StackRadar

nacos Helm chart

heidaodageshiwoVerified publisher

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 0.1.5 4 years agodeploys tag v2.1.0 0Artifact Hub

nacos 0.1.5 deploys 1 container image: nacos/nacos-server. Across them, 196 findings6 critical, 15 high 5 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.1.17.RELEASE, fixed in 2.5.12.

Radar Score

3,9786157996

196 findings over 1 of 1 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
nacos/nacos-serverv2.1.061579963,978

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

High findings

15 distinct across the version’s images

High: findings whose contribution to the Radar Score is 40–69. Show every band

SeverityAdvisoryPackageFixed in
HighGHSA-4wrc-f8pq-fpqpspring-web@5.1.18.RELEASE6.0.0
HighGHSA-wmwf-9ccg-fff5tomcat-embed-core@9.0.389.0.109
HighGHSA-h3gc-qfqq-6h8ftomcat-embed-core@9.0.389.0.106
HighGHSA-g5vr-rgqm-vf78spring-webmvc@5.1.18.RELEASEno fix listed
HighGHSA-76h9-2vwh-w278mina-core@2.0.0-RC12.0.27
HighGHSA-hfrx-6qgj-fp6ctomcat-embed-core@9.0.389.0.71
HighGHSA-qppj-fm5r-hxr3KEVtomcat-embed-core@9.0.389.0.81
HighGHSA-hh32-7344-cg2fspring-security-core@5.1.12.RELEASE5.4.11
HighGHSA-hh32-7344-cg2fspring-security-web@5.1.12.RELEASE5.4.11
HighGHSA-rvwf-54qp-4r6vsnakeyaml@1.231.26
HighGHSA-558x-2xjg-6232spring-expression@5.1.18.RELEASE5.2.20.RELEASE
HighGHSA-7w75-32cg-r6g2tomcat-embed-core@9.0.389.0.86
HighGHSA-j39c-c8hj-x4j3tomcat-embed-core@9.0.389.0.43
HighGHSA-27hp-xhwr-wr2mtomcat-embed-core@9.0.389.0.98
HighGHSA-cqqj-4p63-rrmmnetty-codec-http@4.1.42.Final4.1.44

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.5latest4 years agov2.1.061579963,978

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/heidaodageshiwo/nacos.svg)](https://charts.stackradar.io/charts/heidaodageshiwo/nacos)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.