dave Helm chart

Name: dave Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

it-at-m

Scored 14 Sept 2026

DAVe traffic counting plattform

Latest 0.2.15 11 days agoApp version not verified against the render 0Artifact Hub

dave 0.2.15 deploys 11 container images: ghcr.io/it-at-m/dave-admin-portal/dave-adminportal, ghcr.io/it-at-m/dave-backend/dave-backend, ghcr.io/it-at-m/dave-document-storage/dave-document-storage, ghcr.io/it-at-m/dave-eai/dave-eai and 6 more. Across the 10 measured, 1,355 findings — 6 critical, 4 high. The highest contribution is GHSA-f58c-gq56-vjjf in tika-parser-pdf-module 2.9.3, fixed in 3.2.2.

Radar Score

15,089642021,143

1,355 findings over 10 of 11 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/it-at-m/dave-admin-portal/dave-adminportal	10.0.0	00144	453
ghcr.io/it-at-m/dave-backend/dave-backend	10.0.0	01752	725
ghcr.io/it-at-m/dave-document-storage/dave-document-storage	10.0.0	101378	1,124
ghcr.io/it-at-m/dave-eai/dave-eai	10.0.0	00737	479
ghcr.io/it-at-m/dave-frontend/dave-frontend	10.0.0	00144	453
ghcr.io/it-at-m/dave-geodata-eai/dave-geodata-eai	10.0.0	00642	515
ghcr.io/it-at-m/dave-selfservice-portal/dave-selfserviceportal	10.0.0	00144	453
bitnamilegacy/elasticsearch	9.1.2-debian-12-r0	3162361	4,681
bitnamilegacy/postgresql	17.6.0-debian-12-r0	1152220	3,097
bitnami/keycloak×2	26.3.3-debian-12-r0	—	unmeasured
bitnamilegacy/postgresql	latest	1152221	3,109

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

610 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-5435	glibc@2.36-9+deb12u10	no fix listed
Low	GHSA-c2gf-v879-257j	netty-codec-http2@4.1.118.Final	4.1.135.Final
Low	BIT-elasticsearch-2026-56145	elasticsearch@9.1.2-0	8.19.18
Low	BIT-elasticsearch-2026-72679	elasticsearch@9.1.2-0	8.19.20
Low	DEBIAN-CVE-2026-54369	acl@2.3.1-3	no fix listed
Low	DEBIAN-CVE-2017-16231	pcre3@2:8.39-15	no fix listed
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.42.0	0.55.0
Low	BIT-elasticsearch-2025-68384	elasticsearch@9.1.2-0	8.19.9
Low	GHSA-qf7c-7r9h-mm92	x-pack-security@9.1.2	9.1.9
Low	DEBIAN-CVE-2026-7017	perl@5.36.0-7+deb12u2	no fix listed
Low	GHSA-84h7-rjj3-6jx4	netty-codec-http@4.1.118.Final	4.1.129.Final
Low	RHSA-2026:64800	glib2@2.68.4-19.el9_8.1	0:2.68.4-19.el9_8.10
Low	DEBIAN-CVE-2021-4214	libpng1.6@1.6.39-2	no fix listed
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.1-4	no fix listed
Low	GHSA-3pjw-73gf-8qr5	jackson-databind@2.21.2	2.21.4
Low	RHSA-2026:58936	sqlite@3.34.1-10.el9_8	0:3.34.1-11.el9_8
Low	BIT-elasticsearch-2026-72636	elasticsearch@9.1.2-0	8.19.20
Low	RHSA-2025:22660	systemd@252-55.el9_7.2	0:252-55.el9_7.7
Low	BIT-elasticsearch-2026-72638	elasticsearch@9.1.2-0	8.19.20
Low	BIT-elasticsearch-2026-72645	elasticsearch@9.1.2-0	8.19.20
Low	BIT-elasticsearch-2026-72647	elasticsearch@9.1.2-0	8.19.20
Low	BIT-elasticsearch-2026-72684	elasticsearch@9.1.2-0	8.19.21
Low	BIT-elasticsearch-2026-72687	elasticsearch@9.1.2-0	8.19.20
Low	GHSA-4q2v-9p7v-3v22	reactor-netty-http@1.0.45	1.2.8
Low	GHSA-xmv7-r254-6q78	netty-resolver-dns@4.1.118.Final	4.1.135.Final
Low	DEBIAN-CVE-2025-15079	curl@7.88.1-10+deb12u12	no fix listed
Low	DSA-5979-1	libxslt@1.1.35-1+deb12u1	1.1.35-1+deb12u2
Low	RHSA-2026:0067	tar@2:1.34-7.el9	2:1.34-9.el9_7
Low	BIT-java-2026-60147	java@21.0.8-12-0	1.8.0
Low	BIT-elasticsearch-2025-37731	elasticsearch@9.1.2-0	8.19.8
Low	DEBIAN-CVE-2026-6429	curl@7.88.1-10+deb12u12	no fix listed
Low	RHSA-2026:50147	libgcrypt@1.10.0-11.el9	0:1.10.0-13.el9_8
Low	DEBIAN-CVE-2024-22365	pam@1.5.2-6+deb12u1	1.5.2-6+deb12u2
Low	GHSA-c69g-56f8-xwqj	netty-codec-http2@4.1.135.Final	4.1.136.Final
Low	DEBIAN-CVE-2026-22796	openssl@3.0.17-1~deb12u2	3.0.18-1~deb12u2
Low	GHSA-2474-2566-3qxp	batik-script@1.14	1.17
Low	DEBIAN-CVE-2025-10148	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15
Low	RHSA-2026:61247	libxml2@2.9.13-14.el9_8.1	0:2.9.13-14.el9_8.4
Low	DEBIAN-CVE-2026-22695	libpng1.6@1.6.39-2	1.6.39-2+deb12u2
Low	GHSA-hjcp-jmpx-g3qm	httpclient5@5.5.2	5.6.3
Low	DEBIAN-CVE-2026-1965	curl@7.88.1-10+deb12u12	no fix listed
Low	DEBIAN-CVE-2022-0563	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2025-3576	krb5@1.20.1-2+deb12u3	1.20.1-2+deb12u4
Low	DEBIAN-CVE-2026-4878	libcap2@1:2.66-4+deb12u1	1:2.66-4+deb12u3
Low	DEBIAN-CVE-2026-11979	libxml2@2.9.14+dfsg-1.3~deb12u2	no fix listed
Low	RHSA-2026:0719	gnupg2@2.3.3-4.el9	0:2.3.3-5.el9_7
Low	DEBIAN-CVE-2026-7168	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15
Low	BIT-postgresql-2025-12818	postgresql@17.6.0-0	13.23.0
Low	DEBIAN-CVE-2026-86140	libxml2@2.9.14+dfsg-1.3~deb12u2	no fix listed
Low	BIT-elasticsearch-2026-78607	elasticsearch@9.1.2-0	8.19.19

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.15latest	11 days ago	—	642021,143	15,089

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/it-at-m/dave.svg)](https://charts.stackradar.io/charts/it-at-m/dave)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.