StackRadar

seata-server 1.0.0 Helm chart

heidaodageshiwoVerified publisher

Scored 14 Sept 2026

Seata Server

Version 1.0.0 4 years agodeploys tag 1.5.1 1Artifact Hub

seata-server 1.0.0 deploys 1 container image: seataio/seata-server. Across them, 266 findings12 critical, 18 high 6 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webmvc 5.3.13, fixed in 5.3.18.

Radar Score

5,6241218108128

266 findings over 1 of 1 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
seataio/seata-server1.5.112181081285,624

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

108 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-cx7f-g6mp-7hqmspring-webmvc@5.3.13no fix listed
MediumGHSA-mc84-pj99-q6hhcommons-compress@1.191.21
MediumGHSA-crv7-7245-f45fcommons-compress@1.191.21
MediumGHSA-2g86-r6w2-wqqrnacos-client@1.4.2no fix listed
MediumGHSA-7hfm-57qf-j43qcommons-compress@1.191.21
MediumGHSA-j563-grx4-pjpvxstream@1.4.191.4.20
MediumGHSA-24rp-q3w6-vc56postgresql@42.1.442.2.28
MediumGHSA-xqfj-vm6h-2x34commons-compress@1.191.21
MediumALPINE-CVE-2019-5018sqlite@3.26.0-r33.28.0-r0
MediumGHSA-f62v-xpxf-3v68ant@1.10.61.10.9
MediumGHSA-7phw-cxx7-q9vqspring-webmvc@5.3.135.3.26
MediumALPINE-CVE-2019-14697musl@1.1.20-r41.1.20-r5
MediumGHSA-g5mm-vmx4-3rg7spring-context@5.3.135.3.19
MediumALPINE-CVE-2019-1551openssl@1.1.1b-r11.1.1d-r2
MediumGHSA-ccgv-vj62-xf9hspring-web@5.3.135.3.32
MediumGHSA-57j2-w4cx-62h2jackson-databind@2.11.42.12.6.1
MediumGHSA-wm9w-rjj3-j356tomcat-embed-core@9.0.559.0.90
MediumGHSA-88cc-g835-76rppostgresql@42.1.442.2.13
MediumALPINE-CVE-2020-28196krb5@1.15.5-r01.15.5-r1
MediumALPINE-CVE-2020-11655sqlite@3.26.0-r33.28.0-r3
MediumALPINE-CVE-2021-23841openssl@1.1.1b-r11.1.1j-r0
MediumGHSA-gqp3-2cvr-x8m3tomcat-embed-core@9.0.559.0.108
MediumGHSA-r29c-68gh-xp6xtomcat-embed-core@9.0.559.0.118
MediumALPINE-CVE-2020-1971openssl@1.1.1b-r11.1.1i-r0
MediumALPINE-CVE-2019-19244sqlite@3.26.0-r33.28.0-r2
MediumGHSA-q3mw-pvr8-9ggctomcat-embed-core@9.0.559.0.80
MediumGHSA-hgjh-9rj2-g67jspring-web@5.3.135.3.33
MediumGHSA-c4q5-6c82-3qpwspring-security-web@5.4.95.7.13
MediumGHSA-7286-pgfv-vxvhzookeeper@3.5.93.7.2
MediumGHSA-668q-qrv7-99fmlogback-core@1.2.71.2.9
MediumGHSA-jjjh-jjxp-wpffjackson-databind@2.11.42.12.7.1
MediumGHSA-rgv9-q543-rqg4jackson-databind@2.11.42.12.7.1
MediumGHSA-735f-pc8j-v9w8protobuf-java@3.7.13.25.5
MediumALPINE-CVE-2019-16168sqlite@3.26.0-r33.28.0-r1
MediumALPINE-CVE-2019-2201libjpeg-turbo@1.5.3-r41.5.3-r6
MediumGHSA-h6fc-48rj-7qqhtomcat-embed-core@9.0.559.0.118
MediumGHSA-3mc7-4q67-w48msnakeyaml@1.271.31
MediumGHSA-fccv-jmmp-qg76tomcat-embed-core@9.0.559.0.83
MediumGHSA-7jqf-v358-p8g7tomcat-embed-core@9.0.559.0.90
MediumGHSA-rq2w-37h9-vg94tomcat-embed-core@9.0.559.0.69
MediumGHSA-jq43-27x9-3v86netty-codec-smtp@4.1.70.Final4.1.128.Final
MediumGHSA-v7wg-cpwc-24m4postgresql@42.1.442.2.25
MediumGHSA-f8cc-g7j8-xxpmxstream@1.4.191.4.20
MediumALPINE-CVE-2019-1549openssl@1.1.1b-r11.1.1d-r0
MediumGHSA-wc4r-xq3c-5cf3tomcat-embed-core@9.0.559.0.106
MediumGHSA-r6j3-px5g-cq3xtomcat-embed-core@9.0.559.0.81
MediumGHSA-wr62-c79q-cv37tomcat-embed-core@9.0.559.0.107
MediumGHSA-5m62-pw8w-7w9ftomcat-embed-core@9.0.559.0.118
MediumALPINE-CVE-2018-14498libjpeg-turbo@1.5.3-r41.5.3-r5
MediumGHSA-hfq9-hggm-c56qxstream@1.4.191.4.21

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.0latest4 years ago1.5.112181081285,624

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/heidaodageshiwo/seata-server.svg)](https://charts.stackradar.io/charts/heidaodageshiwo/seata-server)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.