StackRadar

jasperreports 8.0.0-v1.3 Helm chart

helm-dojo

Scored 25 Sept 2026

JasperReports Server is a stand-alone and embeddable reporting server. It is a central information hub, with reporting and analytics that can be embedded into web and mobile applications.

Version 8.0.0-v1.3app version 8-v1.3 0Artifact Hub

jasperreports 8.0.0-v1.3 deploys 2 container images: palopalepalo/jasperreports and bitnami/mariadb. Across the 1 measured, 421 findings — 5 critical, 21 high — 8 on CISA KEV. The highest contribution is BIT-tomcat-2025-24813 in tomcat 9.0.71-10, fixed in 9.0.99.

Radar Score

6,561521114281

421 findings over 1 of 2 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
palopalepalo/jasperreports8-v1.35211142816,561
bitnami/mariadb10.6.12-debian-11-r9—unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

114 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-25xr-qj8w-c4vftomcat-coyote@9.0.719.0.107
MediumGHSA-hh26-6xwr-ggv7spring-beans@5.2.21.RELEASE5.2.22.RELEASE
MediumBIT-tomcat-2025-52434tomcat@9.0.71-109.0.107
MediumGHSA-4j3c-42xv-3f84tomcat-coyote@9.0.719.0.107
MediumGHSA-8297-v2rf-2p32mina-core@2.1.62.1.11
MediumGHSA-r38f-c4h4-hqq2postgresql@42.3.542.3.7
MediumBIT-tomcat-2026-65905tomcat@9.0.71-109.0.121
MediumGHSA-v3pr-hxpr-mfm8mina-core@2.1.62.1.13
MediumGHSA-vf5j-865m-mq7cmina-core@2.1.62.1.12
MediumBIT-tomcat-2024-38286tomcat@9.0.71-109.0.90
MediumGHSA-995c-6rp3-4m4xmina-core@2.1.62.1.12
MediumGHSA-f2wh-grmh-r6jmmina-core@2.1.62.1.11
MediumGHSA-rmj7-2vxq-3g9fjackson-databind@2.13.2.22.18.8
MediumGHSA-pvp8-3xj6-8c6xcommons-configuration@1.10no fix listed
MediumGHSA-2wrp-6fg6-hmc5spring-web@5.2.21.RELEASE5.3.34
MediumGHSA-j288-q9x7-2f5vcommons-lang3@3.03.18.0
MediumGHSA-j288-q9x7-2f5vcommons-lang@2.5no fix listed
MediumGHSA-8grg-q944-cch5hibernate-core@5.2.12.Final5.3.18
MediumBIT-tomcat-2024-23672tomcat@9.0.71-108.5.99
MediumGHSA-v682-8vv8-vpwrtomcat-websocket@9.0.719.0.86
MediumGHSA-qw4h-3xjj-84cctiles-core@3.0.7no fix listed
MediumGHSA-xjp4-hw94-mvp5commons-configuration2@2.72.10.1
MediumGHSA-cgp8-4m63-fhh5commons-net@3.33.9.0
MediumGHSA-78wr-2p64-hpwjcommons-io@2.8.02.14.0
MediumGHSA-j3rv-43j4-c7qmjackson-databind@2.13.2.22.18.8
MediumGHSA-355h-qmc2-wpwfjetty-http@9.4.39.v202103259.4.60
MediumGHSA-f3jh-qvm4-mg39spring-security-core@4.2.19.RELEASE5.7.12
MediumBIT-mysql-client-2026-44172mysql-client@10.6.12-110.6.17
MediumGHSA-2p5w-cvg5-gc5chibernate-core@5.2.12.Finalno fix listed
MediumBIT-mysql-client-2026-44168mysql-client@10.6.12-110.6.26
MediumBIT-tomcat-2026-43515tomcat@9.0.71-1010.1.55
MediumGHSA-qw69-rqj8-6qw8jetty-server@9.4.39.v202103259.4.51.v20230217
MediumBIT-tomcat-2026-68525tomcat@9.0.71-109.0.121
MediumGHSA-9w38-p64v-xpmvcommons-configuration2@2.72.10.1
MediumGHSA-3x8x-79m2-3w2wjackson-databind@2.11.12.12.6
MediumGHSA-wxqc-pxw9-g2p8spring-expression@5.2.21.RELEASE5.2.24.RELEASE
MediumGHSA-h46c-h94j-95f3jackson-core@2.13.22.15.0
MediumGHSA-493p-pfq6-5258json-smart@2.4.72.4.9
MediumBIT-tomcat-2026-59083tomcat@9.0.71-109.0.120
MediumBIT-tomcat-2026-53434tomcat@9.0.71-109.0.101
MediumBIT-tomcat-2026-55276tomcat@9.0.71-109.0.119
MediumBIT-tomcat-2026-59084tomcat@9.0.71-109.0.120
MediumGHSA-5568-6qcg-g7fxactivemq-client@5.16.25.19.4
MediumBIT-mysql-client-2026-44173mysql-client@10.6.12-110.6.26
MediumGHSA-4p6w-m9wc-c9c9ant@1.9.41.9.15
MediumGHSA-5v34-g2px-j4fwant@1.9.41.9.16
MediumGHSA-9wxq-mwqw-8hhgjasperreports@6.20.07.0.7
MediumGHSA-8wv5-x4w7-5gwwlibthrift@0.14.10.24.0
MediumBIT-tomcat-2026-65182tomcat@9.0.71-109.0.121
MediumGHSA-q5r4-cfpx-h6fhant@1.9.41.9.16

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
8.0.0-v1.3latest—8-v1.35211142816,561

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/helm-dojo/jasperreports.svg)](https://charts.stackradar.io/charts/helm-dojo/jasperreports)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 25 Sept 2026 · scanned 25 Sept 2026 · advisories as of 25 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.