jenkins Helm chart
helmforgeVerified publisherScored 14 Sept 2026
Jenkins Helm Chart with secure controller defaults, JCasC, plugin bootstrap, Gateway API, and Kubernetes agent RBAC
Latest 1.0.9 2 days agoapp version 2.568.3 0Artifact Hub
jenkins 1.0.9 deploys 1 container image: jenkins/jenkins. Across them, 242 findings — 0 critical, 1 high. The highest contribution is DEBIAN-CVE-2019-6110 in openssh 1:10.0p1-7+deb13u4, with no fix listed. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| jenkins/ | 2.568.3-lts-jdk21 | 0138203 | 2,476 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Medium findings
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-5cgq-3rg8-m6cv | golang.org/ | 0.52.0 |
| Medium | DEBIAN-CVE-2020-15778 | openssh | no fix listed |
| Medium | DEBIAN-CVE-2019-1010022 | glibc | no fix listed |
| Medium | DEBIAN-CVE-2017-17740 | openldap | no fix listed |
| Medium | DEBIAN-CVE-2018-20796 | glibc | no fix listed |
| Medium | DEBIAN-CVE-2015-3276 | openldap | no fix listed |
| Medium | DEBIAN-CVE-2019-1010023 | glibc | no fix listed |
| Medium | DEBIAN-CVE-2022-24975 | git | no fix listed |
| Medium | DEBIAN-CVE-2026-19931 | curl | no fix listed |
| Medium | DEBIAN-CVE-2019-9192 | glibc | no fix listed |
| Medium | DEBIAN-CVE-2026-9079 | curl | no fix listed |
| Medium | DEBIAN-CVE-2018-5709 | krb5 | no fix listed |
| Medium | DEBIAN-CVE-2026-10536 | curl | no fix listed |
| Medium | DEBIAN-CVE-2016-20012 | openssh | no fix listed |
| Medium | DEBIAN-CVE-2026-18924 | curl | no fix listed |
| Medium | DEBIAN-CVE-2026-11856 | curl | no fix listed |
| Medium | GHSA-j288-q9x7-2f5v | commons-lang | no fix listed |
| Medium | DEBIAN-CVE-2011-3389 | gnutls28 | no fix listed |
| Medium | DEBIAN-CVE-2018-15919 | openssh | no fix listed |
| Medium | GHSA-x527-x647-q7gg | golang.org/ | 0.52.0 |
| Medium | DEBIAN-CVE-2024-26461 | krb5 | no fix listed |
| Medium | DEBIAN-CVE-2019-1010024 | glibc | no fix listed |
| Medium | GHSA-rmj7-2vxq-3g9f | jackson-databind | 3.1.4 |
| Medium | DEBIAN-CVE-2026-5450 | glibc | 2.41-12+deb13u4 |
| Medium | GHSA-v3pr-hxpr-mfm8 | mina-core | 2.2.8 |
| Medium | GHSA-vgwf-h737-ff37 | golang.org/ | 0.52.0 |
| Medium | GHSA-j3rv-43j4-c7qm | jackson-databind | 3.1.4 |
| Medium | GHSA-f5wc-c3c7-36mc | golang.org/ | 0.52.0 |
| Medium | DEBIAN-CVE-2020-14145 | openssh | no fix listed |
| Medium | DEBIAN-CVE-2026-8924 | curl | no fix listed |
| Medium | DEBIAN-CVE-2026-8376 | perl | 5.40.1-6+deb13u1 |
| Medium | GHSA-rm3j-f69w-wqmq | golang.org/ | 0.52.0 |
| Medium | DEBIAN-CVE-2026-66046 | expat | no fix listed |
| Medium | DEBIAN-CVE-2026-66033 | libssh2 | 1.11.1-1+deb13u2 |
| Medium | DEBIAN-CVE-2026-80229 | curl | no fix listed |
| Medium | DEBIAN-CVE-2026-8927 | curl | no fix listed |
| Medium | DEBIAN-CVE-2024-52005 | git | no fix listed |
| Medium | DEBIAN-CVE-2019-1010025 | glibc | no fix listed |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 1.0.9latest | 2 days ago | 2.568.3 | 0138203 | 2,476 |
| 1.0.8 | 4 days ago | 2.568.2 | 0034224 | 2,518 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.