StackRadar

jasperreports Helm chart

helm-dojo

Scored 25 Sept 2026

JasperReports Server is a stand-alone and embeddable reporting server. It is a central information hub, with reporting and analytics that can be embedded into web and mobile applications.

Latest 8.0.0-v1.3app version 8-v1.3 0Artifact Hub

jasperreports 8.0.0-v1.3 deploys 2 container images: palopalepalo/jasperreports and bitnami/mariadb. Across the 1 measured, 421 findings — 5 critical, 21 high — 8 on CISA KEV. The highest contribution is BIT-tomcat-2025-24813 in tomcat 9.0.71-10, fixed in 9.0.99.

Radar Score

6,561521114281

421 findings over 1 of 2 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
palopalepalo/jasperreports8-v1.35211142816,561
bitnami/mariadb10.6.12-debian-11-r9—unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

421 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumGHSA-j3rv-43j4-c7qmjackson-databind@2.13.2.22.18.8
MediumGHSA-355h-qmc2-wpwfjetty-http@9.4.39.v202103259.4.60
MediumGHSA-f3jh-qvm4-mg39spring-security-core@4.2.19.RELEASE5.7.12
MediumBIT-mysql-client-2026-44172mysql-client@10.6.12-110.6.17
MediumGHSA-2p5w-cvg5-gc5chibernate-core@5.2.12.Finalno fix listed
MediumBIT-mysql-client-2026-44168mysql-client@10.6.12-110.6.26
MediumBIT-tomcat-2026-43515tomcat@9.0.71-1010.1.55
MediumGHSA-qw69-rqj8-6qw8jetty-server@9.4.39.v202103259.4.51.v20230217
MediumBIT-tomcat-2026-68525tomcat@9.0.71-109.0.121
MediumGHSA-9w38-p64v-xpmvcommons-configuration2@2.72.10.1
MediumGHSA-3x8x-79m2-3w2wjackson-databind@2.11.12.12.6
MediumGHSA-wxqc-pxw9-g2p8spring-expression@5.2.21.RELEASE5.2.24.RELEASE
MediumGHSA-h46c-h94j-95f3jackson-core@2.13.22.15.0
MediumGHSA-493p-pfq6-5258json-smart@2.4.72.4.9
MediumBIT-tomcat-2026-59083tomcat@9.0.71-109.0.120
MediumBIT-tomcat-2026-53434tomcat@9.0.71-109.0.101
MediumBIT-tomcat-2026-55276tomcat@9.0.71-109.0.119
MediumBIT-tomcat-2026-59084tomcat@9.0.71-109.0.120
MediumGHSA-5568-6qcg-g7fxactivemq-client@5.16.25.19.4
MediumBIT-mysql-client-2026-44173mysql-client@10.6.12-110.6.26
MediumGHSA-4p6w-m9wc-c9c9ant@1.9.41.9.15
MediumGHSA-5v34-g2px-j4fwant@1.9.41.9.16
MediumGHSA-9wxq-mwqw-8hhgjasperreports@6.20.07.0.7
MediumGHSA-8wv5-x4w7-5gwwlibthrift@0.14.10.24.0
MediumBIT-tomcat-2026-65182tomcat@9.0.71-109.0.121
MediumGHSA-q5r4-cfpx-h6fhant@1.9.41.9.16
MediumGHSA-2fvj-hgj9-j2grjetty-security@9.4.39.v202103259.4.63
MediumBIT-mysql-client-2022-47015mysql-client@10.6.12-110.3.39
MediumGHSA-3pxv-7cmr-fjr4log4j-core@2.17.12.25.4
MediumGHSA-q77q-vx4q-xx6qesapi@2.1.0.12.3.0.0
MediumGHSA-c5xv-qc8p-mh2vbatik-bridge@1.141.15
MediumBIT-tomcat-2023-42794tomcat@9.0.71-108.5.94
MediumGHSA-jm7m-8jh6-29hptomcat-coyote@9.0.719.0.81
MediumGO-2022-1144stdlib@go1.18.21.18.9
MediumBIT-tomcat-2026-41284tomcat@9.0.71-1010.1.55
MediumGHSA-mf92-479x-3373spring-security-web@4.2.19.RELEASEno fix listed
MediumGHSA-53jm-3hc9-fqqcbatik-bridge@1.141.15
MediumGHSA-rmrm-75hp-phr2hibernate-validator@5.4.3.Final6.0.20.Final
MediumGHSA-264p-99wq-f4j6ion-java@1.0.2no fix listed
MediumGHSA-jx66-5ww9-m6q4csrfguard@3.1.04.0.0
LowGHSA-gq5f-xv48-2365batik-bridge@1.141.17
LowGHSA-gq5f-xv48-2365batik-transcoder@1.141.17
LowGHSA-9493-h29p-rfm2github.com/opencontainers/runc@v1.1.01.2.8
LowBIT-tomcat-2023-42795tomcat@9.0.71-108.5.94
LowGHSA-g8pj-r55q-5c2vtomcat-util@9.0.719.0.81
LowGHSA-7pwc-h2j2-rjgjlibthrift@0.14.10.23.0
LowBIT-tomcat-2026-55957tomcat@9.0.71-109.0.101
LowBIT-tomcat-2026-65927tomcat@9.0.71-109.0.121
LowBIT-tomcat-2026-66299tomcat@9.0.71-109.0.121
LowBIT-tomcat-2026-68763tomcat@9.0.71-109.0.121

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
8.0.0-v1.3latest—8-v1.35211142816,561

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/helm-dojo/jasperreports.svg)](https://charts.stackradar.io/charts/helm-dojo/jasperreports)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 25 Sept 2026 · scanned 25 Sept 2026 · advisories as of 25 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.