nacos Helm chart
gujunxiangScored 14 Sept 2026
nacos-k8s
Latest 0.1.5 3 years agodeploys tag latest 2Artifact Hub
nacos 0.1.5 deploys 1 container image: nacos/nacos-server. Across them, 200 findings — 0 critical, 0 high. The highest contribution is GHSA-r29c-68gh-xp6x in tomcat-embed-core 10.1.54, fixed in 10.1.55.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
1 image
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| nacos/ | latest | 0019181 | 1,767 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
200 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-56404 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56405 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56408 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56406 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56407 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56410 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56411 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-78410 | util-linux | no fix listed |
| Low | GO-2026-5026 | stdlib | 1.25.13 |
| Low | UBUNTU-CVE-2026-78409 | util-linux | no fix listed |
| Low | GHSA-293q-567p-wmwq | spring-security-web | 6.5.11 |
| Low | UBUNTU-CVE-2026-70907 | openjdk-17 | no fix listed |
| Low | UBUNTU-CVE-2026-4360 | python3.14 | 3.14.4-1ubuntu0.2 |
| Low | UBUNTU-CVE-2026-56409 | expat | no fix listed |
| Low | GO-2026-5972 | stdlib | 1.25.13 |
| Low | GO-2026-6088 | stdlib | 1.25.13 |
| Low | GO-2026-6089 | stdlib | 1.25.13 |
| Low | GO-2026-6090 | stdlib | 1.25.13 |
| Low | UBUNTU-CVE-2026-35350 | rust-coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-13757 | p11-kit | no fix listed |
| Low | GO-2026-5942 | stdlib | 1.26.6 |
| Low | UBUNTU-CVE-2026-56132 | expat | no fix listed |
| Low | GO-2026-6218 | stdlib | 1.25.13 |
| Low | GHSA-957g-f97v-vppc | spring-webmvc | 6.2.19 |
| Low | UBUNTU-CVE-2026-15534 | perl | 5.40.1-7ubuntu0.2 |
| Low | UBUNTU-CVE-2026-56391 | coreutils | 9.7-3ubuntu2.1 |
| Low | UBUNTU-CVE-2026-56391 | coreutils-from | 9.7-3ubuntu2.1 |
| Low | UBUNTU-CVE-2026-35363 | rust-coreutils | no fix listed |
| Low | GHSA-cjpg-rgq5-fr37 | spring-webmvc | 6.2.19 |
| Low | GHSA-mhm7-754m-9p8w | jackson-databind | 2.21.5 |
| Low | UBUNTU-CVE-2026-35360 | rust-coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-18938 | p11-kit | no fix listed |
| Low | UBUNTU-CVE-2025-5278 | coreutils | 9.7-3ubuntu2.1 |
| Low | UBUNTU-CVE-2025-5278 | coreutils-from | 9.7-3ubuntu2.1 |
| Low | UBUNTU-CVE-2026-35364 | rust-coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-35348 | rust-coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-3184 | util-linux | 2.41.3-3ubuntu2.2 |
| Low | UBUNTU-CVE-2026-54370 | acl | no fix listed |
| Low | UBUNTU-CVE-2026-56412 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56131 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-50219 | expat | no fix listed |
| Low | UBUNTU-CVE-2025-15649 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-0864 | python3.14 | no fix listed |
| Low | GO-2026-6091 | stdlib | 1.25.13 |
| Low | UBUNTU-CVE-2024-56433 | shadow | no fix listed |
| Low | UBUNTU-CVE-2026-35374 | rust-coreutils | no fix listed |
| Low | GHSA-9m89-8frq-c98c | tomcat-embed-core | 10.1.55 |
| Low | UBUNTU-CVE-2026-18374 | glibc | no fix listed |
| Low | UBUNTU-CVE-2026-19499 | glibc | 2.43-2ubuntu2.4 |
| Low | UBUNTU-CVE-2026-19542 | glibc | 2.43-2ubuntu2.4 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/gujunxiang/nacos)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.