middleware 1.2.9 Helm chart

Name: middleware Helm chart 1.2.9: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 16 Oct 2026

Middleware open-source DORA metrics platform with PostgreSQL and Redis for engineering team performance

Version 1.2.9 todayapp version 0.3.1 0Artifact Hub

middleware 1.2.9 deploys 4 container images: library/busybox, middlewareeng/middleware, library/postgres and library/redis. Across them, 960 findings — 3 critical, 1 high. The highest contribution is DEBIAN-CVE-2025-49844 in redis 5:7.0.15-1~deb12u4, fixed in 5:7.0.15-1~deb12u6. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

10,78031162792

960 findings over 4 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.37	0000	0
middlewareeng/middleware	0.3.1	31136574	8,331
library/postgres	18.6-trixie	0020155	1,809
library/redis	8.10.2	00663	640

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

728 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-j6r3-76f7-8jcv	ip-address@9.0.5	10.7.1
Low	GHSA-h35f-9h28-mq5c	setuptools@58.1.0	83.0.0
Low	DEBIAN-CVE-2026-78408	util-linux@2.41.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-53615	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-54369	acl@2.3.2-2+b1	no fix listed
Low	GO-2026-4980	stdlib@go1.24.6	1.25.10
Low	DEBIAN-CVE-2026-7017	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u4
Low	DEBIAN-CVE-2026-18220	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-86144	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	DSA-6132-1	postgresql-15@15.13-0+deb12u1	15.16-0+deb12u1
Low	DEBIAN-CVE-2025-15366	python3.11@3.11.2-6+deb12u6	no fix listed
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.2-3	no fix listed
Low	GO-2024-2600	stdlib@go1.17.13	1.21.8
Low	DEBIAN-CVE-2026-22796	openssl@3.0.16-1~deb12u1	3.0.18-1~deb12u2
Low	DEBIAN-CVE-2026-102010	gcc-12@12.2.0-14+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-102010	gcc-14@14.2.0-19	no fix listed
Low	DSA-5979-1	libxslt@1.1.35-1+deb12u1	1.1.35-1+deb12u2
Low	DEBIAN-CVE-2025-1176	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-12781	python3.11@3.11.2-6+deb12u6	no fix listed
Low	GO-2025-4011	stdlib@go1.24.6	1.24.8
Low	GO-2025-4015	stdlib@go1.24.6	1.24.8
Low	DEBIAN-CVE-2025-15079	curl@7.88.1-10+deb12u12	no fix listed
Low	DEBIAN-CVE-2026-67693	gnutls28@3.8.9-3+deb13u4	no fix listed
Low	GHSA-rj75-hqrm-r3gf	postcss-selector-parser@6.1.2	7.1.6
Low	PYSEC-2026-3721	pip@23.0.1	26.2
Low	GHSA-52v5-jr5w-gjxr	sigstore@3.0.0	4.1.1
Low	GHSA-mq26-g339-26xf	pip@23.0.1	23.3
Low	DEBIAN-CVE-2026-86139	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	GO-2026-4603	stdlib@go1.24.6	1.25.8
Low	DEBIAN-CVE-2026-3783	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15
Low	GO-2025-4175	stdlib@go1.24.6	1.24.11
Low	DEBIAN-CVE-2026-6429	curl@7.88.1-10+deb12u12	no fix listed
Low	GO-2026-4864	stdlib@go1.24.6	1.25.9
Low	DEBIAN-CVE-2026-34743	xz-utils@5.4.1-1	5.4.1-1+deb12u1
Low	DEBIAN-CVE-2024-22365	pam@1.5.2-6+deb12u1	1.5.2-6+deb12u2
Low	GHSA-v2v4-37r5-5v8g	ip-address@9.0.5	10.1.1
Low	DEBIAN-CVE-2025-15367	python3.11@3.11.2-6+deb12u6	no fix listed
Low	GO-2026-4982	stdlib@go1.24.6	1.25.10
Low	GHSA-gvwx-54wh-qm9j	tar@7.4.3	7.5.17
Low	DEBIAN-CVE-2026-86143	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	GHSA-h3mg-xc3c-68pw	ip-address@9.0.5	10.7.1
Low	DEBIAN-CVE-2025-12818	postgresql-15@15.13-0+deb12u1	15.15-0+deb12u1
Low	DEBIAN-CVE-2026-86140	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-86142	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	DEBIAN-CVE-2025-10148	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15
Low	GHSA-83g3-92jg-28cx	tar@7.4.3	7.5.8
Low	DEBIAN-CVE-2026-78410	util-linux@2.41.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-4873	curl@7.88.1-10+deb12u12	no fix listed
Low	DEBIAN-CVE-2026-89160	pcre2@10.42-1	10.42-1+deb12u1
Low	DEBIAN-CVE-2026-77117	glibc@2.41-12+deb13u4	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.2.9latest	today	0.3.1	31162792	10,780
1.2.8	2 days ago	0.3.1	31162792	10,780
1.2.7	14 days ago	0.3.1	31162820	11,014
1.2.6	20 days ago	0.3.1	31160814	10,841

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/middleware.svg)](https://charts.stackradar.io/charts/helmforge/middleware)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.