jasperreports Helm chart

Name: jasperreports Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helm-dojo

Scored 25 Sept 2026

JasperReports Server is a stand-alone and embeddable reporting server. It is a central information hub, with reporting and analytics that can be embedded into web and mobile applications.

Latest 8.0.0-v1.3app version 8-v1.3 0Artifact Hub

jasperreports 8.0.0-v1.3 deploys 2 container images: palopalepalo/jasperreports and bitnami/mariadb. Across the 1 measured, 421 findings — 5 critical, 21 high — 8 on CISA KEV. The highest contribution is BIT-tomcat-2025-24813 in tomcat 9.0.71-10, fixed in 9.0.99.

Radar Score

6,561521114281

421 findings over 1 of 2 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
palopalepalo/jasperreports	8-v1.3	521114281	6,561
bitnami/mariadb	10.6.12-debian-11-r9	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

281 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-6091	stdlib@go1.19.6	1.25.13
Low	GO-2025-3447	stdlib@go1.19.6	1.22.12
Low	GO-2025-4175	stdlib@go1.19.6	1.24.11
Low	GHSA-p26g-97m4-6q7c	jetty-server@9.4.39.v20210325	9.4.51.v20230217
Low	GHSA-h3qp-gqrc-q736	spring-webmvc@5.2.21.RELEASE	no fix listed
Low	GHSA-r68h-jhhj-9jvm	esapi@2.1.0.1	2.6.0.0
Low	GO-2026-4403	stdlib@go1.19.6	1.23.9
Low	GHSA-wxmm-q36w-r9xj	mariadb-java-client@2.5.3	2.7.14
Low	GHSA-jfvp-7x6p-h2pv	github.com/opencontainers/runc@v1.1.0	1.1.14
Low	GHSA-9f52-rjqv-25qv	spring-expression@5.2.21.RELEASE	no fix listed
Low	GHSA-4wp7-92pw-q264	spring-context@5.2.21.RELEASE	no fix listed
Low	GO-2026-4869	stdlib@go1.19.6	1.25.9
Low	GO-2026-4970	stdlib@go1.19.6	1.25.12
Low	GO-2026-4864	stdlib@go1.19.6	1.25.9
Low	GHSA-gg57-587f-h5v6	infinispan-commons@10.1.8.Final	14.0.25.Final
Low	GHSA-gg57-587f-h5v6	infinispan-core@10.1.8.Final	14.0.25.Final
Low	GO-2026-5024	golang.org/x/sys@v0.2.0	0.44.0
Low	DLA-4319-1	libxml2@2.9.10+dfsg-6.7+deb11u3	2.9.10+dfsg-6.7+deb11u9
Low	DLA-4437-1	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3
Low	GHSA-wjpw-4j6x-6rwh	jetty-http@9.4.39.v20210325	no fix listed
Low	GO-2026-4602	stdlib@go1.19.6	1.25.8
Low	GHSA-wg35-8jpf-2xv3	spring-webmvc@5.2.21.RELEASE	no fix listed
Low	DLA-3972-1	tzdata@2021a-1+deb11u8	2024b-0+deb11u1
Low	DLA-4016-1	ucf@3.0043	3.0043+deb11u2
Low	DLA-4085-1	tzdata@2021a-1+deb11u8	2025a-0+deb11u1
Low	DLA-4105-1	tzdata@2021a-1+deb11u8	2025b-0+deb11u1
Low	DLA-4213-1	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u15
Low	DLA-4403-1	tzdata@2021a-1+deb11u8	2025b-0+deb11u2
Low	DLA-4485-1	ca-certificates@20210119	20230311+deb12u1~deb11u1
Low	GHSA-xjvp-4fhw-gc47	github.com/opencontainers/runc@v1.1.0	1.3.6
Low	GHSA-m8cg-xc2p-r3fc	github.com/opencontainers/runc@v1.1.0	1.1.5

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
8.0.0-v1.3latest	—	8-v1.3	521114281	6,561

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helm-dojo/jasperreports.svg)](https://charts.stackradar.io/charts/helm-dojo/jasperreports)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.