kafka 1.4.0 Helm chart

Name: kafka Helm chart 1.4.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 29 Sept 2026

Apache Kafka Helm chart for JVM and native KRaft runtimes

Version 1.4.0 todayapp version 4.3.1 1Artifact Hub

kafka 1.4.0 deploys 1 container image: apache/kafka. Across them, 59 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-63073 in openssl 3.5.7-r0, fixed in 3.5.8-r0. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

660001346

59 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
apache/kafka×2	4.3.1	001346	660

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

59 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	ALPINE-CVE-2026-63073	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-63076	openssl@3.5.7-r0	3.5.8-r0
Medium	GHSA-rmj7-2vxq-3g9f	jackson-databind@2.21.2	2.21.4
Medium	ALPINE-CVE-2026-18798	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Medium	GHSA-j3rv-43j4-c7qm	jackson-databind@2.21.2	2.21.4
Medium	ALPINE-CVE-2026-2100	p11-kit@0.25.5-r2	0.26.2-r0
Medium	ALPINE-CVE-2026-66046	expat@2.7.5-r0	2.8.4-r0
Medium	ALPINE-CVE-2026-14457	openssl@3.5.7-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-63072	openssl@3.5.7-r0	3.5.8-r0
Medium	GHSA-2fvj-hgj9-j2gr	jetty-security@12.0.34	12.0.36
Medium	GHSA-2r2c-cx56-8933	jline-remote-telnet@3.30.4	3.30.14
Medium	GHSA-47qp-hqvx-6r3f	jline-remote-telnet@3.30.4	3.30.14
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-q4xh-88c3-wmh7	jackson-databind@2.21.2	2.21.6
Low	ALPINE-CVE-2026-93990	expat@2.7.5-r0	2.8.5-r0
Low	ALPINE-CVE-2026-76641	expat@2.7.5-r0	2.8.4-r0
Low	GHSA-r2xf-8xr9-62gw	jline-builtins@3.30.4	3.30.15
Low	GHSA-qv9r-c865-cp47	log4j-api@2.25.4	2.25.5
Low	ALPINE-CVE-2026-45186	expat@2.7.5-r0	2.8.1-r0
Low	ALPINE-CVE-2026-11822	sqlite@3.51.2-r0	3.53.4-r0
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-xx22-p4ch-683r	lz4-java@1.10.2	1.11.1
Low	GHSA-gx83-3vf8-gh7j	jackson-databind@2.21.2	2.21.6
Low	ALPINE-CVE-2026-76956	expat@2.7.5-r0	2.8.4-r0
Low	GHSA-ph9c-7hw9-vhhw	jline-builtins@3.30.4	3.30.15
Low	GHSA-3pjw-73gf-8qr5	jackson-databind@2.21.2	2.21.4
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-11824	sqlite@3.51.2-r0	3.53.4-r0
Low	GHSA-5gvw-p9qm-jgwh	jackson-databind@2.21.2	2.21.5
Low	GHSA-f4v5-65jj-pcr2	jetty-server@12.0.34	12.0.36
Low	GHSA-rcqc-6cw3-h962	jackson-databind@2.21.2	2.21.4
Low	GHSA-wjgm-6hv5-3cvf	jackson-databind@2.21.2	2.21.6
Low	GHSA-9fxm-vc8v-hj55	jackson-databind@2.21.2	2.21.4
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.21.2	2.21.5
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.21.2	2.21.4
Low	GHSA-5hh8-q8hv-fr38	jackson-databind@2.21.2	2.21.4
Low	ALPINE-CVE-2026-56406	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56407	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56403	expat@2.7.5-r0	2.8.2-r0
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.21.2	2.21.4
Low	ALPINE-CVE-2026-76957	expat@2.7.5-r0	2.8.4-r0
Low	GHSA-w7x5-g22v-xqhr	jetty-util@12.0.34	12.0.35
Low	GHSA-vvgp-rfg2-7rr6	jackson-databind@2.21.2	2.21.5
Low	GHSA-7p3p-8qv8-m2vh	jetty-server@12.0.34	12.0.35
Low	ALPINE-CVE-2026-56404	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56410	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56411	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56405	expat@2.7.5-r0	2.8.2-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.4.0latest	today	4.3.1	001346	660
1.3.14	2 days ago	4.3.1	001346	660

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/kafka.svg)](https://charts.stackradar.io/charts/helmforge/kafka)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.