mande 0.5.17 Helm chart

Name: mande Helm chart 0.5.17: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

factly

Scored 24 Sept 2026

Open-source application to develop data portals to publish datasets in various formats. Developed in Go and React.

Version 0.5.17 3 days agoapp version 0.34.1 0Artifact Hub

mande 0.5.17 deploys 3 container images: factly/mande-server, factly/mande-studio and factly/mande-web. Across them, 334 findings — 4 critical, 15 high — 3 on CISA KEV. The highest contribution is GHSA-f82v-jwr5-mffw in next 13.5.3, fixed in 13.5.9.

Radar Score

4,78941565250

334 findings over 3 of 3 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
factly/mande-server×2	0.34.1	0518134	1,730
factly/mande-studio	0.34.1	352022	1,173
factly/mande-web	0.34.1	152794	1,886

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

243 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-4980	stdlib@go1.18.10	1.25.10
Low	GO-2026-5039	stdlib@go1.18.10	1.25.11
Low	GO-2025-3849	stdlib@go1.18.10	1.23.12
Low	GHSA-ffhc-5mcf-pf4q	next@13.5.3	15.5.16
Low	GO-2025-4013	stdlib@go1.18.10	1.24.8
Low	GO-2026-4946	stdlib@go1.18.10	1.25.9
Low	GO-2022-0646	github.com/aws/aws-sdk-go@v1.44.25	no fix listed
Low	GO-2026-4603	stdlib@go1.18.10	1.25.8
Low	GO-2026-6303	golang.org/x/crypto@v0.1.0	0.55.0
Low	GO-2026-6354	golang.org/x/crypto@v0.1.0	0.56.0
Low	GO-2025-3750	stdlib@go1.18.10	1.23.10
Low	GO-2026-4982	stdlib@go1.18.10	1.25.10
Low	GO-2026-6091	stdlib@go1.18.10	1.25.13
Low	GO-2026-4864	stdlib@go1.18.10	1.25.9
Low	GO-2025-3447	stdlib@go1.18.10	1.22.12
Low	GO-2026-4865	stdlib@go1.18.10	1.25.9
Low	GO-2026-4869	stdlib@go1.18.10	1.25.9
Low	GO-2026-4340	stdlib@go1.18.10	1.24.12
Low	GO-2025-4175	stdlib@go1.18.10	1.24.11
Low	GHSA-v6h2-p8h4-qcjw	brace-expansion@2.0.1	2.0.2
Low	ALPINE-CVE-2025-68160	openssl@3.0.10-r0	3.0.19-r0
Low	GO-2026-4403	stdlib@go1.18.10	1.23.9
Low	GO-2026-5025	golang.org/x/net@v0.7.0	0.55.0
Low	GO-2026-4970	stdlib@go1.18.10	1.25.12
Low	GO-2022-0635	github.com/aws/aws-sdk-go@v1.44.25	no fix listed
Low	GHSA-3g8h-86w9-wvmq	next@13.5.3	15.5.16
Low	GO-2026-4316	github.com/go-chi/chi@v4.1.2+incompatible	no fix listed
Low	GO-2026-5027	golang.org/x/net@v0.7.0	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.7.0	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.7.0	0.55.0
Low	GHSA-78xj-cgh5-2h22	ip@2.0.0	2.0.1
Low	GO-2026-4602	stdlib@go1.18.10	1.25.8
Low	GHSA-xhjh-pmcv-23jw	axios@0.22.0	0.31.1
Low	GHSA-vfv6-92ff-j949	next@13.5.3	15.5.16
Low	ALPINE-CVE-2025-69418	openssl@3.0.10-r0	3.0.19-r0
Low	GO-2026-5024	golang.org/x/sys@v0.5.0	0.44.0
Low	GO-2023-2153	google.golang.org/grpc@v1.50.1	1.56.3
Low	GO-2026-4950	github.com/valyala/fasthttp@v1.37.1-0.20220607072126-8a320890c08d	1.70.0
Low	GO-2026-5932	golang.org/x/crypto@v0.1.0	no fix listed
Low	GO-2026-6061	google.golang.org/grpc@v1.50.1	1.82.1
Low	GHSA-j88v-2chj-qfwx	github.com/jackc/pgx/v4@v4.10.1	no fix listed
Low	GHSA-vpq2-c234-7xj6	@tootallnate/once@2.0.0	2.0.1
Low	GHSA-3h52-269p-cp9r	next@13.5.3	14.2.30

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.5.18latest	yesterday	0.34.1	41565250	4,789
0.5.17	3 days ago	0.34.1	41565250	4,789
0.5.16	3 months ago	0.34.1	41565250	4,789

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/factly/mande.svg)](https://charts.stackradar.io/charts/factly/mande)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.