StackRadar

backstage Helm chart

helm-charts-nr

Scored 14 Sept 2026

A Helm chart for Backstage

Latest 0.1.15 1 year agodeploys tag test1 0Artifact Hub

backstage 0.1.15 deploys 2 container images: martinaif/backstage-k8s-demo-backend and martinaif/backstage-k8s-demo-frontend. Across them, 513 findings — 0 critical, 20 high — 6 on CISA KEV. The highest contribution is GHSA-c4w7-xm78-47vh in y18n 4.0.0, fixed in 4.0.1.

Radar Score

8,213020169324

513 findings over 2 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
martinaif/backstage-k8s-demo-backendtest10171402606,676
martinaif/backstage-k8s-demo-frontendtest10329641,537

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

140 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-jr5f-v2jv-69x6axios@0.20.00.30.0
MediumGHSA-95m3-7q98-8xr5sha.js@2.4.112.4.12
MediumGHSA-4p35-cfcx-8653parse-url@5.0.16.0.1
MediumGHSA-4w2v-q235-vp99axios@0.20.00.21.1
MediumGHSA-5gfm-wpxj-wjgqnode-forge@0.9.01.3.2
MediumGHSA-257v-vj4p-3w2hcolor-string@1.5.31.5.5
MediumGHSA-x4jg-mjrx-434gnode-forge@0.9.01.3.0
MediumDSA-4807-1openssl@1.1.1d-0+deb10u31.1.1d-0+deb10u4
MediumGHSA-f23m-r3pf-42rhlodash-es@4.17.154.18.0
MediumGHSA-f23m-r3pf-42rhlodash@4.17.154.18.0
MediumGHSA-xxjr-mmjv-4gpglodash@4.17.154.17.23
MediumGHSA-xxjr-mmjv-4gpglodash-es@4.17.154.17.23
MediumGHSA-4jv9-3563-23j3knex@0.21.52.4.0
MediumGHSA-c7qv-q95q-8v27http-proxy-middleware@0.19.22.0.7
MediumGHSA-2v35-w6hq-6mfwxmldom@0.1.27no fix listed
MediumGHSA-6fc8-4gx4-v693ws@6.2.16.2.2
MediumDLA-3530-1openssl@1.1.1d-0+deb10u31.1.1n-0+deb10u6
MediumDLA-3213-1krb5@1.17-31.17-3+deb10u5
MediumGHSA-v88g-cgmw-v5xwajv@5.5.26.12.3
MediumDLA-3613-1curl@7.64.0-4+deb10u17.64.0-4+deb10u7
MediumGHSA-37ch-88jc-xwx2path-to-regexp@0.1.70.1.13
MediumGHSA-9wv6-86v2-598jpath-to-regexp@0.1.70.1.10
MediumGHSA-8cj5-5rvv-wf4vtar-fs@2.0.12.1.3
MediumGHSA-3mfm-83xf-c92rhandlebars@4.7.64.7.9
MediumGHSA-xhpv-hc6g-r9c6handlebars@4.7.64.7.9
MediumGHSA-5fg8-2547-mr8qxmldom@0.1.27no fix listed
MediumDLA-3175-1python3.7@3.7.3-2+deb10u23.7.3-2+deb10u4
MediumGHSA-4mxg-3p6v-xgq3passport-saml@1.3.3no fix listed
MediumGHSA-3xgq-45jj-v275cross-spawn@7.0.37.0.5
MediumGHSA-p92q-9vqr-4j8vaxios@0.20.00.32.0
MediumGHSA-vj76-c3g6-qr5vtar-fs@2.0.12.1.4
MediumGHSA-pfrx-2q88-qq97got@11.6.011.8.5
MediumDSA-4776-1mariadb-10.3@1:10.3.23-0+deb10u11:10.3.25-0+deb10u1
MediumGHSA-qwcr-r2fm-qrc7body-parser@1.19.01.20.3
MediumGHSA-3j8f-xvm3-ffx4parse-path@4.0.15.0.0
MediumGHSA-f6ww-3ggp-fr8hxmldom@0.1.27no fix listed
MediumDLA-3152-1glibc@2.28-102.28-10+deb10u2
MediumGHSA-96hv-2xvq-fx4pws@6.2.16.2.4
MediumGHSA-3ppc-4f35-3m26minimatch@3.0.43.1.3
MediumGHSA-pf86-5x62-jrwfaxios@0.20.00.31.1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.15latest1 year agotest10201693248,213

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/helm-charts-nr/backstage.svg)](https://charts.stackradar.io/charts/helm-charts-nr/backstage)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 13 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.