StackRadar

cratedb Helm chart

hmdmph

Scored 14 Sept 2026

A Helm chart for CrateDB ( CrateDB is a distributed SQL database built on top of a NoSQL foundation)

Latest 2.0.3 4 years agoapp version 4.7.0 2Artifact Hub

cratedb 2.0.3 deploys 2 container images: library/busybox and library/crate. Across them, 89 findings — 1 critical, 0 high. The highest contribution is GHSA-mjmj-j48q-9wg2 in snakeyaml 1.26, fixed in 2.0.

Radar Score

1,335103553

89 findings over 2 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
library/busyboxlatest00000
library/crate4.7.01035531,335

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

35 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-gx2c-fvhc-ph4jhadoop-common@2.8.12.10.2
MediumGHSA-8wm5-8h9c-47pchadoop-common@2.8.12.10.2
MediumGHSA-f8vc-wfc8-hxqhhadoop-common@2.8.12.10.1
MediumGHSA-rmpj-7c96-mrg8hadoop-common@2.8.12.10.2
MediumGHSA-57j2-w4cx-62h2jackson-databind@2.11.22.12.6.1
MediumGHSA-7r82-7xv7-xcpjhttpclient@4.5.124.5.13
MediumGHSA-cx63-2mw6-8hw5setuptools@39.2.070.0.0
MediumGHSA-xmc8-26q4-qjhxjackson-dataformat-cbor@2.11.22.11.4
MediumGHSA-gpvv-69j7-gwj8pip@9.0.319.2
MediumGHSA-jjjh-jjxp-wpffjackson-databind@2.11.22.12.7.1
MediumGHSA-rgv9-q543-rqg4jackson-databind@2.11.22.12.7.1
MediumGHSA-735f-pc8j-v9w8protobuf-java@2.5.03.25.5
MediumGHSA-3mc7-4q67-w48msnakeyaml@1.261.31
MediumGHSA-r9hx-vwmv-q579setuptools@39.2.065.5.1
MediumPYSEC-2025-49setuptools@39.2.078.1.1
MediumGHSA-c28r-hw5m-5gv3aws-java-sdk-s3@1.11.10211.12.261
MediumGHSA-wrvw-hg22-4m67protobuf-java@2.5.03.16.1
MediumGHSA-9w3m-gqgf-c4p9snakeyaml@1.261.32
MediumGHSA-6mjq-h674-j845netty-handler@4.1.73.Final4.1.94.Final
MediumGHSA-pvp8-3xj6-8c6xcommons-configuration@1.6no fix listed
MediumGHSA-j288-q9x7-2f5vcommons-lang@2.6no fix listed
MediumGHSA-c4r9-r8fh-9vj2snakeyaml@1.261.31
MediumGHSA-3qp7-7mw8-wx86netty-handler@4.1.73.Final4.1.135.Final
MediumGHSA-98wm-3w3q-mw94snakeyaml@1.261.31
MediumGHSA-3x8x-79m2-3w2wjackson-databind@2.11.22.12.6
MediumGHSA-rmj7-2vxq-3g9fjackson-databind@2.11.22.18.8
MediumGHSA-j3rv-43j4-c7qmjackson-databind@2.11.22.18.8
MediumGHSA-h46c-h94j-95f3jackson-core@2.11.22.15.0
MediumGHSA-w37g-rhq8-7m4jsnakeyaml@1.261.32
MediumGHSA-cm33-6792-r9fmnetty-codec-dns@4.1.73.Final4.1.133.Final
MediumGHSA-f6hv-jmp6-3vwvnetty-codec-http@4.1.73.Final4.1.133.Final
MediumGHSA-jppx-w49h-x2qqnetty-codec-http@4.1.73.Final4.1.136.Final
MediumGHSA-x4gw-5cx5-pgmhnetty-handler@4.1.73.Final4.1.135.Final
MediumGHSA-264p-99wq-f4j6ion-java@1.0.2no fix listed
MediumGHSA-5xp3-jfq3-5q8xpip@9.0.321.1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
2.0.3latest4 years ago4.7.01035531,335

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/hmdmph/cratedb.svg)](https://charts.stackradar.io/charts/hmdmph/cratedb)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.