StackRadar

itm-mqtt-broker Helm chart

intelVerified publisher

Scored 14 Sept 2026

Helm chart for HiveMQ broker

Latest 1.0.0 3 years agodeploys tag dns-4.5.14 0Artifact Hub

itm-mqtt-broker 1.0.0 deploys 1 container image: hivemq/hivemq4. Across them, 173 findings3 critical, 3 high 2 on CISA KEV. The highest contribution is GHSA-599f-7c49-w659 in commons-text 1.9, fixed in 1.10.0.

Radar Score

2,6533348119

173 findings over 1 of 1 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
hivemq/hivemq4dns-4.5.1433481192,653

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

48 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumDLA-3859-1systemd@247.3-7247.3-7+deb11u6
MediumDSA-5169-1openssl@1.1.1n-0+deb11u11.1.1n-0+deb11u3
MediumDSA-5673-1glibc@2.31-13+deb11u32.31-13+deb11u9
MediumGHSA-4jrv-ppp4-jm57gson@2.8.62.8.9
MediumDLA-3898-1nghttp2@1.43.0-11.43.0-1+deb11u2
MediumDSA-5139-1openssl@1.1.1n-0+deb11u11.1.1n-0+deb11u2
MediumDSA-5523-1curl@7.74.0-1.3+deb11u17.74.0-1.3+deb11u10
MediumDSA-5417-1openssl@1.1.1n-0+deb11u11.1.1n-0+deb11u5
MediumDSA-5140-1openldap@2.4.57+dfsg-32.4.57+dfsg-3+deb11u1
MediumDSA-5343-1openssl@1.1.1n-0+deb11u11.1.1n-0+deb11u4
MediumDLA-3942-1openssl@1.1.1n-0+deb11u11.1.1n-0+deb11u6
MediumDLA-3942-2openssl@1.1.1n-0+deb11u11.1.1w-0+deb11u2
MediumGHSA-r7pg-v2c8-mfg3avro@1.10.11.11.4
MediumGHSA-9vjp-v76f-g363netty-codec@4.1.63.Final4.1.68.Final
MediumGHSA-grg4-wf29-r9vvnetty-codec@4.1.63.Final4.1.68.Final
MediumDSA-5197-1curl@7.74.0-1.3+deb11u17.74.0-1.3+deb11u2
MediumGHSA-57j2-w4cx-62h2jackson-databind@2.13.02.13.2.1
MediumGHSA-668q-qrv7-99fmlogback-core@1.2.31.2.9
MediumGHSA-wxr5-93ph-8wr9commons-beanutils@1.9.41.11.0
MediumGHSA-jjjh-jjxp-wpffjackson-databind@2.13.02.13.4.2
MediumGHSA-rgv9-q543-rqg4jackson-databind@2.13.02.13.4
MediumGHSA-3mc7-4q67-w48msnakeyaml@1.281.31
MediumDSA-5218-1zlib@1:1.2.11.dfsg-2+deb11u11:1.2.11.dfsg-2+deb11u2
MediumGHSA-rhrv-645h-fjfhavro@1.10.11.11.3
MediumGHSA-wx5j-54mm-rqqqnetty-codec-http@4.1.63.Final4.1.71.Final
MediumGHSA-9w3m-gqgf-c4p9snakeyaml@1.281.32
MediumGHSA-6mjq-h674-j845netty-handler@4.1.72.Final4.1.94.Final
MediumGHSA-j288-q9x7-2f5vcommons-lang3@3.12.03.18.0
MediumGHSA-4jq9-2xhw-jpx7json@2020111520231013
MediumGHSA-c4r9-r8fh-9vj2snakeyaml@1.281.31
MediumGHSA-78wr-2p64-hpwjcommons-io@2.11.02.14.0
MediumGHSA-3qp7-7mw8-wx86netty-handler@4.1.72.Final4.1.135.Final
MediumGHSA-355h-qmc2-wpwfjetty-http@9.4.44.v202109279.4.60
MediumGHSA-98wm-3w3q-mw94snakeyaml@1.281.31
MediumGHSA-3vqj-43w4-2q58json@2020111520230227
MediumGHSA-qw69-rqj8-6qw8jetty-server@9.4.44.v202109279.4.51.v20230217
MediumGHSA-3x8x-79m2-3w2wjackson-databind@2.13.02.13.1
MediumGHSA-rmj7-2vxq-3g9fjackson-databind@2.13.02.18.8
MediumGHSA-j3rv-43j4-c7qmjackson-databind@2.13.02.18.8
MediumGHSA-h46c-h94j-95f3jackson-core@2.13.02.15.0
MediumGHSA-w37g-rhq8-7m4jsnakeyaml@1.281.32
MediumGHSA-cm33-6792-r9fmnetty-codec-dns@4.1.53.Final4.1.133.Final
MediumGHSA-f6hv-jmp6-3vwvnetty-codec-http@4.1.72.Final4.1.133.Final
MediumDSA-5286-1krb5@1.18.3-6+deb11u11.18.3-6+deb11u3
MediumGHSA-jppx-w49h-x2qqnetty-codec-http@4.1.72.Final4.1.136.Final
MediumGHSA-q6cq-mhr2-jmr5netty-codec-haproxy@4.1.63.Final4.1.136.Final
MediumGHSA-x4gw-5cx5-pgmhnetty-handler@4.1.72.Final4.1.135.Final
MediumGHSA-gp7f-rwcx-9369jsoup@1.14.31.15.3

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.0latest3 years agodns-4.5.1433481192,653

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/intel/itm-mqtt-broker.svg)](https://charts.stackradar.io/charts/intel/itm-mqtt-broker)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.