910.1.52
LowALPINE-CVE-2023-27538curl@7.86.0-r17.88.1-r1
LowGHSA-qv9r-c865-cp47log4j-api@2.21.12.25.5
LowALPINE-CVE-2026-63075openssl@3.5.5-r03.5.8-r0
LowGHSA-6xx3-rg99-gc3pbcprov-jdk15on@1.641.66
LowALPINE-CVE-2026-22184zlib@1.3.1-r21.3.2-r0
LowALPINE-CVE-2024-8096curl@8.5.0-r08.10.0-r0
LowGHSA-23c5-xmqv-rm74minimatch@9.0.39.0.7
LowGHSA-5mp6-jrq3-r938tomcat-embed-core@10.1.1910.1.55
LowGHSA-mh99-v99m-4gvgbrace-expansion@2.0.12.1.3
LowALPINE-CVE-2023-1255openssl@3.0.7-r03.0.8-r4
LowGHSA-jmp9-x22r-554xspring-core@6.1.4no fix listed
LowGHSA-rv64-5gf8-9qq8tomcat-embed-core@10.1.1910.1.54

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.151.5latest2 months agov1.5.15161101735,291

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/f3k-tech/atlas-cmms.svg)](https://charts.stackradar.io/charts/f3k-tech/atlas-cmms)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.