seata-server Helm chart
heidaodageshiwoVerified publisherScored 14 Sept 2026
Seata Server
Latest 1.0.0 4 years agodeploys tag 1.5.1 1Artifact Hub
seata-server 1.0.0 deploys 1 container image: seataio/seata-server. Across them, 266 findings — 12 critical, 18 high — 6 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webmvc 5.3.13, fixed in 5.3.18.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
1 image
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| seataio/ | 1.5.1 | 1218108128 | 5,624 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
266 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-q4f6-jm68-57ww | netty-codec-http | 4.1.136.Final |
| Low | ALPINE-CVE-2020-28928 | musl | 1.1.20-r6 |
| Low | GHSA-w3c8-7r8f-9jp8 | spring-webmvc | 5.3.42 |
| Low | GHSA-6cqp-g7gg-8hr5 | netty-codec-http | 4.1.136.Final |
| Low | GHSA-m4cv-j2px-7723 | netty-codec-http | 4.1.133.Final |
| Low | GHSA-pr98-23f8-jwxv | logback-core | 1.3.15 |
| Low | GHSA-wf66-mphr-4c4r | kafka-clients | 3.9.2 |
| Low | GHSA-jhq6-gfmj-v8fx | logback-core | 1.5.34 |
| Low | GHSA-4gc7-5j7h-4qph | spring-web | no fix listed |
| Low | GHSA-4gc7-5j7h-4qph | spring-context | no fix listed |
| Low | GHSA-c2gf-v879-257j | netty-codec-http2 | 4.1.135.Final |
| Low | GHSA-4g9r-vxhx-9pgx | commons-compress | 1.26.0 |
| Low | GHSA-84h7-rjj3-6jx4 | netty-codec-http | 4.1.129.Final |
| Low | GHSA-xmv7-r254-6q78 | netty-resolver-dns | 4.1.135.Final |
| Low | GHSA-4773-3jfm-qmx3 | spring-webmvc | no fix listed |
| Low | GHSA-p9jm-q85p-7mcp | netty-codec-redis | 4.1.136.Final |
| Low | GHSA-jfg9-48mv-9qgx | netty-codec-mqtt | 4.1.133.Final |
| Low | GHSA-c69g-56f8-xwqj | netty-codec-http2 | 4.1.136.Final |
| Low | GHSA-72pg-x5f8-j25j | spring-webmvc | no fix listed |
| Low | GHSA-mq64-j8f9-9gcj | spring-webmvc | no fix listed |
| Low | GHSA-38f8-5428-x5cv | netty-codec-http | 4.1.133.Final |
| Low | GHSA-xq3w-v528-46rv | netty-common | 4.1.115.Final |
| Low | GHSA-6gf2-pvqw-37ph | spring-core | 5.3.14 |
| Low | GHSA-8c42-7qj2-3j46 | netty-codec-http | 4.1.137.Final |
| Low | GHSA-r7wm-3cxj-wff9 | jackson-core | 2.18.8 |
| Low | GHSA-3g8r-4pfx-jmfh | netty-codec-stomp | 4.1.136.Final |
| Low | GHSA-389x-839f-4rhx | netty-common | 4.1.118.Final |
| Low | GHSA-4mp9-239f-g9hg | netty-codec-http | 4.1.136.Final |
| Low | GHSA-rgrr-p7gp-5xj7 | netty-codec-redis | 4.1.133.Final |
| Low | GHSA-3chg-m5w7-qfv5 | spring-webmvc | no fix listed |
| Low | GHSA-hgj6-7826-r7m5 | jackson-databind | 2.18.8 |
| Low | GHSA-wxpp-56q6-5pcg | spring-expression | no fix listed |
| Low | GHSA-5jmj-h7xm-6q6v | jackson-databind | 2.18.9 |
| Low | GHSA-6p4f-wcwh-5vvm | spring-webmvc | no fix listed |
| Low | GHSA-mfg7-5gfp-c4w3 | netty-codec-dns | 4.1.136.Final |
| Low | GHSA-x2r2-rvhq-2mqv | spring-security-web | no fix listed |
| Low | GHSA-wwpq-f5c3-7hvx | spring-boot | no fix listed |
| Low | GHSA-gcjf-9mgh-3p7g | netty-codec-http | 4.1.136.Final |
| Low | GHSA-v8h7-rr48-vmmv | netty-codec-http | 4.1.133.Final |
| Low | GHSA-9cmq-m9j5-mvww | spring-expression | 5.3.39 |
| Low | GHSA-563q-j3cm-6jxm | netty-codec-http2 | 4.1.135.Final |
| Low | GHSA-5x3r-wrvg-rp6q | netty-codec-http2 | 4.1.135.Final |
| Low | GHSA-xpw8-rcwv-8f8p | netty-codec-http2 | 4.1.100.Final |
| Low | GHSA-293q-567p-wmwq | spring-security-web | no fix listed |
| Low | GHSA-q3v6-hm2v-pw99 | spring-security-core | 5.7.14 |
| Low | GHSA-7g45-4rm6-3mm3 | guava | 32.0.0-android |
| Low | GHSA-25qh-j22f-pwp8 | logback-core | 1.3.16 |
| Low | GHSA-5mg8-w23w-74h3 | guava | 32.0.0-android |
| Low | GHSA-hvcg-qmg6-jm4c | netty-codec-http | 4.1.135.Final |
| Low | GHSA-957g-f97v-vppc | spring-webmvc | no fix listed |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/heidaodageshiwo/seata-server)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.