tm-forum-api Helm chart

Name: tm-forum-api Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

fiware

Scored 14 Sept 2026

A Helm chart for running the FIWARE TMForum-APIs

Latest 0.17.15 1 month agoapp version 1.18.0 0Artifact Hub

tm-forum-api 0.17.15 deploys 19 container images: quay.io/fiware/tmforum-party-catalog, quay.io/fiware/tmforum-customer-bill-management, quay.io/fiware/tmforum-customer-management, quay.io/fiware/tmforum-product-catalog and 15 more. Across them, 2,698 findings — 19 critical, 38 high. The highest contribution is GHSA-mjmj-j48q-9wg2 in snakeyaml 1.32, fixed in 2.0. Chart.yaml declares kubeVersion >= 1.19-0; rendered for Kubernetes 1.19.0.

Radar Score

35,11219385892,052

2,698 findings over 19 of 19 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

19 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/fiware/tmforum-party-catalog	1.18.0	1231108	1,848
quay.io/fiware/tmforum-customer-bill-management	1.18.0	1231108	1,848
quay.io/fiware/tmforum-customer-management	1.18.0	1231108	1,848
quay.io/fiware/tmforum-product-catalog	1.18.0	1231108	1,848
quay.io/fiware/tmforum-product-inventory	1.18.0	1231108	1,848
quay.io/fiware/tmforum-product-ordering-management	1.18.0	1231108	1,848
quay.io/fiware/tmforum-resource-catalog	1.18.0	1231108	1,848
quay.io/fiware/tmforum-resource-function-activation	1.18.0	1231108	1,848
quay.io/fiware/tmforum-resource-inventory	1.18.0	1231108	1,848
quay.io/fiware/tmforum-service-catalog	1.18.0	1231108	1,848
quay.io/fiware/tmforum-service-inventory	1.18.0	1231108	1,848
quay.io/fiware/tmforum-account	1.18.0	1231108	1,848
quay.io/fiware/tmforum-agreement	1.18.0	1231108	1,848
quay.io/fiware/tmforum-party-role	1.18.0	1231108	1,848
quay.io/fiware/tmforum-usage-management	1.18.0	1231108	1,848
quay.io/fiware/tmforum-quote	1.18.0	1231108	1,848
quay.io/fiware/tmforum-resource-order-management	1.18.0	1231108	1,848
quay.io/fiware/tmforum-service-order-management	1.18.0	1231108	1,848
quay.io/fiware/tmforum-software-management	1.18.0	1231108	1,848

