StackRadar

atlas-cmms Helm chart

f3k-techVerified publisher

Scored 14 Sept 2026

CMMS Software Built to Make Managing Maintenance Easier

Latest 0.151.5 2 months agoapp version v1.5.1 1Artifact Hub

atlas-cmms 0.151.5 deploys 4 container images: library/busybox, intelloop/atlas-cmms-backend, intelloop/atlas-cmms-frontend and lachlanevenson/k8s-kubectl. Across them, 304 findings5 critical, 16 high 2 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 10.1.19, fixed in 10.1.35.

Radar Score

5,291516110173

304 findings over 4 of 4 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
library/busybox×31.3600000
intelloop/atlas-cmms-backendv1.5.135571052,708
intelloop/atlas-cmms-frontendv1.5.1022040936
lachlanevenson/k8s-kubectlv1.22.162933281,647

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

166 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGHSA-73rr-hh4g-fpgxdiff@5.1.05.2.2
LowGHSA-x4m4-345f-5h5gtomcat-embed-core@10.1.1910.1.54
LowGHSA-v435-xc8x-wvr9bcprov-jdk18on@1.771.78
LowGHSA-v435-xc8x-wvr9bcprov-jdk15on@1.641.78
LowGHSA-8x88-c5mf-7j5wtar@6.2.07.5.18
LowGHSA-fpj8-gq4v-p354tomcat-embed-core@10.1.1910.1.50
LowGHSA-hgrr-935x-pq79tomcat-embed-core@10.1.1910.1.47
LowGHSA-c3fc-8qff-9hwxbcprov-jdk18on@1.771.84
LowALPINE-CVE-2023-46219curl@7.86.0-r18.5.0-r0
LowALPINE-CVE-2024-4603openssl@3.0.7-r03.0.13-r0
LowGHSA-x23c-287f-qqv5spring-webmvc@6.1.4no fix listed
LowALPINE-CVE-2024-55549libxslt@1.1.39-r01.1.39-r1
LowALPINE-CVE-2025-24855libxslt@1.1.39-r01.1.39-r1
LowGHSA-xwmg-2g98-w7v9nimbus-jose-jwt@9.24.49.37.4
LowALPINE-CVE-2022-4203openssl@3.0.7-r03.0.8-r0
LowALPINE-CVE-2024-0853curl@7.86.0-r18.6.0-r0
LowGHSA-6r3c-xf4w-jxjmspring-web@6.1.46.1.21
LowGHSA-8xfc-gm6g-vgpvbcprov-jdk15on@1.641.78
LowGHSA-8xfc-gm6g-vgpvbcprov-jdk18on@1.771.78
LowALPINE-CVE-2026-75803openssl@3.5.5-r03.5.8-r0
LowGHSA-r6q2-hw4h-h46wtar@6.2.07.5.4
LowGHSA-rc42-6c7j-7h5rspring-boot@3.2.3no fix listed
LowGHSA-r292-9mhp-454mtar@6.2.07.5.21
LowGHSA-wg6q-6289-32hpbcpkix-jdk15on@1.641.84
LowGHSA-4h8f-2wvx-gg5wbcprov-jdk18on@1.771.78
LowGHSA-4h8f-2wvx-gg5wbcprov-jdk15on@1.641.78
LowGHSA-42wg-hm62-jcwgtomcat-embed-core@10.1.1910.1.42
LowGHSA-wjxj-5m7g-mg7qbcprov-jdk15on@1.64no fix listed
LowGHSA-r5w3-xv2f-j59qspring-expression@6.1.4no fix listed
LowGHSA-w4pp-8pjf-rmxwpacote@17.0.521.5.1
LowGHSA-9ppj-qmqm-q256tar@6.2.07.5.11
LowGHSA-67mf-3cr5-8w23bcprov-jdk18on@1.771.78
LowGHSA-2rmj-mq67-h97gspring-web@6.1.46.1.12
LowALPINE-CVE-2025-26519musl@1.2.3-r41.2.3-r6
LowALPINE-CVE-2026-2673openssl@3.5.5-r03.5.6-r0
LowGHSA-9m3c-qcxr-9x87tomcat-embed-core@10.1.1910.1.53
LowGHSA-f886-m6hf-6m8vbrace-expansion@2.0.12.0.3
LowGHSA-4cx2-fc23-5wg6bcpkix-jdk15on@1.641.79
LowGHSA-hw42-3568-wj87google-oauth-client@1.31.51.33.3
LowGHSA-hr8g-6v94-x4m9bcprov-jdk15on@1.64no fix listed
LowALPINE-CVE-2026-42767openssl@3.5.5-r03.5.7-r0
LowGHSA-m44j-cfrm-g8qcbcprov-jdk18on@1.771.78
LowALPINE-CVE-2023-28322curl@7.86.0-r18.1.0-r0
LowGHSA-83g3-92jg-28cxtar@6.2.07.5.8
LowGHSA-72hv-8253-57qqjackson-core@2.15.42.18.6
LowALPINE-CVE-2026-63074openssl@3.5.5-r03.5.8-r0
LowGHSA-w8wr-v893-vjvptar@6.2.07.5.18
LowALPINE-CVE-2026-34181openssl@3.5.5-r03.5.7-r0
LowGHSA-pr98-23f8-jwxvlogback-core@1.4.141.5.13
LowALPINE-CVE-2023-2975openssl@3.0.7-r03.0.9-r2

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.151.5latest2 months agov1.5.15161101735,291

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/f3k-tech/atlas-cmms.svg)](https://charts.stackradar.io/charts/f3k-tech/atlas-cmms)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.