fineract Helm chart

Name: fineract Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

fineract-openshift

Scored 14 Sept 2026

Apache Fineract is an open source microfinance platform that provides a robust and scalable solution for financial institutions, enabling the management of loans, savings, customers and financial reporting

Latest 0.1.1 10 months agoapp version v1.12.1 0Artifact Hub

fineract 0.1.1 deploys 4 container images: library/nginx, apache/fineract, openmf/community-app and library/mariadb. Across them, 659 findings — 3 critical, 8 high — 3 on CISA KEV. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.9.3, fixed in 3.2.2. Chart.yaml declares kubeVersion >=1.31.0; rendered for Kubernetes 1.31.0.

Radar Score

7,79238124524

659 findings over 4 of 4 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
library/nginx	latest	0030145	1,827
apache/fineract	1.12.1	3541118	2,402
openmf/community-app	latest	033568	1,688
library/mariadb×2	11.4	0018193	1,875

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

619 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-42015	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	DEBIAN-CVE-2026-76642	util-linux@2.41.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-11822	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2
Low	DEBIAN-CVE-2026-11824	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2
Low	DLA-3472-1	libx11@2:1.6.7-1+deb10u1	2:1.6.7-1+deb10u3
Low	GHSA-6cqp-g7gg-8hr5	netty-codec-http@4.1.119.Final	4.1.136.Final
Low	UBUNTU-CVE-2026-70457	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	UBUNTU-CVE-2026-60178	mariadb@1:11.4.13+maria~ubu2404	no fix listed
Low	UBUNTU-CVE-2026-60585	mariadb@1:11.4.13+maria~ubu2404	no fix listed
Low	DLA-3740-1	gnutls28@3.6.7-4+deb10u5	3.6.7-4+deb10u12
Low	GHSA-7r32-vfj5-c2jv	ckeditor4@4.16.1	4.25.0
Low	DEBIAN-CVE-2026-48961	perl@5.40.1-6	5.40.1-6+deb13u1
Low	GHSA-72hv-8253-57qq	jackson-core@2.18.3	2.18.6
Low	UBUNTU-CVE-2026-63074	openssl@3.0.13-0ubuntu3.12	3.0.13-0ubuntu3.15
Low	GHSA-m4cv-j2px-7723	netty-codec-http@4.1.119.Final	4.1.133.Final
Low	DSA-5108-1	tiff@4.1.0+git191117-2~deb10u1	4.1.0+git191117-2~deb10u4
Low	DEBIAN-CVE-2025-61144	tiff@4.7.0-3+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-6238	glibc@2.41-12+deb13u3	no fix listed
Low	UBUNTU-CVE-2026-53789	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	UBUNTU-CVE-2026-70454	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	GHSA-5gvw-p9qm-jgwh	jackson-databind@2.18.3	2.18.9
Low	GHSA-wf66-mphr-4c4r	kafka-clients@3.8.1	3.9.2
Low	DSA-4997-1	tiff@4.1.0+git191117-2~deb10u1	4.1.0+git191117-2~deb10u3
Low	GHSA-jhq6-gfmj-v8fx	logback-core@1.5.17	1.5.34
Low	DEBIAN-CVE-2026-5435	glibc@2.41-12+deb13u3	no fix listed
Low	GHSA-c2gf-v879-257j	netty-codec-http2@4.1.119.Final	4.1.135.Final
Low	DEBIAN-CVE-2026-54369	acl@2.3.2-2+b1	no fix listed
Low	DLA-3321-1	gnutls28@3.6.7-4+deb10u5	3.6.7-4+deb10u10
Low	DLA-3513-1	tiff@4.1.0+git191117-2~deb10u1	4.1.0+git191117-2~deb10u8
Low	UBUNTU-CVE-2026-7017	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
Low	ALPINE-CVE-2026-40200	musl@1.2.5-r1	1.2.5-r3
Low	GHSA-84h7-rjj3-6jx4	netty-codec-http@4.1.119.Final	4.1.129.Final
Low	DEBIAN-CVE-2021-4214	libpng1.6@1.6.48-1+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.2-3	no fix listed
Low	UBUNTU-CVE-2026-53786	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	ALPINE-CVE-2025-66199	openssl@3.3.4-r0	3.3.6-r0
Low	DLA-3167-1	ncurses@6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u3
Low	UBUNTU-CVE-2026-53792	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	UBUNTU-CVE-2026-53784	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	UBUNTU-CVE-2026-53802	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	GHSA-3pjw-73gf-8qr5	jackson-databind@2.18.3	2.18.8
Low	DLA-3850-1	glibc@2.28-10	2.28-10+deb10u4
Low	UBUNTU-CVE-2026-34303	mariadb@1:11.4.13+maria~ubu2404	no fix listed
Low	UBUNTU-CVE-2025-1352	elfutils@0.190-1.1ubuntu0.1	no fix listed
Low	DEBIAN-CVE-2026-52491	tiff@4.7.0-3+deb13u3	no fix listed
Low	DLA-3459-1	libxpm@1:3.5.12-1	1:3.5.12-1+deb10u1
Low	GHSA-xvfq-4q6q-gxx7	spring-kafka@3.3.4	3.3.16
Low	DLA-3660-1	gnutls28@3.6.7-4+deb10u5	3.6.7-4+deb10u11
Low	DEBIAN-CVE-2025-15079	curl@8.14.1-2+deb13u4	no fix listed
Low	GHSA-4773-3jfm-qmx3	spring-webmvc@6.2.5	6.2.17

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.1latest	10 months ago	v1.12.1	38124524	7,792

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/fineract-openshift/fineract.svg)](https://charts.stackradar.io/charts/fineract-openshift/fineract)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.