StackRadar

ibm-microclimate 0.1.0 Helm chart

ibm-charts

Scored 14 Sept 2026

End to end development environment for rapidly creating, developing and deploying applications.

Version 0.1.0 6 years agoApp version not verified against the render 0Artifact Hub

ibm-microclimate 0.1.0 deploys 8 container images: library/postgres, bitnami/redis, gitlab/gitlab-ce, jenkins/jenkins and 4 more. Across the 6 measured, 2,763 findings — 61 critical, 242 high — 19 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.8.2, fixed in 2.12.2.

Radar Score

57,669612421,1801,279

2,763 findings over 6 of 8 images measured

KEV ×19 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

8 images
ImageTagVulnerabilitiesRadar Score
library/postgres9.601111361,501
bitnami/redis3.2.9-r2—unmeasured
gitlab/gitlab-ce9.4.1-ce.0—not yet scanned
jenkins/jenkins×2lts01382032,476
ibmcom/microclimate-portallatest11301911538,522
ibmcom/microclimate-theialatest3313670165432,794
ibmcom/microclimate-file-watcherlatest177323813212,278
ibmcom/microclimate-devopslatest011198

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

2,024 distinct across the version’s images
SeverityAdvisoryPackageFixed in
CriticalGHSA-jfh8-c2jp-5v3qKEVlog4j-core@2.8.22.12.2
CriticalGHSA-36p3-wjmg-h94xKEVspring-boot-starter-web@1.5.4.RELEASE2.5.12
CriticalGHSA-36p3-wjmg-h94xKEVspring-webmvc@4.3.9.RELEASE5.2.20.RELEASE
CriticalGHSA-36p3-wjmg-h94xKEVspring-beans@4.3.9.RELEASE5.2.20.RELEASE
CriticalGHSA-83qj-6fr2-vhqgKEVtomcat-embed-core@8.5.15no fix listed
CriticalGHSA-c9hw-wf7x-jp9jKEVtomcat-embed-core@8.5.158.5.51
CriticalUBUNTU-CVE-2022-2068openssl@1.0.2g-1ubuntu4.101.0.2g-1ubuntu4.20+esm5
CriticalGHSA-hf23-9pf7-388pxstream@1.4.101.4.11
CriticalGHSA-f58c-gq56-vjjftika-core@1.163.2.2
CriticalGHSA-f58c-gq56-vjjftika-parsers@1.162.0.0
CriticalGHSA-fjq5-5j5f-mvxhcommons-collections@3.2.13.2.2
CriticalGHSA-f554-x222-wgf7xstream@1.4.101.4.11
CriticalUBUNTU-CVE-2022-1292openssl@1.0.2g-1ubuntu4.101.0.2g-1ubuntu4.20+esm3
CriticalUBUNTU-CVE-2023-38408openssh@1:7.2p2-4ubuntu2.21:7.2p2-4ubuntu2.10+esm3
CriticalGHSA-7rjr-3q55-vv33KEVlog4j-core@2.8.22.12.2
CriticalGHSA-p6xc-xr62-6r2glog4j-core@2.8.22.12.3
CriticalGHSA-j9h8-phrw-h4fhKEVxstream@1.4.101.4.18
CriticalUBUNTU-CVE-2022-29155openldap@2.4.42+dfsg-2ubuntu3.22.4.42+dfsg-2ubuntu3.13+esm1
CriticalGHSA-mjmj-j48q-9wg2snakeyaml@1.172.0
CriticalUBUNTU-CVE-2019-15605nodejs@4.2.6~dfsg-1ubuntu4.14.2.6~dfsg-1ubuntu4.2+esm2
CriticalGHSA-xjgh-84hx-56c5KEVtomcat-embed-core@8.5.158.5.23
CriticalGHSA-8vmx-qmch-mpqgtomcat-embed-core@8.5.158.5.40
CriticalGHSA-9r24-gp44-h3pmtika-core@1.161.18
CriticalGHSA-rfx6-vp9g-rh7vjackson-databind@2.8.82.8.11
CriticalUBUNTU-CVE-2021-25216bind9@1:9.10.3.dfsg.P4-8ubuntu1.91:9.10.3.dfsg.P4-8ubuntu1.19
CriticalGHSA-mw36-7c6c-q4q2xstream@1.4.101.4.14-java7
CriticalUBUNTU-CVE-2019-8457db5.3@5.3.28-11ubuntu0.15.3.28-11ubuntu0.2
CriticalUBUNTU-CVE-2019-8457sqlite3@3.11.0-1ubuntu13.11.0-1ubuntu1.2
CriticalUBUNTU-CVE-2023-50387bind9@1:9.10.3.dfsg.P4-8ubuntu1.91:9.10.3.dfsg.P4-8ubuntu1.19+esm8
CriticalGHSA-5j33-cvvr-w245tomcat-embed-core@8.5.15no fix listed
CriticalGHSA-3p2h-wqq4-wf4htomcat-embed-core@8.5.15no fix listed
CriticalGHSA-m7jv-hq7h-mq7ctomcat-embed-websocket@8.5.158.5.57
CriticalUBUNTU-CVE-2020-36221openldap@2.4.42+dfsg-2ubuntu3.22.4.42+dfsg-2ubuntu3.12
CriticalUBUNTU-CVE-2020-36228openldap@2.4.42+dfsg-2ubuntu3.22.4.42+dfsg-2ubuntu3.12
CriticalGHSA-qxxx-2pp7-5hmxjackson-databind@2.8.82.8.9
CriticalGHSA-p72g-pv48-7w9xtika-parsers@1.162.0.0-ALPHA
CriticalUBUNTU-CVE-2019-9514nodejs@4.2.6~dfsg-1ubuntu4.1no fix listed
CriticalUBUNTU-CVE-2025-6965sqlite3@3.11.0-1ubuntu13.11.0-1ubuntu1.5+esm3
CriticalUBUNTU-CVE-2023-50868bind9@1:9.10.3.dfsg.P4-8ubuntu1.91:9.10.3.dfsg.P4-8ubuntu1.19+esm8
CriticalUBUNTU-CVE-2019-9513nodejs@4.2.6~dfsg-1ubuntu4.1no fix listed
CriticalUBUNTU-CVE-2024-2961glibc@2.23-0ubuntu92.23-0ubuntu11.3+esm6
HighGHSA-9339-86wc-4qgfxalan@2.7.22.7.3
HighUBUNTU-CVE-2020-8625bind9@1:9.10.3.dfsg.P4-8ubuntu1.91:9.10.3.dfsg.P4-8ubuntu1.18
HighUBUNTU-CVE-2022-25236expat@2.1.0-7ubuntu0.16.04.32.1.0-7ubuntu0.16.04.5+esm2
HighUBUNTU-CVE-2025-15467nodejs@4.2.6~dfsg-1ubuntu4.1no fix listed
HighGHSA-2p3x-qw9c-25hhxstream@1.4.101.4.16
HighUBUNTU-CVE-2020-36222openldap@2.4.42+dfsg-2ubuntu3.22.4.42+dfsg-2ubuntu3.12
HighUBUNTU-CVE-2020-36227openldap@2.4.42+dfsg-2ubuntu3.22.4.42+dfsg-2ubuntu3.12
HighGHSA-7chv-rrw6-w6fcxstream@1.4.101.4.17
HighGHSA-phwq-j96m-2c2qejs@2.5.83.1.7

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.0latest6 years ago—612421,1801,27957,669

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/ibm-charts/ibm-microclimate.svg)](https://charts.stackradar.io/charts/ibm-charts/ibm-microclimate)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.