todo-api Helm chart

Name: todo-api Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helm-repo-sharif

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 0.1.0 3 years agodeploys tag 6.0.9-debian-11-r5 0Artifact Hub

todo-api 0.1.0 deploys 2 container images: bitnami/mongodb and pavanelthepu/todo-api. Across the 1 measured, 120 findings — 5 critical, 11 high — 4 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-beans 5.3.8, fixed in 5.3.18.

Radar Score

2,5445114460

120 findings over 1 of 2 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
bitnami/mongodb	6.0.9-debian-11-r5	—	unmeasured
pavanelthepu/todo-api	1.0.2	5114460	2,544

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

High findings

11 distinct across the version’s images

High: findings whose contribution to the Radar Score is 40–69. Show every band

Severity	Advisory	Package	Fixed in
High	GHSA-4wrc-f8pq-fpqp	spring-web@5.3.8	6.0.0
High	GHSA-wmwf-9ccg-fff5	tomcat-embed-core@9.0.48	9.0.109
High	GHSA-h3gc-qfqq-6h8f	tomcat-embed-core@9.0.48	9.0.106
High	GHSA-g5vr-rgqm-vf78	spring-webmvc@5.3.8	no fix listed
High	GHSA-hfrx-6qgj-fp6c	tomcat-embed-core@9.0.48	9.0.71
High	GHSA-qppj-fm5r-hxr3KEV	tomcat-embed-core@9.0.48	9.0.81
High	GHSA-w24x-87mr-4r23	spring-data-mongodb@3.2.2	3.3.5
High	GHSA-558x-2xjg-6232	spring-expression@5.3.8	5.3.17
High	GHSA-7w75-32cg-r6g2	tomcat-embed-core@9.0.48	9.0.86
High	GHSA-vfww-5hm6-hx2j	tomcat-embed-core@9.0.48	9.0.109
High	GHSA-27hp-xhwr-wr2m	tomcat-embed-core@9.0.48	9.0.98

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.0latest	3 years ago	6.0.9-debian-11-r5	5114460	2,544

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helm-repo-sharif/todo-api.svg)](https://charts.stackradar.io/charts/helm-repo-sharif/todo-api)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.