StackRadar

backstage 0.1.15 Helm chart

helm-charts-nr

Scored 14 Sept 2026

A Helm chart for Backstage

Version 0.1.15 1 year agodeploys tag test1 0Artifact Hub

backstage 0.1.15 deploys 2 container images: martinaif/backstage-k8s-demo-backend and martinaif/backstage-k8s-demo-frontend. Across them, 513 findings0 critical, 20 high 6 on CISA KEV. The highest contribution is GHSA-c4w7-xm78-47vh in y18n 4.0.0, fixed in 4.0.1.

Radar Score

8,213020169324

513 findings over 2 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
martinaif/backstage-k8s-demo-backendtest10171402606,676
martinaif/backstage-k8s-demo-frontendtest10329641,537

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

263 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGHSA-m7pr-hjqh-92cmaxios@0.20.00.31.1
LowDLA-3767-1imagemagick@8:6.9.10.23+dfsg-2.1+deb10u18:6.9.10.23+dfsg-2.1+deb10u7
LowGHSA-h5c3-5r3r-rr8q@octokit/plugin-paginate-rest@1.1.29.2.2
LowGHSA-xx4v-prfh-6cgc@octokit/request-error@1.2.15.1.1
LowDSA-4997-1tiff@4.1.0+git191117-2~deb10u14.1.0+git191117-2~deb10u3
LowDLA-3332-1apr-util@1.6.1-41.6.1-4+deb10u1
LowDLA-3321-1gnutls28@3.6.7-4+deb10u53.6.7-4+deb10u10
LowDLA-3513-1tiff@4.1.0+git191117-2~deb10u14.1.0+git191117-2~deb10u8
LowGHSA-6gmq-8vp8-gcm6xmldom@0.1.27no fix listed
LowGHSA-mmx7-hfxf-jppxaxios@0.20.00.33.0
LowDLA-3371-1unbound@1.9.0-2+deb10u21.9.0-2+deb10u3
LowDLA-3167-1ncurses@6.1+20181013-2+deb10u26.1+20181013-2+deb10u3
LowMAL-2022-4691monorepo-symlink-test@0.0.0no fix listed
LowMAL-2022-4933npm-cli-docs@0.1.0no fix listed
LowMAL-2025-41980example-backend@0.1.1-alpha.23no fix listed
LowDLA-3850-1glibc@2.28-102.28-10+deb10u4
LowDLA-3459-1libxpm@1:3.5.12-11:3.5.12-1+deb10u1
LowDLA-3660-1gnutls28@3.6.7-4+deb10u53.6.7-4+deb10u11
LowGHSA-65ch-62r8-g69gnode-forge@0.9.01.3.2
LowDLA-3107-1sqlite3@3.27.2-33.27.2-3+deb10u2
LowGHSA-cm22-4g7w-348pserve-static@1.14.11.16.0
LowGHSA-5j94-f3mf-8685@backstage/plugin-techdocs-backend@0.1.1-alpha.231.10.13
LowDSA-5014-1icu@63.1-6+deb10u163.1-6+deb10u2
LowGHSA-p9pc-299p-vxgpyargs-parser@9.0.213.1.2
LowDLA-3422-1postgresql-11@11.7-0+deb10u111.20-0+deb10u1
LowGHSA-gvwx-54wh-qm9jtar@2.2.27.5.17
LowGHSA-qp4c-xg64-7c6x@backstage/plugin-auth-backend@0.1.1-alpha.230.27.1
LowDLA-3338-1git@1:2.20.1-2+deb10u31:2.20.1-2+deb10u8
LowGHSA-qc4v-xq2m-65wc@backstage/plugin-app-backend@0.1.1-alpha.230.3.75
LowDLA-3405-1libxml2@2.9.4+dfsg1-7+b32.9.4+dfsg1-7+deb10u6
LowGHSA-m6fv-jmcg-4jfgsend@0.17.10.19.0
LowGHSA-w9j2-pvgh-6h63axios@0.20.00.31.1
LowDLA-3377-1systemd@241-7~deb10u4241-7~deb10u9
LowDLA-3676-1libde265@1.0.3-1+b11.0.11-0+deb10u5
LowGHSA-3v7f-55p6-f55ppicomatch@2.2.22.3.2
LowDLA-3439-1libwebp@0.6.1-20.6.1-2+deb10u2
LowGHSA-qw6h-vgh9-j6wxexpress@4.17.14.20.0
LowGHSA-mh29-5h37-fv8mjs-yaml@3.14.03.14.2
LowDLA-3737-1imagemagick@8:6.9.10.23+dfsg-2.1+deb10u18:6.9.10.23+dfsg-2.1+deb10u6
LowGHSA-7q8q-rj6j-mhjqaxios@0.20.00.33.0
LowGHSA-h67p-54hq-rp68js-yaml@3.14.03.15.0
LowDLA-3699-1libde265@1.0.3-1+b11.0.11-0+deb10u6
LowGHSA-3jxr-9vmj-r5cpbrace-expansion@1.1.111.1.16
LowGHSA-vmf3-w455-68vhtar@2.2.27.5.16
LowDLA-3352-1libde265@1.0.3-1+b11.0.11-0+deb10u4
LowGHSA-4vj7-5mj6-jm8mmorgan@1.10.01.11.0
LowDLA-3583-1glib2.0@2.58.3-2+deb10u22.58.3-2+deb10u5
LowGHSA-5c9x-8gcm-mpgxaxios@0.20.00.31.1
LowGHSA-vf2m-468p-8v99axios@0.20.00.31.1
LowDLA-3814-1glib2.0@2.58.3-2+deb10u22.58.3-2+deb10u6

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.15latest1 year agotest10201693248,213

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/helm-charts-nr/backstage.svg)](https://charts.stackradar.io/charts/helm-charts-nr/backstage)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 13 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.