contract-management 3.5.36 Helm chart

Name: contract-management Helm chart 3.5.36: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

fiware

Scored 14 Sept 2026

A Helm chart for running the contract-management on kubernetes.

Version 3.5.36 11 days agoapp version 3.3.12 0Artifact Hub

contract-management 3.5.36 deploys 1 container image: quay.io/fiware/contract-management. Across them, 167 findings — 2 critical, 4 high — 2 on CISA KEV. The highest contribution is RHSA-2025:3421 in freetype 2.9.1-9.el8, fixed in 0:2.9.1-10.el8_10. Chart.yaml declares kubeVersion >= 1.19-0; rendered for Kubernetes 1.19.0.

Radar Score

2,4112441120

167 findings over 1 of 1 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
quay.io/fiware/contract-management	3.3.12	2441120	2,411

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

120 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	RHSA-2026:0991	glib2@2.56.4-165.el8_10	0:2.56.4-168.el8_10
Low	RHSA-2025:2722	krb5@1.18.2-30.el8_10	0:1.18.2-31.el8_10
Low	RHSA-2025:18824	java-21-openjdk@1:21.0.5.0.10-3.el8	1:21.0.9.0.10-1.el8
Low	RHSA-2026:36733	cups@1:2.2.6-61.el8_10	1:2.2.6-68.el8_10
Low	RHSA-2026:4772	glibc@2.28-251.el8_10.5	0:2.28-251.el8_10.31
Low	RHSA-2026:16799	krb5@1.18.2-30.el8_10	0:1.18.2-34.el8_10
Low	GHSA-xxqh-mfjm-7mv9	netty-codec-http@4.1.115.Final	4.1.133.Final
Low	GHSA-fccg-mwvh-qqg4	netty-handler@4.1.115.Final	4.1.137.Final
Low	RHSA-2025:0426	java-21-openjdk@1:21.0.5.0.10-3.el8	1:21.0.6.0.7-1.el8
Low	RHSA-2026:6473	python3@3.6.8-67.el8_10	0:3.6.8-75.el8_10
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.115.Final	4.1.136.Final
Low	RHSA-2026:36730	libsolv@0.7.20-6.el8	0:0.7.20-7.el8_10
Low	GHSA-6cqp-g7gg-8hr5	netty-codec-http@4.1.115.Final	4.1.136.Final
Low	GHSA-72hv-8253-57qq	jackson-core@2.17.2	2.18.6
Low	RHSA-2026:42733	glibc@2.28-251.el8_10.5	0:2.28-251.el8_10.40
Low	GHSA-m4cv-j2px-7723	netty-codec-http@4.1.115.Final	4.1.133.Final
Low	RHSA-2026:0596	cups@1:2.2.6-61.el8_10	1:2.2.6-66.el8_10
Low	RHSA-2026:5585	gnutls@3.6.16-8.el8_9.3	0:3.6.16-8.el8_10.5
Low	RHSA-2026:55787	java-21-openjdk@1:21.0.5.0.10-3.el8	1:21.0.12.1.1-1.1.el8
Low	GHSA-pr98-23f8-jwxv	logback-core@1.5.9	1.5.13
Low	GHSA-jhq6-gfmj-v8fx	logback-core@1.5.9	1.5.34
Low	GHSA-h35f-9h28-mq5c	setuptools@39.2.0	83.0.0
Low	GHSA-c2gf-v879-257j	netty-codec-http2@4.1.115.Final	4.1.135.Final
Low	GHSA-84h7-rjj3-6jx4	netty-codec-http@4.1.115.Final	4.1.129.Final
Low	RHSA-2026:66451	glib2@2.56.4-165.el8_10	0:2.56.4-178.el8_10
Low	GHSA-3pjw-73gf-8qr5	jackson-databind@2.17.2	2.18.8
Low	RHSA-2026:58938	sqlite@3.26.0-19.el8_9	0:3.26.0-21.el8_10
Low	RHSA-2026:47117	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10
Low	GHSA-c69g-56f8-xwqj	netty-codec-http2@4.1.115.Final	4.1.136.Final
Low	RHSA-2025:8411	krb5@1.18.2-30.el8_10	0:1.18.2-32.el8_10
Low	RHSA-2026:0728	gnupg2@2.2.20-3.el8_6	0:2.2.20-4.el8_10
Low	GHSA-38f8-5428-x5cv	netty-codec-http@4.1.115.Final	4.1.133.Final
Low	GHSA-8c42-7qj2-3j46	netty-codec-http@4.1.115.Final	4.1.137.Final
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.17.2	2.18.8
Low	GHSA-389x-839f-4rhx	netty-common@4.1.115.Final	4.1.118.Final
Low	RHSA-2025:8958	libxml2@2.9.7-18.el8_10.1	0:2.9.7-20.el8_10
Low	RHSA-2026:33126	glibc@2.28-251.el8_10.5	0:2.28-251.el8_10.38
Low	GHSA-4mp9-239f-g9hg	netty-codec-http@4.1.115.Final	4.1.136.Final
Low	RHSA-2026:13285	libcap@2.48-6.el8_9	0:2.48-6.el8_10.1
Low	RHSA-2026:64809	expat@2.2.5-16.el8_10	0:2.5.0-2.el8_10.2
Low	RHSA-2025:3828	glibc@2.28-251.el8_10.5	0:2.28-251.el8_10.16
Low	RHSA-2026:20587	glibc@2.28-251.el8_10.5	0:2.28-251.el8_10.37
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.17.2	2.18.8
Low	RHSA-2026:43420	acl@2.2.53-3.el8	0:2.4.0-1.el8_10
Low	RHSA-2025:1517	libxml2@2.9.7-18.el8_10.1	0:2.9.7-18.el8_10.2
Low	RHSA-2025:21977	libssh@0.9.6-14.el8	0:0.9.6-16.el8_10
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.17.2	2.18.9
Low	GHSA-gcjf-9mgh-3p7g	netty-codec-http@4.1.115.Final	4.1.136.Final
Low	GHSA-v8h7-rr48-vmmv	netty-codec-http@4.1.115.Final	4.1.133.Final
Low	GHSA-563q-j3cm-6jxm	netty-codec-http2@4.1.115.Final	4.1.135.Final

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.5.36latest	11 days ago	3.3.12	2441120	2,411

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/fiware/contract-management.svg)](https://charts.stackradar.io/charts/fiware/contract-management)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.