StackRadar

backstage 1.0.5 Helm chart

irembo-backstage-helmVerified publisher

Scored 14 Sept 2026

A Helm chart for Backstage application

Version 1.0.5 1 year agodeploys tag latest 0Artifact Hub

backstage 1.0.5 deploys 3 container images: roadiehq/community-backstage-image, bitnami/postgresql and library/busybox. Across the 2 measured, 492 findings0 critical, 12 high 2 on CISA KEV. The highest contribution is GHSA-r5fr-rjxr-66jc in lodash-es 4.17.15, fixed in 4.18.0.

Radar Score

7,232012149331

492 findings over 2 of 3 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
roadiehq/community-backstage-imagelatest0121493317,232
bitnami/postgresql15.1.0-debian-11-r12unmeasured
library/busybox×3latest00000

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

High findings

12 distinct across the version’s images

High: findings whose contribution to the Radar Score is 40–69. Show every band

SeverityAdvisoryPackageFixed in
HighGHSA-r5fr-rjxr-66jclodash-es@4.17.154.18.0
HighGHSA-r5fr-rjxr-66jclodash@4.17.214.18.0
HighGHSA-w573-4hg7-7wgqdecode-uri-component@0.2.00.2.1
HighGHSA-hw8r-x6gr-5gjpjsonpath-plus@0.19.010.3.0
HighGHSA-pppg-cpfq-h7wrjsonpath-plus@0.19.010.2.0
HighGHSA-3jfq-g458-7qm9tar@4.4.134.4.14
HighGHSA-35jh-r3h4-6jhmlodash@4.17.154.17.21
HighGHSA-35jh-r3h4-6jhmlodash-es@4.17.154.17.21
HighGHSA-x3m8-899r-f7c3xml-crypto@2.0.02.1.6
HighGHSA-9p8x-f768-wp2gxml-crypto@2.0.02.1.6
HighDLA-3570-1KEVlibwebp@0.6.1-2+deb10u10.6.1-2+deb10u3
HighDLA-3621-1KEVnghttp2@1.36.0-2+deb10u11.36.0-2+deb10u2

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.5latest1 year agolatest0121493317,232

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/irembo-backstage-helm/backstage.svg)](https://charts.stackradar.io/charts/irembo-backstage-helm/backstage)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.