dave Helm chart

Name: dave Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

it-at-m

Scored 14 Sept 2026

DAVe traffic counting plattform

Latest 0.2.15 11 days agoApp version not verified against the render 0Artifact Hub

dave 0.2.15 deploys 11 container images: ghcr.io/it-at-m/dave-admin-portal/dave-adminportal, ghcr.io/it-at-m/dave-backend/dave-backend, ghcr.io/it-at-m/dave-document-storage/dave-document-storage, ghcr.io/it-at-m/dave-eai/dave-eai and 6 more. Across the 10 measured, 1,355 findings — 6 critical, 4 high. The highest contribution is GHSA-f58c-gq56-vjjf in tika-parser-pdf-module 2.9.3, fixed in 3.2.2.

Radar Score

15,089642021,143

1,355 findings over 10 of 11 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/it-at-m/dave-admin-portal/dave-adminportal	10.0.0	00144	453
ghcr.io/it-at-m/dave-backend/dave-backend	10.0.0	01752	725
ghcr.io/it-at-m/dave-document-storage/dave-document-storage	10.0.0	101378	1,124
ghcr.io/it-at-m/dave-eai/dave-eai	10.0.0	00737	479
ghcr.io/it-at-m/dave-frontend/dave-frontend	10.0.0	00144	453
ghcr.io/it-at-m/dave-geodata-eai/dave-geodata-eai	10.0.0	00642	515
ghcr.io/it-at-m/dave-selfservice-portal/dave-selfserviceportal	10.0.0	00144	453
bitnamilegacy/elasticsearch	9.1.2-debian-12-r0	3162361	4,681
bitnamilegacy/postgresql	17.6.0-debian-12-r0	1152220	3,097
bitnami/keycloak×2	26.3.3-debian-12-r0	—	unmeasured
bitnamilegacy/postgresql	latest	1152221	3,109

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

610 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-38f8-5428-x5cv	netty-codec-http@4.1.118.Final	4.1.133.Final
Low	DEBIAN-CVE-2026-3783	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2026-4873	curl@7.88.1-10+deb12u12	no fix listed
Low	DSA-6189-1	libpng1.6@1.6.39-2	1.6.39-2+deb12u4
Low	GHSA-8c42-7qj2-3j46	netty-codec-http@4.1.135.Final	4.1.137.Final
Low	DEBIAN-CVE-2026-34743	xz-utils@5.4.1-1	5.4.1-1+deb12u1
Low	GHSA-9fxm-vc8v-hj55	jackson-databind@2.21.2	2.21.4
Low	DEBIAN-CVE-2026-5704	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	BIT-elasticsearch-2026-63136	elasticsearch@9.1.2-0	8.19.15
Low	BIT-elasticsearch-2026-63140	elasticsearch@9.1.2-0	8.19.19
Low	BIT-elasticsearch-2026-63144	elasticsearch@9.1.2-0	8.19.19
Low	BIT-elasticsearch-2026-63263	elasticsearch@9.1.2-0	8.19.19
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.17.2	2.18.8
Low	DEBIAN-CVE-2026-3184	util-linux@2.38.1-5+deb12u3	no fix listed
Low	BIT-elasticsearch-2026-56144	elasticsearch@9.1.2-0	8.19.18
Low	DEBIAN-CVE-2026-58055	nghttp2@1.52.0-1+deb12u2	no fix listed
Low	BIT-java-2026-21933	java@21.0.8-12-0	1.8.0
Low	RHSA-2026:33226	glibc@2.34-270.el9_8	0:2.34-272.el9_8
Low	DEBIAN-CVE-2026-7010	perl@5.36.0-7+deb12u2	no fix listed
Low	GHSA-4mp9-239f-g9hg	netty-codec-http@4.1.135.Final	4.1.136.Final
Low	DEBIAN-CVE-2026-19487	perl@5.36.0-7+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-22801	libpng1.6@1.6.39-2	1.6.39-2+deb12u2
Low	RHSA-2026:12441	libcap@2.48-10.el9	0:2.48-10.el9_7.1
Low	DEBIAN-CVE-2026-89158	pcre2@10.42-1	10.42-1+deb12u1
Low	GHSA-m9gh-789g-q5pv	elasticsearch@9.1.2	9.1.8
Low	DEBIAN-CVE-2025-27587	openssl@3.0.17-1~deb12u2	no fix listed
Low	BIT-java-2026-46968	java@21.0.8-12-0	1.8.0
Low	RHSA-2026:64812	expat@2.5.0-6.el9_8.1	0:2.5.0-6.el9_8.3
Low	RHSA-2025:23342	python3.9@3.9.23-2.el9	0:3.9.25-2.el9_7
Low	BIT-elasticsearch-2026-56149	elasticsearch@9.1.2-0	8.19.17
Low	DEBIAN-CVE-2013-4392	systemd@252.38-1~deb12u1	no fix listed
Low	RHSA-2026:13677	systemd@252-55.el9_7.2	0:252-55.el9_7.9
Low	GHSA-5hh8-q8hv-fr38	jackson-databind@2.21.2	2.21.4
Low	DEBIAN-CVE-2026-78408	util-linux@2.38.1-5+deb12u3	no fix listed
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.21.2	2.21.4
Low	RHSA-2026:42736	acl@2.3.1-4.el9	0:2.4.0-1.el9_8
Low	DEBIAN-CVE-2026-41989	libgcrypt20@1.10.1-3	1.10.1-3+deb12u1
Low	BIT-java-2026-62574	java@21.0.8-12-0	1.8.0
Low	GO-2026-4981	stdlib@go1.24.6	1.25.10
Low	DEBIAN-CVE-2023-31439	systemd@252.38-1~deb12u1	no fix listed
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.21.4	2.21.5
Low	GO-2026-4977	stdlib@go1.24.6	1.25.10
Low	DEBIAN-CVE-2023-31437	systemd@252.38-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2025-68973	gnupg2@2.2.40-1.1	2.2.40-1.1+deb12u2
Low	GO-2026-4986	stdlib@go1.24.6	1.25.10
Low	RHSA-2026:61581	tar@2:1.34-11.el9	2:1.34-13.el9_8
Low	GO-2026-4918	golang.org/x/net@v0.42.0	0.53.0
Low	GO-2026-4918	stdlib@go1.24.6	1.25.10
Low	GO-2026-4337	stdlib@go1.24.6	1.24.13
Low	DEBIAN-CVE-2026-4438	glibc@2.36-9+deb12u10	2.36-9+deb12u14

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.15latest	11 days ago	—	642021,143	15,089

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/it-at-m/dave.svg)](https://charts.stackradar.io/charts/it-at-m/dave)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.