StackRadar

tm-forum-api Helm chart

fiware

Scored 14 Sept 2026

A Helm chart for running the FIWARE TMForum-APIs

Latest 0.17.15 1 month agoapp version 1.18.0 0Artifact Hub

tm-forum-api 0.17.15 deploys 19 container images: quay.io/fiware/tmforum-party-catalog, quay.io/fiware/tmforum-customer-bill-management, quay.io/fiware/tmforum-customer-management, quay.io/fiware/tmforum-product-catalog and 15 more. Across them, 2,698 findings19 critical, 38 high. The highest contribution is GHSA-mjmj-j48q-9wg2 in snakeyaml 1.32, fixed in 2.0. Chart.yaml declares kubeVersion >= 1.19-0; rendered for Kubernetes 1.19.0.

Radar Score

35,11219385892,052

2,698 findings over 19 of 19 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

19 images
ImageTagVulnerabilitiesRadar Score
quay.io/fiware/tmforum-party-catalog1.18.012311081,848
quay.io/fiware/tmforum-customer-bill-management1.18.012311081,848
quay.io/fiware/tmforum-customer-management1.18.012311081,848
quay.io/fiware/tmforum-product-catalog1.18.012311081,848
quay.io/fiware/tmforum-product-inventory1.18.012311081,848
quay.io/fiware/tmforum-product-ordering-management1.18.012311081,848
quay.io/fiware/tmforum-resource-catalog1.18.012311081,848
quay.io/fiware/tmforum-resource-function-activation1.18.012311081,848
quay.io/fiware/tmforum-resource-inventory1.18.012311081,848
quay.io/fiware/tmforum-service-catalog1.18.012311081,848
quay.io/fiware/tmforum-service-inventory1.18.012311081,848
quay.io/fiware/tmforum-account1.18.012311081,848
quay.io/fiware/tmforum-agreement1.18.012311081,848
quay.io/fiware/tmforum-party-role1.18.012311081,848
quay.io/fiware/tmforum-usage-management1.18.012311081,848
quay.io/fiware/tmforum-quote1.18.012311081,848
quay.io/fiware/tmforum-resource-order-management1.18.012311081,848
quay.io/fiware/tmforum-service-order-management1.18.012311081,848
quay.io/fiware/tmforum-software-management1.18.012311081,848

