business-api-ecosystem 1.2.0 Helm chart

Name: business-api-ecosystem Helm chart 1.2.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

fiware

Scored 14 Oct 2026

A Helm chart for running the FIWARE business API ecosystem (FIWARE Marketplace) on Kubernetes

Version 1.2.0 yesterdaydeploys tag 11.7.0 0Artifact Hub

business-api-ecosystem 1.2.0 deploys 4 container images: bitnamilegacy/mongodb, fiware/biz-ecosystem-charging-backend, library/busybox and fiware/biz-ecosystem-logic-proxy. Across them, 10,396 findings — 71 critical, 76 high — 68 on CISA KEV. The highest contribution is UBUNTU-CVE-2025-24201 in qtwebkit-opensource-src 5.212.0~alpha4-1ubuntu2.1, with no fix listed.

Radar Score

119,06171761,7758,470

10,396 findings over 4 of 4 images measured

KEV ×68 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
bitnamilegacy/mongodb×2	3.6.21	358395	3,371
fiware/biz-ecosystem-charging-backend	11.7.0	67661,4777,362	102,155
library/busybox	latest	0000	0
fiware/biz-ecosystem-logic-proxy	11.20.3	152151,013	13,535

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Critical findings

70 distinct across the version’s images

Critical: findings whose contribution to the Radar Score is 70–100. Show every band

Severity	Advisory	Package	Fixed in
Critical	UBUNTU-CVE-2025-31277KEV	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Critical	UBUNTU-CVE-2025-43529KEV	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Critical	UBUNTU-CVE-2025-43529KEV	webkit2gtk@2.38.6-0ubuntu0.20.04.1	no fix listed
Critical	UBUNTU-CVE-2025-6558KEV	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Critical	UBUNTU-CVE-2025-6558KEV	webkit2gtk@2.38.6-0ubuntu0.20.04.1	no fix listed
Critical	UBUNTU-CVE-2026-53266KEV	linux@5.4.0-216.236	no fix listed
Critical	UBUNTU-CVE-2023-32409KEV	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Critical	DLA-3017-1	openldap@2.4.44+dfsg-5+deb9u7	2.4.44+dfsg-5+deb9u9
Critical	UBUNTU-CVE-2025-48384KEV	git@1:2.25.1-1ubuntu3.14	1:2.25.1-1ubuntu3.14+esm1
Critical	UBUNTU-CVE-2024-4367	mozjs68@68.6.0-1ubuntu1	no fix listed
Critical	UBUNTU-CVE-2021-30952KEV	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Critical	UBUNTU-CVE-2022-0995KEV	linux@5.4.0-216.236	no fix listed
Critical	UBUNTU-CVE-2026-31431KEV	linux@5.4.0-216.236	5.4.0-230.250
Critical	UBUNTU-CVE-2023-50387	bind9@1:9.18.30-0ubuntu0.20.04.2	no fix listed
Critical	UBUNTU-CVE-2025-38352KEV	linux@5.4.0-216.236	5.4.0-223.243
Critical	UBUNTU-CVE-2025-68615	net-snmp@5.8+dfsg-2ubuntu2.9	5.8+dfsg-2ubuntu2.9+esm2
Critical	UBUNTU-CVE-2025-10230	samba@2:4.15.13+dfsg-0ubuntu0.20.04.8	2:4.15.13+dfsg-0ubuntu0.20.04.8+esm1
Critical	GO-2024-2687	stdlib@go1.15.1	1.21.9
Critical	UBUNTU-CVE-2018-4233	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Critical	DEBIAN-CVE-2025-15467	openssl@3.0.16-1~deb12u1	3.0.18-1~deb12u2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.2.0latest	yesterday	11.7.0	71761,7758,470	119,061
1.1.0	3 months ago	11.7.0	71761,7758,470	119,061

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/fiware/business-api-ecosystem.svg)](https://charts.stackradar.io/charts/fiware/business-api-ecosystem)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.