StackRadar

infra Helm chart

fibonacci-cluster-infraVerified publisher

Scored 14 Sept 2026

An "app-of-apps" Helm chart with infrastructure services

Latest 1.0.0 1 year agodeploys tag 2.37.0 0Artifact Hub

infra 1.0.0 deploys 4 container images: apache/activemq-artemis, dpage/pgadmin4, library/postgres and library/redis. Across them, 1,140 findings2 critical, 8 high. The highest contribution is ALPINE-CVE-2025-6965 in sqlite 3.44.2-r0, fixed in 3.44.2-r2.

Radar Score

12,45428185945

1,140 findings over 4 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
apache/activemq-artemis2.37.004552803,743
dpage/pgadmin48.41240901,800
library/postgres16.411523163,891
library/redis7.4.101382593,020

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

696 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumUBUNTU-CVE-2026-34180openssl@3.0.13-0ubuntu3.23.0.13-0ubuntu3.11
MediumALPINE-CVE-2025-31115xz@5.4.5-r05.4.5-r1
MediumUBUNTU-CVE-2025-31115xz-utils@5.6.1+really5.4.5-15.6.1+really5.4.5-1ubuntu0.2
MediumUBUNTU-CVE-2026-7383openssl@3.0.13-0ubuntu3.23.0.13-0ubuntu3.11
MediumUBUNTU-CVE-2026-8924curl@8.5.0-2ubuntu10.28.5.0-2ubuntu10.10
MediumUBUNTU-CVE-2025-69720ncurses@6.4+20240113-1ubuntu26.4+20240113-1ubuntu2.1
MediumGHSA-f6hv-jmp6-3vwvnetty-codec-http@4.1.112.Final4.1.133.Final
MediumUBUNTU-CVE-2026-8376perl@5.38.2-3.2build25.38.2-3.2ubuntu0.3
MediumGHSA-wvwj-cvrp-7pv5authlib@1.2.11.6.9
MediumALPINE-CVE-2025-9232openssl@3.1.4-r53.1.8-r1
MediumDEBIAN-CVE-2025-9232openssl@3.0.15-1~deb12u13.0.17-1~deb12u3
MediumGHSA-jppx-w49h-x2qqnetty-codec-http@4.1.112.Final4.1.136.Final
MediumGHSA-2h4p-vjrc-8xpqmako@1.3.21.3.12
MediumUBUNTU-CVE-2026-5260gnutls28@3.8.3-1.1ubuntu3.13.8.3-1.1ubuntu3.6
MediumALPINE-CVE-2025-4330python3@3.11.8-r03.11.13-r0
MediumGHSA-jm66-cg57-jjv5azure-core@1.30.11.38.0
MediumALPINE-CVE-2025-0938python3@3.11.8-r03.11.12-r0
MediumGHSA-3rq5-2g8h-59hceventlet@0.34.20.35.2
MediumGHSA-7gcm-g887-7qv7protobuf@4.25.35.29.6
MediumGHSA-5568-6qcg-g7fxactivemq-client@5.18.55.19.4
MediumUBUNTU-CVE-2026-8927curl@8.5.0-2ubuntu10.28.5.0-2ubuntu10.10
MediumALPINE-CVE-2023-27043python3@3.11.8-r03.11.10-r0
MediumUBUNTU-CVE-2026-28388openssl@3.0.13-0ubuntu3.23.0.13-0ubuntu3.9
MediumUBUNTU-CVE-2025-69421openssl@3.0.13-0ubuntu3.23.0.13-0ubuntu3.7
MediumGHSA-x4gw-5cx5-pgmhnetty-handler@4.1.112.Final4.1.135.Final
MediumGO-2022-1144stdlib@go1.18.21.18.9
MediumUBUNTU-CVE-2026-28387openssl@3.0.13-0ubuntu3.23.0.13-0ubuntu3.9
MediumDEBIAN-CVE-2015-9019libxslt@1.1.35-1no fix listed
MediumUBUNTU-CVE-2026-28389openssl@3.0.13-0ubuntu3.23.0.13-0ubuntu3.9
MediumUBUNTU-CVE-2026-28390openssl@3.0.13-0ubuntu3.23.0.13-0ubuntu3.9
MediumGHSA-jr27-m4p2-rc6rpyasn1@0.5.10.6.3
MediumDEBIAN-CVE-2019-1010025glibc@2.36-9+deb12u9no fix listed
LowUBUNTU-CVE-2025-69420openssl@3.0.13-0ubuntu3.23.0.13-0ubuntu3.7
LowUBUNTU-CVE-2026-57433perl@5.38.2-3.2build25.38.2-3.2ubuntu0.4
LowPYSEC-2026-2132click@8.1.78.3.3
LowGHSA-g3pr-3p32-fp23micrometer-core@1.13.3no fix listed
LowDEBIAN-CVE-2026-6653libxml2@2.9.14+dfsg-1.3~deb12u1no fix listed
LowUBUNTU-CVE-2026-25646libpng1.6@1.6.43-5build11.6.43-5ubuntu0.5
LowGHSA-hc5x-x2vx-497ggunicorn@20.1.022.0.0
LowUBUNTU-CVE-2026-27135nghttp2@1.59.0-1ubuntu0.11.59.0-1ubuntu0.3
LowUBUNTU-CVE-2026-13221perl@5.38.2-3.2build25.38.2-3.2ubuntu0.4
LowUBUNTU-CVE-2026-42496perl@5.38.2-3.2build25.38.2-3.2ubuntu0.3
LowUBUNTU-CVE-2026-33636libpng1.6@1.6.43-5build11.6.43-5ubuntu0.6
LowGHSA-3pxv-7cmr-fjr4log4j-core@2.23.12.25.4
LowGHSA-445c-vh5m-36rjlog4j-core@2.23.12.25.4
LowGHSA-2fvj-hgj9-j2grjetty-security@10.0.2210.0.31
LowUBUNTU-CVE-2024-56406perl@5.38.2-3.2build25.38.2-3.2ubuntu0.1
LowUBUNTU-CVE-2024-10963pam@1.5.3-5ubuntu5.11.5.3-5ubuntu5.5
LowALPINE-CVE-2024-9287python3@3.11.8-r03.11.11-r0
LowGHSA-57rv-r2g8-2cj3netty-codec-http@4.1.112.Final4.1.133.Final

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.0latest1 year ago2.37.02818594512,454

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/fibonacci-cluster-infra/infra.svg)](https://charts.stackradar.io/charts/fibonacci-cluster-infra/infra)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.