seata-server Helm chart
heidaodageshiwoVerified publisherScored 14 Sept 2026
Seata Server
Latest 1.0.0 4 years agodeploys tag 1.5.1 1Artifact Hub
seata-server 1.0.0 deploys 1 container image: seataio/seata-server. Across them, 266 findings — 12 critical, 18 high — 6 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webmvc 5.3.13, fixed in 5.3.18.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
1 image
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| seataio/ | 1.5.1 | 1218108128 | 5,624 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
266 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-grr4-wv38-f68w | jettison | 1.5.2 |
| Medium | GHSA-v682-8vv8-vpwr | tomcat-embed-websocket | 9.0.86 |
| Medium | GHSA-c4r9-r8fh-9vj2 | snakeyaml | 1.31 |
| Medium | GHSA-78wr-2p64-hpwj | commons-io | 2.14.0 |
| Medium | GHSA-3qp7-7mw8-wx86 | netty-handler | 4.1.135.Final |
| Medium | GHSA-f3jh-qvm4-mg39 | spring-security-core | 5.7.12 |
| Medium | ALPINE-CVE-2019-19242 | sqlite | 3.28.0-r2 |
| Medium | GHSA-98wm-3w3q-mw94 | snakeyaml | 1.31 |
| Medium | GHSA-673j-qm5f-xpv8 | postgresql | 42.3.3 |
| Medium | GHSA-h3x4-894j-xpx5 | tomcat-embed-core | 9.0.121 |
| Medium | GHSA-3x8x-79m2-3w2w | jackson-databind | 2.12.6 |
| Medium | GHSA-rmj7-2vxq-3g9f | jackson-databind | 2.18.8 |
| Medium | GHSA-wxqc-pxw9-g2p8 | spring-expression | 5.3.27 |
| Medium | ALPINE-CVE-2019-5094 | e2fsprogs | 1.44.5-r1 |
| Medium | GHSA-j3rv-43j4-c7qm | jackson-databind | 2.18.8 |
| Medium | GHSA-56h3-78gp-v83r | jettison | 1.5.1 |
| Medium | GHSA-4p6w-m9wc-c9c9 | ant | 1.10.8 |
| Medium | GHSA-xpmx-h7xq-xffh | apollo-core | 1.7.1 |
| Medium | GHSA-gcx9-497g-6cp6 | tomcat-embed-core | 9.0.121 |
| Medium | GHSA-prj3-ccx8-p6x4 | netty-codec-http2 | 4.1.124.Final |
| Medium | GHSA-5v34-g2px-j4fw | ant | 1.10.11 |
| Medium | GHSA-h46c-h94j-95f3 | jackson-core | 2.15.0 |
| Medium | GHSA-q6g2-g7f3-rr83 | jettison | 1.5.4 |
| Medium | GHSA-w37g-rhq8-7m4j | snakeyaml | 1.32 |
| Medium | GHSA-cm33-6792-r9fm | netty-codec-dns | 4.1.133.Final |
| Medium | GHSA-r936-gwx5-v52f | spring-webmvc | no fix listed |
| Medium | GHSA-q5r4-cfpx-h6fh | ant | 1.10.11 |
| Medium | GHSA-f6hv-jmp6-3vwv | netty-codec-http | 4.1.133.Final |
| Medium | GHSA-f6hv-jmp6-3vwv | netty-codec-http2 | 4.1.133.Final |
| Medium | GHSA-jppx-w49h-x2qq | netty-codec-http | 4.1.136.Final |
| Medium | GHSA-q6cq-mhr2-jmr5 | netty-codec-haproxy | 4.1.136.Final |
| Medium | GHSA-xf96-w227-r7c4 | spring-boot-autoconfigure | 2.5.15 |
| Medium | GHSA-mf92-479x-3373 | spring-security-web | no fix listed |
| Medium | GHSA-x4gw-5cx5-pgmh | netty-handler | 4.1.135.Final |
| Medium | GHSA-gx5v-xp9w-j4cg | tomcat-embed-core | 9.0.118 |
| Medium | GHSA-g5ww-5jh7-63cx | protobuf-java | 3.16.3 |
| Medium | GHSA-wx54-3278-m5g4 | spring-security-core | 5.5.7 |
| Medium | GHSA-2x2g-32r7-p4x8 | kafka-clients | 3.7.1 |
| Low | ALPINE-CVE-2018-1000654 | libtasn1 | 4.14-r0 |
| Low | GHSA-vmq6-5m68-f53m | logback-core | 1.2.13 |
| Low | GHSA-vmq6-5m68-f53m | logback-classic | 1.2.13 |
| Low | GHSA-g8pj-r55q-5c2v | tomcat-embed-core | 9.0.81 |
| Low | GHSA-6jv9-x5w9-2ccm | netty-codec-redis | 4.1.135.Final |
| Low | ALPINE-CVE-2019-5188 | e2fsprogs | 1.44.5-r2 |
| Low | GHSA-57rv-r2g8-2cj3 | netty-codec-http | 4.1.133.Final |
| Low | GHSA-4gg5-vx3j-xwc7 | protobuf-java | 3.16.3 |
| Low | ALPINE-CVE-2020-14363 | libx11 | 1.6.12-r0 |
| Low | GHSA-pwqr-wmgm-9rr8 | netty-codec-http | 4.1.132.Final |
| Low | GHSA-564r-hj7v-mcr5 | spring-expression | 5.3.26 |
| Low | GHSA-45q3-82m4-75jr | netty-handler-proxy | 4.1.133.Final |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/heidaodageshiwo/seata-server)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.