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

108 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-fccg-mwvh-qqg4	netty-handler@4.1.91.Final	4.1.137.Final
Low	RHSA-2026:6473	python3@3.6.8-70.el8_10	0:3.6.8-75.el8_10
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.91.Final	4.1.136.Final
Low	RHSA-2026:36730	libsolv@0.7.20-6.el8	0:0.7.20-7.el8_10
Low	GHSA-6cqp-g7gg-8hr5	netty-codec-http@4.1.91.Final	4.1.136.Final
Low	RHSA-2026:42733	glibc@2.28-251.el8_10.22	0:2.28-251.el8_10.40
Low	GHSA-m4cv-j2px-7723	netty-codec-http@4.1.91.Final	4.1.133.Final
Low	RHSA-2026:0596	cups@1:2.2.6-62.el8_10	1:2.2.6-66.el8_10
Low	RHSA-2026:5585	gnutls@3.6.16-8.el8_10.3	0:3.6.16-8.el8_10.5
Low	RHSA-2026:55781	java-17-openjdk@1:17.0.16.0.8-2.el8	1:17.0.20.1.1-1.1.el8
Low	GHSA-pr98-23f8-jwxv	logback-core@1.2.11	1.3.15
Low	GHSA-jhq6-gfmj-v8fx	logback-core@1.2.11	1.5.34
Low	GHSA-h35f-9h28-mq5c	setuptools@39.2.0	83.0.0
Low	GHSA-c2gf-v879-257j	netty-codec-http2@4.1.91.Final	4.1.135.Final
Low	GHSA-84h7-rjj3-6jx4	netty-codec-http@4.1.91.Final	4.1.129.Final
Low	RHSA-2026:66451	glib2@2.56.4-166.el8_10	0:2.56.4-178.el8_10
Low	RHSA-2026:58938	sqlite@3.26.0-20.el8_10	0:3.26.0-21.el8_10
Low	RHSA-2026:47117	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10
Low	GHSA-c69g-56f8-xwqj	netty-codec-http2@4.1.91.Final	4.1.136.Final
Low	RHSA-2026:0728	gnupg2@2.2.20-3.el8_6	0:2.2.20-4.el8_10
Low	GHSA-38f8-5428-x5cv	netty-codec-http@4.1.91.Final	4.1.133.Final
Low	GHSA-xq3w-v528-46rv	netty-common@4.1.91.Final	4.1.115.Final
Low	GHSA-8c42-7qj2-3j46	netty-codec-http@4.1.91.Final	4.1.137.Final
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.14.2	2.18.8
Low	GHSA-389x-839f-4rhx	netty-common@4.1.91.Final	4.1.118.Final
Low	RHSA-2026:33126	glibc@2.28-251.el8_10.22	0:2.28-251.el8_10.38
Low	GHSA-4mp9-239f-g9hg	netty-codec-http@4.1.91.Final	4.1.136.Final
Low	RHSA-2026:13285	libcap@2.48-6.el8_9	0:2.48-6.el8_10.1
Low	RHSA-2026:64809	expat@2.2.5-17.el8_10	0:2.5.0-2.el8_10.2
Low	RHSA-2026:20587	glibc@2.28-251.el8_10.22	0:2.28-251.el8_10.37
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.14.2	2.18.8
Low	RHSA-2026:43420	acl@2.2.53-3.el8	0:2.4.0-1.el8_10
Low	RHSA-2025:21977	libssh@0.9.6-14.el8	0:0.9.6-16.el8_10
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.14.2	2.18.9
Low	GHSA-gcjf-9mgh-3p7g	netty-codec-http@4.1.91.Final	4.1.136.Final
Low	GHSA-v8h7-rr48-vmmv	netty-codec-http@4.1.91.Final	4.1.133.Final
Low	GHSA-563q-j3cm-6jxm	netty-codec-http2@4.1.91.Final	4.1.135.Final
Low	RHSA-2026:1852	util-linux@2.32.1-46.el8	0:2.32.1-48.el8_10
Low	GHSA-5x3r-wrvg-rp6q	netty-codec-http2@4.1.91.Final	4.1.135.Final
Low	GHSA-387m-935m-c4vw	micronaut-http-client@3.9.1	3.10.7
Low	GHSA-xpw8-rcwv-8f8p	netty-codec-http2@4.1.91.Final	4.1.100.Final
Low	GHSA-7g45-4rm6-3mm3	guava@31.0.1-jre	32.0.0-android
Low	GHSA-25qh-j22f-pwp8	logback-core@1.2.11	1.3.16
Low	RHSA-2026:55804	nghttp2@1.33.0-6.el8_10.1	0:1.33.0-6.el8_10.3
Low	RHSA-2026:11349	libxml2@2.9.7-21.el8_10.1	0:2.9.7-21.el8_10.4
Low	RHSA-2026:56133	attr@2.4.48-3.el8	0:2.6.0-1.el8_10
Low	GHSA-5mg8-w23w-74h3	guava@31.0.1-jre	32.0.0-android
Low	GHSA-hvcg-qmg6-jm4c	netty-codec-http@4.1.91.Final	4.1.135.Final
Low	GHSA-q6gh-6v2r-hjv3	micronaut-http-client@3.9.1	3.10.6
Low	RHSA-2026:6436	rsync@3.1.3-23.el8_10	0:3.1.3-24.el8_10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.17.15latest	1 month ago	1.18.0	19385892,052	35,112

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/fiware/tm-forum-api.svg)](https://charts.stackradar.io/charts/fiware/tm-forum-api)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.