middleware 1.2.7 Helm chart

Name: middleware Helm chart 1.2.7: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 27 Sept 2026

Middleware open-source DORA metrics platform with PostgreSQL and Redis for engineering team performance

Version 1.2.7 todayapp version 0.3.1 0Artifact Hub

middleware 1.2.7 deploys 4 container images: library/busybox, middlewareeng/middleware, library/postgres and library/redis. Across them, 880 findings — 2 critical, 1 high. The highest contribution is DEBIAN-CVE-2025-49844 in redis 5:7.0.15-1~deb12u4, fixed in 5:7.0.15-1~deb12u6. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

9,32321132743

880 findings over 4 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.37	0000	0
middlewareeng/middleware	0.3.1	21111552	7,387
library/postgres	18.6-trixie	0014133	1,316
library/redis	8.10.1	00758	620

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

674 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2022-1037	stdlib@go1.17.13	1.18.7
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.2-3	no fix listed
Low	DEBIAN-CVE-2026-1502	python3.11@3.11.2-6+deb12u6	no fix listed
Low	DEBIAN-CVE-2025-40909	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3
Low	DEBIAN-CVE-2025-66864	binutils@2.40-2	no fix listed
Low	GO-2023-1987	stdlib@go1.17.13	1.19.12
Low	DEBIAN-CVE-2026-8458	curl@7.88.1-10+deb12u12	no fix listed
Low	DEBIAN-CVE-2026-0672	python3.11@3.11.2-6+deb12u6	3.11.2-6+deb12u7
Low	GHSA-9ppj-qmqm-q256	tar@7.4.3	7.5.11
Low	DEBIAN-CVE-2025-1147	binutils@2.40-2	no fix listed
Low	GO-2023-1752	stdlib@go1.17.13	1.19.9
Low	DEBIAN-CVE-2025-14524	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2026-7010	perl@5.36.0-7+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-15806	python3.11@3.11.2-6+deb12u6	no fix listed
Low	GHSA-4xh5-x5gv-qwph	pip@23.0.1	25.3
Low	GHSA-w8wr-v893-vjvp	tar@7.4.3	7.5.18
Low	DEBIAN-CVE-2026-25210	expat@2.5.0-1+deb12u1	no fix listed
Low	GO-2023-1705	stdlib@go1.17.13	1.19.8
Low	DEBIAN-CVE-2025-14831	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u6
Low	DEBIAN-CVE-2026-6846	binutils@2.40-2	no fix listed
Low	GO-2023-1878	stdlib@go1.17.13	1.19.11
Low	DEBIAN-CVE-2026-3184	util-linux@2.41.5-0+deb13u1	no fix listed
Low	GHSA-h35f-9h28-mq5c	setuptools@58.1.0	83.0.0
Low	GO-2022-1039	stdlib@go1.17.13	1.18.7
Low	DEBIAN-CVE-2026-78408	util-linux@2.41.5-0+deb13u1	no fix listed
Low	GO-2024-2963	stdlib@go1.17.13	1.21.12
Low	GO-2023-1702	stdlib@go1.17.13	1.19.8
Low	DEBIAN-CVE-2026-18220	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-86144	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-7168	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2026-42767	openssl@3.0.16-1~deb12u1	3.0.22-1~deb12u1
Low	DEBIAN-CVE-2025-15366	python3.11@3.11.2-6+deb12u6	no fix listed
Low	DEBIAN-CVE-2025-7546	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-22796	openssl@3.0.16-1~deb12u1	3.0.18-1~deb12u2
Low	DEBIAN-CVE-2026-34743	xz-utils@5.4.1-1	5.4.1-1+deb12u1
Low	DEBIAN-CVE-2026-58042	nodejs@22.16.0-1nodesource1	no fix listed
Low	DEBIAN-CVE-2025-1176	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-12781	python3.11@3.11.2-6+deb12u6	no fix listed
Low	DSA-6132-1	postgresql-15@15.13-0+deb12u1	15.16-0+deb12u1
Low	DEBIAN-CVE-2026-77117	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-80489	glibc@2.41-12+deb13u4	no fix listed
Low	DSA-5962-1	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u5
Low	DSA-5979-1	libxslt@1.1.35-1+deb12u1	1.1.35-1+deb12u2
Low	PYSEC-2026-3721	pip@23.0.1	26.2
Low	GHSA-52v5-jr5w-gjxr	sigstore@3.0.0	4.1.1
Low	GO-2023-2375	stdlib@go1.17.13	1.20.0
Low	DEBIAN-CVE-2025-15079	curl@7.88.1-10+deb12u12	no fix listed
Low	DEBIAN-CVE-2026-58055	nghttp2@1.52.0-1+deb12u2	no fix listed
Low	GO-2023-1569	stdlib@go1.17.13	1.19.6
Low	GHSA-mq26-g339-26xf	pip@23.0.1	23.3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.2.7latest	today	0.3.1	21132743	9,323
1.2.6	2 days ago	0.3.1	21132743	9,323

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/middleware.svg)](https://charts.stackradar.io/charts/helmforge/middleware)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.