tomcat Helm chart

Name: tomcat Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

helmforge

Scored 14 Sept 2026

Apache Tomcat Helm chart with official image, Gateway API, JMX, and production controls

Latest 1.0.6 2 days agoapp version 11.0.25 0Artifact Hub

tomcat 1.0.6 deploys 2 container images: library/tomcat and library/busybox. Across them, 139 findings — 0 critical, 0 high. The highest contribution is UBUNTU-CVE-2026-19931 in curl 8.5.0-2ubuntu10.12, with no fix listed. Chart.yaml declares kubeVersion >=1.26.0-0; rendered for Kubernetes 1.26.0.

Radar Score

1,1850010128

139 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
library/tomcat×2	11.0.25-jdk17-temurin-noble	0010128	1,185
library/busybox	1.37	0000	0

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

128 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-77117	glibc@2.39-0ubuntu8.8	2.39-0ubuntu8.9
Low	UBUNTU-CVE-2026-80489	glibc@2.39-0ubuntu8.8	2.39-0ubuntu8.9
Low	UBUNTU-CVE-2025-69644	binutils@2.42-4ubuntu2.10	no fix listed
Low	UBUNTU-CVE-2026-59845	libssh@0.10.6-2ubuntu0.4	0.10.6-2ubuntu0.5
Low	UBUNTU-CVE-2026-42250	bzip2@1.0.8-5.1build0.1	1.0.8-5.1ubuntu0.1
Low	UBUNTU-CVE-2026-32777	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-39113	sqlite3@3.45.1-1ubuntu2.7	no fix listed
Low	UBUNTU-CVE-2026-76957	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-27456	util-linux@2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
Low	UBUNTU-CVE-2026-18508	tar@1.35+dfsg-3ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-41990	libgcrypt20@1.10.3-2ubuntu0.1	1.12.0-2ubuntu0.1~Fips1~rc11
Low	UBUNTU-CVE-2026-45186	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2022-3219	gnupg2@2.4.4-2ubuntu17.4	no fix listed
Low	UBUNTU-CVE-2026-32776	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-41080	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2025-11495	binutils@2.42-4ubuntu2.10	no fix listed
Low	UBUNTU-CVE-2026-59846	libssh@0.10.6-2ubuntu0.4	0.10.6-2ubuntu0.5
Low	UBUNTU-CVE-2026-18477	tar@1.35+dfsg-3ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2025-6141	ncurses@6.4+20240113-1ubuntu2.1	6.4+20240113-1ubuntu2.2
Low	USN-8688-1	pam@1.5.3-5ubuntu5.6	1.5.3-5ubuntu5.7
Low	UBUNTU-CVE-2026-27171	zlib@1:1.3.dfsg-3.1ubuntu2.1	1:1.3.dfsg-3.1ubuntu2.2
Low	UBUNTU-CVE-2025-66382	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-40228	systemd@255.4-1ubuntu8.17	no fix listed
Low	UBUNTU-CVE-2026-32778	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-57062	gnupg2@2.4.4-2ubuntu17.4	2.4.4-2ubuntu17.6
Low	UBUNTU-CVE-2026-53910	diffutils@1:3.10-1build1	1:3.10-1ubuntu0.1
Low	UBUNTU-CVE-2025-66861	binutils@2.42-4ubuntu2.10	no fix listed
Low	UBUNTU-CVE-2026-6368	glibc@2.39-0ubuntu8.8	2.39-0ubuntu8.9

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.6latest	2 days ago	11.0.25	0010128	1,185

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/helmforge/tomcat.svg)](https://charts.stackradar.io/charts/helmforge/tomcat)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.