dave Helm chart

Name: dave Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

it-at-m

Scored 14 Sept 2026

DAVe traffic counting plattform

Latest 0.2.15 11 days agoApp version not verified against the render 0Artifact Hub

dave 0.2.15 deploys 11 container images: ghcr.io/it-at-m/dave-admin-portal/dave-adminportal, ghcr.io/it-at-m/dave-backend/dave-backend, ghcr.io/it-at-m/dave-document-storage/dave-document-storage, ghcr.io/it-at-m/dave-eai/dave-eai and 6 more. Across the 10 measured, 1,355 findings — 6 critical, 4 high. The highest contribution is GHSA-f58c-gq56-vjjf in tika-parser-pdf-module 2.9.3, fixed in 3.2.2.

Radar Score

15,089642021,143

1,355 findings over 10 of 11 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/it-at-m/dave-admin-portal/dave-adminportal	10.0.0	00144	453
ghcr.io/it-at-m/dave-backend/dave-backend	10.0.0	01752	725
ghcr.io/it-at-m/dave-document-storage/dave-document-storage	10.0.0	101378	1,124
ghcr.io/it-at-m/dave-eai/dave-eai	10.0.0	00737	479
ghcr.io/it-at-m/dave-frontend/dave-frontend	10.0.0	00144	453
ghcr.io/it-at-m/dave-geodata-eai/dave-geodata-eai	10.0.0	00642	515
ghcr.io/it-at-m/dave-selfservice-portal/dave-selfserviceportal	10.0.0	00144	453
bitnamilegacy/elasticsearch	9.1.2-debian-12-r0	3162361	4,681
bitnamilegacy/postgresql	17.6.0-debian-12-r0	1152220	3,097
bitnami/keycloak×2	26.3.3-debian-12-r0	—	unmeasured
bitnamilegacy/postgresql	latest	1152221	3,109

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

610 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2025-66293	libpng1.6@1.6.39-2	1.6.39-2+deb12u1
Low	DEBIAN-CVE-2026-42012	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7
Low	RHSA-2026:19357	krb5@1.21.1-8.el9_6	0:1.21.1-10.el9_8
Low	DEBIAN-CVE-2026-57432	perl@5.36.0-7+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-6276	curl@7.88.1-10+deb12u12	no fix listed
Low	GHSA-xxqh-mfjm-7mv9	netty-codec-http@4.1.118.Final	4.1.133.Final
Low	BIT-postgresql-2026-6638	postgresql@17.6.0-0	16.14.0
Low	DEBIAN-CVE-2024-26458	krb5@1.20.1-2+deb12u3	no fix listed
Low	DEBIAN-CVE-2016-2781	coreutils@9.1-1	no fix listed
Low	GHSA-fccg-mwvh-qqg4	netty-handler@4.1.135.Final	4.1.137.Final
Low	GHSA-4cx2-fc23-5wg6	bcpkix-jdk18on@1.78.1	1.79
Low	DEBIAN-CVE-2026-42767	openssl@3.0.17-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2026-5545	curl@7.88.1-10+deb12u12	no fix listed
Low	DEBIAN-CVE-2026-48962	perl@5.36.0-7+deb12u2	no fix listed
Low	DEBIAN-CVE-2025-7709	sqlite3@3.40.1-2+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-3784	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15
Low	BIT-gdal-2026-8086	gdal@3.11.3	3.13.0
Low	RHSA-2026:6766	python3.9@3.9.23-2.el9	0:3.9.25-3.el9_7.2
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.135.Final	4.1.136.Final
Low	DEBIAN-CVE-2025-14819	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2026-42015	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7
Low	DEBIAN-CVE-2026-76642	util-linux@2.38.1-5+deb12u3	no fix listed
Low	BIT-java-2026-47063	java@21.0.8-12-0	1.8.0
Low	RHSA-2026:39315	libsolv@0.7.24-5.el9_8	0:0.7.24-6.el9_8
Low	DEBIAN-CVE-2026-11822	sqlite3@3.40.1-2+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-11824	sqlite3@3.40.1-2+deb12u1	no fix listed
Low	BIT-postgresql-2026-6476	postgresql@17.6.0-0	17.10.0
Low	BIT-postgresql-2026-6471	postgresql@17.6.0-0	14.24.0
Low	BIT-gdal-2026-8087	gdal@3.11.3	3.13.0
Low	RHSA-2026:20597	glibc@2.34-231.el9_7.2	0:2.34-270.el9_8
Low	GHSA-6cqp-g7gg-8hr5	netty-codec-http@4.1.135.Final	4.1.136.Final
Low	DEBIAN-CVE-2025-40909	perl@5.36.0-7+deb12u2	5.36.0-7+deb12u3
Low	GHSA-6hg6-v5c8-fphq	log4j-core@2.19.0	2.25.4
Low	BIT-java-2025-53057	java@21.0.8-12-0	1.8.0
Low	DEBIAN-CVE-2026-48961	perl@5.36.0-7+deb12u2	no fix listed
Low	GHSA-72hv-8253-57qq	jackson-core@2.17.2	2.18.6
Low	RHSA-2026:42952	glibc@2.34-270.el9_8	0:2.34-274.el9_8
Low	BIT-elasticsearch-2026-72686	elasticsearch@9.1.2-0	8.19.20
Low	DEBIAN-CVE-2026-63074	openssl@3.0.17-1~deb12u2	no fix listed
Low	GHSA-m4cv-j2px-7723	netty-codec-http@4.1.118.Final	4.1.133.Final
Low	RHSA-2026:0312	cups@1:2.3.3op2-34.el9_7	1:2.3.3op2-34.el9_7.2
Low	DEBIAN-CVE-2025-14524	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2025-14831	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u6
Low	RHSA-2026:4188	gnutls@3.8.3-9.el9	0:3.8.3-10.el9_7
Low	DEBIAN-CVE-2026-6238	glibc@2.36-9+deb12u10	no fix listed
Low	BIT-java-2026-61308	java@21.0.8-12-0	1.8.0
Low	RHSA-2026:55787	java-21-openjdk@1:21.0.11.0.10-2.el9	1:21.0.12.1.1-1.2.el9
Low	GHSA-rcqc-6cw3-h962	jackson-databind@2.21.2	2.21.4
Low	GHSA-5gvw-p9qm-jgwh	jackson-databind@2.21.4	2.21.5
Low	DEBIAN-CVE-2025-65018	libpng1.6@1.6.39-2	1.6.39-2+deb12u1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.15latest	11 days ago	—	642021,143	15,089

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/it-at-m/dave.svg)](https://charts.stackradar.io/charts/it-at-m/dave)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.