elasticsearch Helm chart

Name: elasticsearch Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 14 Sept 2026

Production-ready Elasticsearch cluster with intelligent presets, automated backups, ILM policies, and multi-role architecture

Latest 1.1.8 2 days agoapp version 9.5.3 0Artifact Hub

elasticsearch 1.1.8 deploys 2 container images: library/busybox and library/elasticsearch. Across them, 26 findings — 0 critical, 0 high. The highest contribution is GHSA-j288-q9x7-2f5v in commons-lang3 3.9, fixed in 3.18.0. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

28000422

26 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.37.0	0000	0
library/elasticsearch	9.5.3	00422	280

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

26 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GHSA-j288-q9x7-2f5v	commons-lang3@3.9	3.18.0
Medium	GHSA-rmj7-2vxq-3g9f	jackson-databind@2.19.2	2.21.4
Medium	GHSA-j3rv-43j4-c7qm	jackson-databind@2.19.2	2.21.4
Medium	GHSA-jppx-w49h-x2qq	netty-codec-http@4.1.135.Final	4.1.136.Final
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.135.Final	4.1.137.Final
Low	GHSA-qv9r-c865-cp47	log4j-api@2.25.4	2.25.5
Low	GHSA-93wv-jw9v-4972	netty-codec-http2@4.1.135.Final	4.1.136.Final
Low	GHSA-6jqx-86gh-f27w	netty-codec-http@4.1.135.Final	4.1.136.Final
Low	GHSA-mvh2-crg5-v77c	netty-codec-http@4.1.135.Final	4.1.136.Final
Low	GHSA-558v-64gr-wgg4	netty-codec@4.1.135.Final	4.1.136.Final
Low	GHSA-fccg-mwvh-qqg4	netty-handler@4.1.135.Final	4.1.137.Final
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.135.Final	4.1.136.Final
Low	GHSA-6cqp-g7gg-8hr5	netty-codec-http@4.1.135.Final	4.1.136.Final
Low	GHSA-72hv-8253-57qq	jackson-core@2.19.2	2.21.1
Low	GHSA-3pjw-73gf-8qr5	jackson-databind@2.19.2	2.21.4
Low	GHSA-4q2v-9p7v-3v22	reactor-netty-http@1.0.45	1.2.8
Low	GHSA-c69g-56f8-xwqj	netty-codec-http2@4.1.135.Final	4.1.136.Final
Low	GHSA-8c42-7qj2-3j46	netty-codec-http@4.1.135.Final	4.1.137.Final
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.19.2	2.21.4
Low	GHSA-4mp9-239f-g9hg	netty-codec-http@4.1.135.Final	4.1.136.Final
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.19.2	2.21.4
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.19.2	2.21.5
Low	GHSA-mfg7-5gfp-c4w3	netty-codec-dns@4.1.135.Final	4.1.136.Final
Low	GHSA-gcjf-9mgh-3p7g	netty-codec-http@4.1.135.Final	4.1.136.Final
Low	GHSA-pmhh-3w7g-xqp8	jsoup@1.21.2	1.23.1
Low	RHSA-2026:66403	coreutils@8.32-41.el9_8	0:8.32-41.el9_8.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.8latest	2 days ago	9.5.3	00422	280
1.1.7	4 days ago	9.5.2	00423	283

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/elasticsearch.svg)](https://charts.stackradar.io/charts/helmforge/elasticsearch)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.