todo-api Helm chart

Name: todo-api Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helm-repo-sharif

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 0.1.0 3 years agodeploys tag 6.0.9-debian-11-r5 0Artifact Hub

todo-api 0.1.0 deploys 2 container images: bitnami/mongodb and pavanelthepu/todo-api. Across the 1 measured, 120 findings — 5 critical, 11 high — 4 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-beans 5.3.8, fixed in 5.3.18.

Radar Score

2,5445114460

120 findings over 1 of 2 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
bitnami/mongodb	6.0.9-debian-11-r5	—	unmeasured
pavanelthepu/todo-api	1.0.2	5114460	2,544

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

120 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@5.3.8	5.3.18
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webmvc@5.3.8	5.3.18
Critical	GHSA-83qj-6fr2-vhqgKEV	tomcat-embed-core@9.0.48	9.0.99
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.28	2.0
Critical	GHSA-5j33-cvvr-w245	tomcat-embed-core@9.0.48	9.0.98
High	GHSA-4wrc-f8pq-fpqp	spring-web@5.3.8	6.0.0
High	GHSA-wmwf-9ccg-fff5	tomcat-embed-core@9.0.48	9.0.109
High	GHSA-h3gc-qfqq-6h8f	tomcat-embed-core@9.0.48	9.0.106
High	GHSA-g5vr-rgqm-vf78	spring-webmvc@5.3.8	no fix listed
High	GHSA-hfrx-6qgj-fp6c	tomcat-embed-core@9.0.48	9.0.71
High	GHSA-qppj-fm5r-hxr3KEV	tomcat-embed-core@9.0.48	9.0.81
High	GHSA-w24x-87mr-4r23	spring-data-mongodb@3.2.2	3.3.5
High	GHSA-558x-2xjg-6232	spring-expression@5.3.8	5.3.17
High	GHSA-7w75-32cg-r6g2	tomcat-embed-core@9.0.48	9.0.86
High	GHSA-vfww-5hm6-hx2j	tomcat-embed-core@9.0.48	9.0.109
High	GHSA-27hp-xhwr-wr2m	tomcat-embed-core@9.0.48	9.0.98
Medium	GHSA-cx7f-g6mp-7hqm	spring-webmvc@5.3.8	no fix listed
Medium	GHSA-7phw-cxx7-q9vq	spring-webmvc@5.3.8	5.3.26
Medium	GHSA-g5mm-vmx4-3rg7	spring-context@5.3.8	5.3.19
Medium	GHSA-ccgv-vj62-xf9h	spring-web@5.3.8	5.3.32
Medium	GHSA-57j2-w4cx-62h2	jackson-databind@2.12.3	2.12.6.1
Medium	GHSA-wm9w-rjj3-j356	tomcat-embed-core@9.0.48	9.0.90
Medium	GHSA-gqp3-2cvr-x8m3	tomcat-embed-core@9.0.48	9.0.108
Medium	GHSA-r29c-68gh-xp6x	tomcat-embed-core@9.0.48	9.0.118
Medium	GHSA-q3mw-pvr8-9ggc	tomcat-embed-core@9.0.48	9.0.80
Medium	GHSA-hgjh-9rj2-g67j	spring-web@5.3.8	5.3.33
Medium	GHSA-668q-qrv7-99fm	logback-core@1.2.3	1.2.9
Medium	GHSA-jjjh-jjxp-wpff	jackson-databind@2.12.3	2.12.7.1
Medium	GHSA-rgv9-q543-rqg4	jackson-databind@2.12.3	2.12.7.1
Medium	GHSA-h6fc-48rj-7qqh	tomcat-embed-core@9.0.48	9.0.118
Medium	GHSA-3mc7-4q67-w48m	snakeyaml@1.28	1.31
Medium	GHSA-fccv-jmmp-qg76	tomcat-embed-core@9.0.48	9.0.83
Medium	GHSA-7jqf-v358-p8g7	tomcat-embed-core@9.0.48	9.0.90
Medium	GHSA-rq2w-37h9-vg94	tomcat-embed-core@9.0.48	9.0.69
Medium	GHSA-wc4r-xq3c-5cf3	tomcat-embed-core@9.0.48	9.0.106
Medium	GHSA-r6j3-px5g-cq3x	tomcat-embed-core@9.0.48	9.0.81
Medium	GHSA-wr62-c79q-cv37	tomcat-embed-core@9.0.48	9.0.107
Medium	GHSA-5m62-pw8w-7w9f	tomcat-embed-core@9.0.48	9.0.118
Medium	GHSA-25xr-qj8w-c4vf	tomcat-embed-core@9.0.48	9.0.107
Medium	GHSA-hh26-6xwr-ggv7	spring-beans@5.3.8	5.3.20
Medium	GHSA-4j3c-42xv-3f84	tomcat-embed-core@9.0.48	9.0.107
Medium	GHSA-h2fw-rfh5-95r3	tomcat-embed-core@9.0.48	9.0.105
Medium	GHSA-9xv2-5v5q-p794	tomcat-embed-core@9.0.48	9.0.121
Medium	GHSA-9w3m-gqgf-c4p9	snakeyaml@1.28	1.32
Medium	GHSA-p22x-g9px-3945	tomcat-embed-core@9.0.48	9.0.68
Medium	GHSA-2wrp-6fg6-hmc5	spring-web@5.3.8	5.3.34
Medium	GHSA-v682-8vv8-vpwr	tomcat-embed-websocket@9.0.48	9.0.86
Medium	GHSA-c4r9-r8fh-9vj2	snakeyaml@1.28	1.31
Medium	GHSA-98wm-3w3q-mw94	snakeyaml@1.28	1.31
Medium	GHSA-h3x4-894j-xpx5	tomcat-embed-core@9.0.48	9.0.121

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.0latest	3 years ago	6.0.9-debian-11-r5	5114460	2,544

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helm-repo-sharif/todo-api.svg)](https://charts.stackradar.io/charts/helm-repo-sharif/todo-api)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.