StackRadar

hive-metastore Helm chart

gradiant-bigdataVerified publisher

Scored 14 Sept 2026

The Apache Hive ™ data warehouse software facilitates reading, writing, and managing large datasets residing in distributed storage using SQL. Structure can be projected onto data already in storage. A command line tool and JDBC driver are provided to connect users to Hive.

Latest 0.1.3 5 years agodeploys tag 11.10.0-debian-10-r83 0Artifact Hub

hive-metastore 0.1.3 deploys 2 container images: bitnami/postgresql and bde2020/hive. Across the 1 measured, 283 findings — 10 critical, 27 high — 2 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.6.2, fixed in 2.12.2.

Radar Score

6,8821027142104

283 findings over 1 of 2 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
bitnami/postgresql11.10.0-debian-10-r83—unmeasured
bde2020/hive2.3.2-postgresql-metastore10271421046,882

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

142 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-9m6f-7xcq-8vf8jackson-databind@2.6.52.6.7.5
MediumGHSA-58jx-f5rf-qgqfhadoop-yarn-server-common@2.7.42.10.2
MediumGHSA-grg4-wf29-r9vvnetty@3.6.2.Finalno fix listed
MediumGHSA-wfcc-pff6-rgc5jetty-server@7.6.0.v201201279.2.22.v20170606
MediumGHSA-cf6r-3wgc-h863jackson-databind@2.6.52.6.7.3
MediumGHSA-p2v9-g2qv-p635netty@3.6.2.Finalno fix listed
MediumGHSA-cmfg-87vq-g5g4jackson-databind@2.6.52.6.7.3
MediumGHSA-xfv3-rrfm-f2rvnetty@3.6.2.Final3.9.8.Final
MediumGHSA-7vx9-xjhr-rw6hjetty-server@7.6.0.v201201279.2.27.v20190403
MediumGHSA-fj2m-w3wv-x9prcalcite-core@1.10.01.32.0
MediumGHSA-57j2-w4cx-62h2jackson-databind@2.6.52.12.6.1
MediumGHSA-2hw2-62cp-p9p7zookeeper@3.4.6-tests3.4.14
MediumGHSA-rpr3-cw39-3pxhjackson-databind@2.6.52.9.10.4
MediumDLA-2009-1tiff@4.0.3-12.3+deb8u54.0.3-12.3+deb8u10
MediumGHSA-3832-9276-x7gfcommons-httpclient@3.0.1no fix listed
MediumGHSA-cfh5-3ghh-wfjxhttpclient@4.2.54.3.5
MediumGHSA-g3wg-6mcf-8jj6jetty-webapp@7.6.0.v201201279.4.33.v20201020
MediumGHSA-7r82-7xv7-xcpjhttpclient@4.2.54.5.13
MediumGHSA-vx85-mj8c-4qm6libthrift@0.9.30.12.0
MediumGHSA-7286-pgfv-vxvhzookeeper@3.4.6-tests3.7.2
MediumGHSA-rrfq-g5fq-fc9chive-exec@2.3.22.3.4
MediumGHSA-jjjh-jjxp-wpffjackson-databind@2.6.52.12.7.1
MediumGHSA-rgv9-q543-rqg4jackson-databind@2.6.52.12.7.1
MediumGHSA-735f-pc8j-v9w8protobuf-java@2.5.03.25.5
MediumGHSA-3vrc-rrpw-r5pwjava-xmlbuilder@0.41.2
MediumGHSA-5m48-vr54-vmh3jersey-core@1.91.13
MediumDLA-1917-1curl@7.38.0-4+deb8u97.38.0-4+deb8u16
MediumGHSA-gwrp-pvrq-jmwvcommons-io@2.42.7
MediumGHSA-mvr2-9pj6-7w5jguava@11.0.224.1.1-android
MediumGHSA-v7wg-cpwc-24m4postgresql@9.4.1209.jre742.2.25
MediumGHSA-f256-j965-7f32netty@3.6.2.Finalno fix listed
MediumDLA-1833-1bzip2@1.0.6-7+b31.0.6-7+deb8u1
MediumDLA-1557-1tiff@4.0.3-12.3+deb8u54.0.3-12.3+deb8u7
MediumDLA-1637-1apt@1.0.9.8.41.0.9.8.5
MediumGHSA-xc67-hjx6-cgg6jetty-server@7.6.0.v201201279.2.28.v20190418
MediumGHSA-hrmr-f5m6-m9pqcommons-compress@1.91.18
MediumDLA-1672-1curl@7.38.0-4+deb8u97.38.0-4+deb8u14
MediumGHSA-vp98-w2p3-mv35log4j@1.2.172.0
MediumDSA-4140-1libvorbis@1.3.4-21.3.4-2+deb8u1
MediumGHSA-h24p-qwf4-84q8hadoop-common@2.7.42.8.1
MediumDLA-1568-1curl@7.38.0-4+deb8u97.38.0-4+deb8u13
MediumGHSA-rhrv-645h-fjfhavro@1.7.71.11.3
MediumDLA-1601-1perl@5.20.2-3+deb8u95.20.2-3+deb8u12
MediumGHSA-r38f-c4h4-hqq2postgresql@9.4.1209.jre742.2.26
MediumDLA-1730-3libssh2@1.4.3-4.1+deb8u11.4.3-4.1+deb8u4
MediumGHSA-qcwq-55hx-v3vhsnappy-java@1.0.4.11.1.10.1
MediumDSA-4136-1curl@7.38.0-4+deb8u97.38.0-4+deb8u10
MediumGHSA-wx5j-54mm-rqqqnetty@3.6.2.Finalno fix listed
MediumGHSA-qxp4-27vx-xmm3jetty-server@7.6.0.v201201278.1.0.RC4
MediumGHSA-7vpq-g998-qpv7netty@3.6.2.Final3.6.9.Final

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.3latest5 years ago11.10.0-debian-10-r8310271421046,882

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/gradiant-bigdata/hive-metastore.svg)](https://charts.stackradar.io/charts/gradiant-bigdata/hive-metastore)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.