StackRadar

pinot 0.2.0 Helm chart

inseefrlab

Scored 14 Sept 2026

Realtime distributed OLAP datastore, designed to answer OLAP queries with low latency

Version 0.2.0 4 years agodeploys tag 3.5.5 0Artifact Hub

pinot 0.2.0 deploys 2 container images: library/zookeeper and apachepinot/pinot. Across them, 464 findings — 15 critical, 39 high — 3 on CISA KEV. The highest contribution is GHSA-6jwp-4wvj-6597 in pinot-controller 0.10.0-SNAPSHOT, fixed in 1.3.0.

Radar Score

10,7771539203206

464 findings over 2 of 2 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
library/zookeeper3.5.541470563,660
apachepinot/pinot×4latest-jdk1111251331507,117

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

152 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumDSA-4855-1openssl@1.1.1d-0+deb10u21.1.1d-0+deb10u5
MediumGHSA-cjjf-94ff-43w7jackson-databind@2.4.02.7.9.4
MediumGHSA-h4rc-386g-6m85jackson-databind@2.9.102.9.10.4
MediumGHSA-r7pg-v2c8-mfg3avro@1.9.21.11.4
MediumGHSA-f8vc-wfc8-hxqhhadoop-common@2.7.02.10.1
MediumGHSA-rmpj-7c96-mrg8hadoop-common@2.7.02.10.2
MediumGHSA-9vjp-v76f-g363netty@3.9.6.Finalno fix listed
MediumGHSA-8w26-6f25-cm9xjackson-databind@2.4.02.9.10.8
MediumGHSA-v585-23hc-c647jackson-databind@2.4.02.9.10.8
MediumGHSA-r695-7vr9-jgc2jackson-databind@2.4.02.9.10.8
MediumGHSA-8c4j-34r4-xr8gjackson-databind@2.4.02.6.7.5
MediumGHSA-89qr-369f-5m5xjackson-databind@2.4.02.6.7.5
MediumGHSA-cvm9-fjm9-3572jackson-databind@2.4.02.6.7.5
MediumGHSA-vfqx-33qm-g869jackson-databind@2.4.02.6.7.5
MediumGHSA-9m6f-7xcq-8vf8jackson-databind@2.4.02.6.7.5
MediumGHSA-58pp-9c76-5625jackson-databind@2.9.102.9.10.4
MediumGHSA-grg4-wf29-r9vvnetty@3.9.6.Finalno fix listed
MediumGHSA-rf6r-2c4q-2vwgjackson-databind@2.9.102.9.10.4
MediumGHSA-v3xw-c963-f5hcjackson-databind@2.9.102.9.10.4
MediumGHSA-758m-v56v-grj4jackson-databind@2.9.102.9.10.4
MediumGHSA-mc6h-4qgp-37qhjackson-databind@2.9.102.9.10.5
MediumGHSA-cf6r-3wgc-h863jackson-databind@2.4.02.6.7.3
MediumGHSA-c2q3-4qrh-fm48jackson-databind@2.9.102.9.10.5
MediumGHSA-p2v9-g2qv-p635netty@3.9.6.Finalno fix listed
MediumGHSA-cmfg-87vq-g5g4jackson-databind@2.4.02.6.7.3
MediumGHSA-xfv3-rrfm-f2rvnetty@3.9.6.Final3.9.8.Final
MediumGHSA-7vx9-xjhr-rw6hjetty-server@9.3.24.v201806059.3.26.v20190403
MediumGHSA-h2f4-v4c4-6wx4jetty-server@9.3.24.v201806059.3.25.v20180904
MediumGHSA-7q56-mp4c-gggghadoop-common@2.7.02.7.3
MediumGHSA-95cm-88f5-f2c7jackson-databind@2.9.102.9.10.4
MediumDSA-5197-1curl@7.74.0-1.3+deb11u17.74.0-1.3+deb11u2
MediumGHSA-57j2-w4cx-62h2jackson-databind@2.4.02.12.6.1
MediumGHSA-27xj-rqx5-2255jackson-databind@2.9.102.9.10.4
MediumGHSA-jhcr-hph9-g7wmhelix-core@0.9.81.3.0
MediumGHSA-mf7c-35mq-75pjhadoop-common@2.7.02.7.4
MediumGHSA-rpr3-cw39-3pxhjackson-databind@2.4.02.9.10.4
MediumGHSA-qmqc-x3r4-6v39jackson-databind@2.9.82.9.10
MediumDLA-4097-1vim@2:8.2.2434-3+deb11u12:8.2.2434-3+deb11u2
MediumGHSA-xmc8-26q4-qjhxjackson-dataformat-cbor@2.10.42.11.4
MediumGHSA-7286-pgfv-vxvhzookeeper@3.5.83.7.2
MediumGHSA-jjjh-jjxp-wpffjackson-databind@2.4.02.12.7.1
MediumGHSA-rgv9-q543-rqg4jackson-databind@2.4.02.12.7.1
MediumGHSA-735f-pc8j-v9w8protobuf-java@3.11.43.25.5
MediumGHSA-3vrc-rrpw-r5pwjava-xmlbuilder@0.41.2
MediumGHSA-5m48-vr54-vmh3jersey-core@1.91.13
MediumGHSA-3mc7-4q67-w48msnakeyaml@1.301.31
MediumDSA-5218-1zlib@1:1.2.11.dfsg-21:1.2.11.dfsg-2+deb11u2
MediumDSA-4697-1gnutls28@3.6.7-43.6.7-4+deb10u4
MediumGHSA-jq43-27x9-3v86netty-codec-smtp@4.1.74.Final4.1.128.Final
MediumGHSA-mvr2-9pj6-7w5jguava@14.0.124.1.1-android

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.2.0latest4 years ago3.5.5153920320610,777

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/inseefrlab/pinot.svg)](https://charts.stackradar.io/charts/inseefrlab/pinot)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.