business-api-ecosystem Helm chart

Name: business-api-ecosystem Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

fiware

Scored 14 Sept 2026

A Helm chart for running the FIWARE business API ecosystem (FIWARE Marketplace) on Kubernetes

Latest 1.1.0 2 months agodeploys tag 11.7.0 0Artifact Hub

business-api-ecosystem 1.1.0 deploys 4 container images: bitnamilegacy/mongodb, fiware/biz-ecosystem-charging-backend, library/busybox and fiware/biz-ecosystem-logic-proxy. Across them, 4,380 findings — 66 critical, 60 high — 58 on CISA KEV. The highest contribution is UBUNTU-CVE-2025-24201 in webkit2gtk 2.38.6-0ubuntu0.20.04.1, with no fix listed.

Radar Score

64,48966601,3162,933

4,380 findings over 4 of 4 images measured

KEV ×58 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
bitnamilegacy/mongodb×2	3.6.21	0024149	1,926
fiware/biz-ecosystem-charging-backend	11.7.0	65551,1091,906	50,775
library/busybox	latest	0000	0
fiware/biz-ecosystem-logic-proxy	11.20.3	15183878	11,788

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

4,039 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	UBUNTU-CVE-2017-2480	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	UBUNTU-CVE-2023-42852	webkit2gtk@2.38.6-0ubuntu0.20.04.1	no fix listed
Medium	UBUNTU-CVE-2023-42852	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	UBUNTU-CVE-2011-3438	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	UBUNTU-CVE-2019-8766	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	UBUNTU-CVE-2023-5176	mozjs68@68.6.0-1ubuntu1	no fix listed
Medium	GHSA-735f-pc8j-v9w8	protobuf-java@2.5.0	3.25.5
Medium	UBUNTU-CVE-2024-7254	protobuf@3.6.1.3-2ubuntu5.2	3.6.1.3-2ubuntu5.2+esm2
Medium	UBUNTU-CVE-2018-4373	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	UBUNTU-CVE-2020-9948	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	GHSA-43fc-jf86-j433	axios@1.5.1	1.13.5
Medium	UBUNTU-CVE-2021-30749	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	UBUNTU-CVE-2021-1788	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	UBUNTU-CVE-2025-1009	mozjs68@68.6.0-1ubuntu1	no fix listed
Medium	UBUNTU-CVE-2021-30758	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	UBUNTU-CVE-2017-1000121	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	UBUNTU-CVE-2026-3238	samba@2:4.15.13+dfsg-0ubuntu0.20.04.8	2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2
Medium	UBUNTU-CVE-2025-49796	libxml2@2.9.10+dfsg-5ubuntu0.20.04.10	2.9.10+dfsg-5ubuntu0.20.04.10+esm1
Medium	GHSA-qwmp-2cf2-g9g6	wheel@0.34.2	0.38.1
Medium	UBUNTU-CVE-2019-8524	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	UBUNTU-CVE-2021-38496	mozjs68@68.6.0-1ubuntu1	no fix listed
Medium	UBUNTU-CVE-2022-24975	git@1:2.25.1-1ubuntu3.14	no fix listed
Medium	UBUNTU-CVE-2020-15667	mozjs68@68.6.0-1ubuntu1	no fix listed
Medium	UBUNTU-CVE-2022-24791	mozjs68@68.6.0-1ubuntu1	no fix listed
Medium	DEBIAN-CVE-2024-56171	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Medium	DEBIAN-CVE-2023-6879	aom@3.6.0-1+deb12u1	no fix listed
Medium	UBUNTU-CVE-2017-2530	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	GHSA-r9hx-vwmv-q579	setuptools@45.2.0	65.5.1
Medium	UBUNTU-CVE-2021-43539	mozjs68@68.6.0-1ubuntu1	no fix listed
Medium	UBUNTU-CVE-2021-30818	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	UBUNTU-CVE-2017-7107	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	UBUNTU-CVE-2017-7120	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	UBUNTU-CVE-2020-12426	mozjs68@68.6.0-1ubuntu1	no fix listed
Medium	UBUNTU-CVE-2022-26717	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	UBUNTU-CVE-2018-4311	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	UBUNTU-CVE-2026-19931	curl@7.68.0-1ubuntu2.25	no fix listed
Medium	UBUNTU-CVE-2017-7019	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	UBUNTU-CVE-2017-7095	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	UBUNTU-CVE-2017-7096	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	UBUNTU-CVE-2017-7099	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	UBUNTU-CVE-2017-7102	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	UBUNTU-CVE-2017-7111	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	UBUNTU-CVE-2020-26973	mozjs68@68.6.0-1ubuntu1	no fix listed
Medium	UBUNTU-CVE-2017-7020	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	UBUNTU-CVE-2017-7081	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	UBUNTU-CVE-2017-7087	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	UBUNTU-CVE-2017-7091	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	UBUNTU-CVE-2017-7093	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	UBUNTU-CVE-2017-7094	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed
Medium	UBUNTU-CVE-2017-7098	qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.0latest	2 months ago	11.7.0	66601,3162,933	64,489

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/fiware/business-api-ecosystem.svg)](https://charts.stackradar.io/charts/fiware/business-api-ecosystem)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.