business-api-ecosystem 1.2.0 Helm chart
fiwareScored 14 Oct 2026
A Helm chart for running the FIWARE business API ecosystem (FIWARE Marketplace) on Kubernetes
Version 1.2.0 yesterdaydeploys tag 11.7.0 0Artifact Hub
business-api-ecosystem 1.2.0 deploys 4 container images: bitnamilegacy/mongodb, fiware/biz-ecosystem-charging-backend, library/busybox and fiware/biz-ecosystem-logic-proxy. Across them, 10,396 findings — 71 critical, 76 high — 68 on CISA KEV. The highest contribution is UBUNTU-CVE-2025-24201 in qtwebkit-opensource-src 5.212.0~alpha4-1ubuntu2.1, with no fix listed.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| bitnamilegacy/ | 3.6.21 | 358395 | 3,371 |
| fiware/ | 11.7.0 | 67661,4777,362 | 102,155 |
| library/ | latest | 0000 | 0 |
| fiware/ | 11.20.3 | 152151,013 | 13,535 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
High findings
High: findings whose contribution to the Radar Score is 40–69. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| High | UBUNTU-CVE-2025-6965 | sqlite3 | 3.31.1-4ubuntu0.7+esm1 |
| High | UBUNTU-CVE-2023-50868 | bind9 | no fix listed |
| High | DLA-2953-1 | openssl1.0 | 1.0.2u-1~deb9u7 |
| High | UBUNTU-CVE-2022-0778 | openssl | 1.1.1f-1ubuntu2.fips.12 |
| High | UBUNTU-CVE-2020-26950 | mozjs68 | no fix listed |
| High | UBUNTU-CVE-2018-11646 | qtwebkit-opensource-src | no fix listed |
| High | UBUNTU-CVE-2023-28204KEV | webkit2gtk | no fix listed |
| High | UBUNTU-CVE-2023-28204KEV | qtwebkit-opensource-src | no fix listed |
| High | UBUNTU-CVE-2023-42916KEV | webkit2gtk | no fix listed |
| High | UBUNTU-CVE-2023-42916KEV | qtwebkit-opensource-src | no fix listed |
| High | DLA-2574-1 | openldap | 2.4.44+dfsg-5+deb9u8 |
| High | GHSA-2hrw-hx67-34x6 | django | 3.2.18 |
| High | UBUNTU-CVE-2018-4162 | qtwebkit-opensource-src | no fix listed |
| High | UBUNTU-CVE-2007-4559 | python3.8 | no fix listed |
| High | UBUNTU-CVE-2024-44309KEV | webkit2gtk | no fix listed |
| High | UBUNTU-CVE-2024-44309KEV | qtwebkit-opensource-src | no fix listed |
| High | UBUNTU-CVE-2018-4416 | qtwebkit-opensource-src | no fix listed |
| High | GHSA-x4qr-2fvf-3mr5 | cryptography | 39.0.1 |
| High | UBUNTU-CVE-2023-0286 | openssl | 1.1.1f-1ubuntu2.fips.17 |
| High | UBUNTU-CVE-2022-42867 | qtwebkit-opensource-src | no fix listed |
| High | DLA-2968-1 | zlib | 1:1.2.8.dfsg-5+deb9u1 |
| High | UBUNTU-CVE-2024-29943 | mozjs68 | no fix listed |
| High | UBUNTU-CVE-2021-23840 | openssl | 1.1.1f-1ubuntu2.fips.7.2 |
| High | GHSA-qmf9-6jqf-j8fq | django | 3.2.23 |
| High | GHSA-6cw3-g6wv-c2xv | django | 3.2.12 |
| High | UBUNTU-CVE-2023-2650 | openssl | 1.1.1f-1ubuntu2.fips.19 |
| High | DLA-2774-1 | openssl1.0 | 1.0.2u-1~deb9u6 |
| High | UBUNTU-CVE-2021-3712 | openssl | 1.1.1f-1ubuntu2.fips.7.2 |
| High | GHSA-q2jf-h9jm-m7p4 | django | 3.2.17 |
| High | UBUNTU-CVE-2023-48795 | openssh | 1:8.2p1-4ubuntu0.fips.0.10 |
| High | GHSA-2gwj-7jmv-h26r | django | 3.2.13 |
| High | UBUNTU-CVE-2023-52755 | linux | no fix listed |
| High | UBUNTU-CVE-2025-39964KEV | linux | 5.4.0-224.244 |
| High | UBUNTU-CVE-2019-8375 | qtwebkit-opensource-src | no fix listed |
| High | GHSA-frmv-pr5f-9mcr | django | 4.2.26 |
| High | UBUNTU-CVE-2022-35583 | wkhtmltopdf | no fix listed |
| High | UBUNTU-CVE-2023-6856 | mozjs68 | no fix listed |
| High | UBUNTU-CVE-2021-3449 | openssl | 1.1.1f-1ubuntu2.fips.7 |
| High | GHSA-r5fr-rjxr-66jc | lodash | 4.18.0 |
| High | UBUNTU-CVE-2024-2511 | openssl | 1.1.1f-1ubuntu2.24+esm5 |
| High | UBUNTU-CVE-2017-2547 | qtwebkit-opensource-src | no fix listed |
| High | UBUNTU-CVE-2026-4480 | samba | 2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2 |
| High | GHSA-6w2r-r2m5-xq5w | django | 4.2.24 |
| High | UBUNTU-CVE-2018-4121 | qtwebkit-opensource-src | no fix listed |
| High | UBUNTU-CVE-2025-4918 | mozjs68 | no fix listed |
| High | UBUNTU-CVE-2019-8689 | qtwebkit-opensource-src | no fix listed |
| High | UBUNTU-CVE-2025-0247 | mozjs68 | no fix listed |
| High | UBUNTU-CVE-2018-4441 | qtwebkit-opensource-src | no fix listed |
| High | UBUNTU-CVE-2022-4450 | openssl | 1.1.1f-1ubuntu2.fips.17 |
| High | UBUNTU-CVE-2021-23336 | python3.8 | no fix listed |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 1.2.0latest | yesterday | 11.7.0 | 71761,7758,470 | 119,061 |
| 1.1.0 | 3 months ago | 11.7.0 | 71761,7758,470 | 119,061 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.