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

108 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowRHSA-2026:1631python3@3.6.8-70.el8_100:3.6.8-72.el8_10
LowGHSA-g3pr-3p32-fp23micrometer-core@1.10.5no fix listed
LowRHSA-2026:4728libpng@2:1.6.34-5.el82:1.6.34-10.el8_10
LowGHSA-43w5-mmxv-cpvhmicronaut-json-core@3.9.13.10.5
LowRHSA-2026:7667nghttp2@1.33.0-6.el8_10.10:1.33.0-6.el8_10.2
LowGHSA-vmq6-5m68-f53mlogback-core@1.2.111.2.13
LowGHSA-vmq6-5m68-f53mlogback-classic@1.2.111.2.13
LowRHSA-2026:11077python3@3.6.8-70.el8_100:3.6.8-76.el8_10
LowGHSA-57rv-r2g8-2cj3netty-codec-http@4.1.91.Final4.1.133.Final
LowRHSA-2025:22063cups@1:2.2.6-62.el8_101:2.2.6-64.el8_10
LowRHSA-2026:56219python3@3.6.8-70.el8_100:3.6.8-78.el8_10
LowGHSA-6fmv-xxpf-w3cwplexus-utils@3.3.03.6.1
LowRHSA-2026:0337openssl@1:1.1.1k-14.el8_61:1.1.1k-14.el8_10
LowRHSA-2025:14560python3@3.6.8-70.el8_100:3.6.8-71.el8_10
LowGHSA-pwqr-wmgm-9rr8netty-codec-http@4.1.91.Final4.1.132.Final
LowRHSA-2026:39320python3@3.6.8-70.el8_100:3.6.8-77.el8_10
LowGHSA-45q3-82m4-75jrnetty-handler-proxy@4.1.91.Final4.1.133.Final
LowRHSA-2025:13203libxml2@2.9.7-21.el8_10.10:2.9.7-21.el8_10.3
LowRHSA-2026:61766glib2@2.56.4-166.el8_100:2.56.4-177.el8_10
LowRHSA-2025:18286libssh@0.9.6-14.el80:0.9.6-15.el8_10
LowGHSA-c4c3-7fpv-j4q5netty-handler@4.1.91.Final4.1.137.Final
LowRHSA-2026:36728libtasn1@4.13-5.el8_100:4.13-6.el8_10
LowRHSA-2026:42090glib2@2.56.4-166.el8_100:2.56.4-170.el8_10
LowRHSA-2026:3042openssl@1:1.1.1k-14.el8_61:1.1.1k-15.el8_6
LowRHSA-2026:15953glib2@2.56.4-166.el8_100:2.56.4-169.el8_10
LowRHSA-2026:2389brotli@1.0.6-3.el80:1.0.6-4.el8_10
LowRHSA-2025:23383curl@7.61.1-34.el8_10.30:7.61.1-34.el8_10.9
LowGHSA-5jpm-x58v-624vnetty-codec-http@4.1.91.Final4.1.108.Final
LowRHSA-2025:14135libarchive@3.3.3-5.el80:3.3.3-6.el8_10
LowGHSA-3p8m-j85q-pgmjnetty-codec@4.1.91.Final4.1.125.Final
LowRHSA-2026:2128python3@3.6.8-70.el8_100:3.6.8-73.el8_10
LowGHSA-mj4r-2hfc-f8p6netty-codec@4.1.91.Final4.1.133.Final
LowRHSA-2026:22721expat@2.2.5-17.el8_100:2.5.0-2.el8_10
LowGHSA-c653-97m9-rcg9netty-handler@4.1.91.Final4.1.135.Final
LowGHSA-93wv-jw9v-4972netty-codec-http2@4.1.91.Final4.1.136.Final
LowGHSA-6jqx-86gh-f27wnetty-codec-http@4.1.91.Final4.1.136.Final
LowGHSA-mvh2-crg5-v77cnetty-codec-http@4.1.91.Final4.1.136.Final
LowGHSA-558v-64gr-wgg4netty-codec@4.1.91.Final4.1.136.Final
LowRHSA-2025:12450libxml2@2.9.7-21.el8_10.10:2.9.7-21.el8_10.2
LowRHSA-2026:57462curl@7.61.1-34.el8_10.30:7.61.1-34.el8_10.13
LowRHSA-2026:17481rsync@3.1.3-23.el8_100:3.1.3-25.el8_10
LowRHSA-2026:62218libssh@0.9.6-14.el80:0.9.6-17.el8_10
LowRHSA-2026:42887java-17-openjdk@1:17.0.16.0.8-2.el81:17.0.20.0.8-1.1.el8
LowRHSA-2026:0241libpng@2:1.6.34-5.el82:1.6.34-9.el8_10
LowRHSA-2026:0991glib2@2.56.4-166.el8_100:2.56.4-168.el8_10
LowRHSA-2025:18821java-17-openjdk@1:17.0.16.0.8-2.el81:17.0.17.0.10-1.el8
LowRHSA-2026:36733cups@1:2.2.6-62.el8_101:2.2.6-68.el8_10
LowRHSA-2026:4772glibc@2.28-251.el8_10.220:2.28-251.el8_10.31
LowRHSA-2026:16799krb5@1.18.2-32.el8_100:1.18.2-34.el8_10
LowGHSA-xxqh-mfjm-7mv9netty-codec-http@4.1.91.Final4.1.133.Final

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.17.15latest1 month ago1.18.019385892,05235,112

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/fiware/tm-forum-api.svg)](https://charts.stackradar.io/charts/fiware/tm-forum-api)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.