business-api-ecosystem Helm chart
fiwareScored 14 Sept 2026
A Helm chart for running the FIWARE business API ecosystem (FIWARE Marketplace) on Kubernetes
Latest 1.1.0 2 months agodeploys tag 11.7.0 0Artifact Hub
business-api-ecosystem 1.1.0 deploys 4 container images: bitnamilegacy/mongodb, fiware/biz-ecosystem-charging-backend, library/busybox and fiware/biz-ecosystem-logic-proxy. Across them, 4,380 findings — 66 critical, 60 high — 58 on CISA KEV. The highest contribution is UBUNTU-CVE-2025-24201 in webkit2gtk 2.38.6-0ubuntu0.20.04.1, with no fix listed.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| bitnamilegacy/ | 3.6.21 | 0024149 | 1,926 |
| fiware/ | 11.7.0 | 65551,1091,906 | 50,775 |
| library/ | latest | 0000 | 0 |
| fiware/ | 11.20.3 | 15183878 | 11,788 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Medium findings
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | UBUNTU-CVE-2019-8586 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2019-8587 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2019-8594 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2019-8595 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2019-8619 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2019-8666 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2019-8677 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2019-8679 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2019-8680 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2019-8681 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2019-8686 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2019-8687 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2020-9947 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2018-4372 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2019-6233 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2020-26972 | mozjs68 | no fix listed |
| Medium | UBUNTU-CVE-2020-9803 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2019-8503 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2019-8559 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2021-23994 | mozjs68 | no fix listed |
| Medium | UBUNTU-CVE-2026-3497 | openssh | 1:8.2p1-4ubuntu0.13+esm1 |
| Medium | UBUNTU-CVE-2020-6826 | mozjs68 | no fix listed |
| Medium | DEBIAN-CVE-2026-33278 | unbound | no fix listed |
| Medium | UBUNTU-CVE-2019-8644 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2019-8563 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2020-15969 | mozjs68 | no fix listed |
| Medium | UBUNTU-CVE-2017-2480 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2023-42852 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2023-42852 | webkit2gtk | no fix listed |
| Medium | UBUNTU-CVE-2011-3438 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2019-8766 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2023-5176 | mozjs68 | no fix listed |
| Medium | GHSA-735f-pc8j-v9w8 | protobuf-java | 3.25.5 |
| Medium | UBUNTU-CVE-2024-7254 | protobuf | 3.6.1.3-2ubuntu5.2+esm2 |
| Medium | UBUNTU-CVE-2018-4373 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2020-9948 | qtwebkit-opensource-src | no fix listed |
| Medium | GHSA-43fc-jf86-j433 | axios | 1.13.5 |
| Medium | UBUNTU-CVE-2021-30749 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2021-1788 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2025-1009 | mozjs68 | no fix listed |
| Medium | UBUNTU-CVE-2021-30758 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2017-1000121 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2026-3238 | samba | 2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2 |
| Medium | UBUNTU-CVE-2025-49796 | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.10+esm1 |
| Medium | GHSA-qwmp-2cf2-g9g6 | wheel | 0.38.1 |
| Medium | UBUNTU-CVE-2019-8524 | qtwebkit-opensource-src | no fix listed |
| Medium | UBUNTU-CVE-2021-38496 | mozjs68 | no fix listed |
| Medium | UBUNTU-CVE-2022-24975 | git | no fix listed |
| Medium | UBUNTU-CVE-2020-15667 | mozjs68 | no fix listed |
| Medium | UBUNTU-CVE-2022-24791 | mozjs68 | no fix listed |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 1.1.0latest | 2 months ago | 11.7.0 | 66601,3162,933 | 64,489 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.