StackRadar

zammad-ldap-sync 0.6.5 Helm chart

it-at-mVerified publisher

Scored 14 Sept 2026

Version 0.6.5 13 days agoApp version not verified against the render 0Artifact Hub

zammad-ldap-sync 0.6.5 deploys 1 container image: ghcr.io/it-at-m/zammad-ldap-sync. Across them, 95 findings2 critical, 3 high 1 on CISA KEV. The highest contribution is GHSA-83qj-6fr2-vhqg in tomcat-embed-core 10.1.34, fixed in 10.1.35.

Radar Score

1,345231773

95 findings over 1 of 1 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
ghcr.io/it-at-m/zammad-ldap-syncdev2317731,345

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

73 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGHSA-9342-92gg-6v29smtp@2.0.32.0.4
LowRHSA-2026:54268python3.9@3.9.25-7.el9_80:3.9.25-7.el9_8.3
LowRHSA-2026:39798python3.9@3.9.25-7.el9_80:3.9.25-7.el9_8.2
LowRHSA-2026:55440glib2@2.68.4-19.el9_8.10:2.68.4-19.el9_8.9
LowRHSA-2026:55439curl@7.76.1-40.el90:7.76.1-40.el9_8.5
LowGHSA-fv25-8xcx-gqjctomcat-embed-core@10.1.3410.1.55
LowRHSA-2026:42089glib2@2.68.4-19.el9_8.10:2.68.4-19.el9_8.2
LowGHSA-23hv-mwm6-g8jftomcat-embed-core@10.1.3410.1.42
LowGHSA-563x-q5rq-57qptomcat-embed-core@10.1.3410.1.52
LowGHSA-mgp5-rv84-w37qtomcat-embed-core@10.1.3410.1.52
LowRHSA-2026:52674libarchive@3.5.3-9.el9_70:3.5.3-11.el9_8
LowGHSA-qv9r-c865-cp47log4j-api@2.24.32.25.5
LowGHSA-5mp6-jrq3-r938tomcat-embed-core@10.1.3410.1.55
LowGHSA-jmp9-x22r-554xspring-core@6.2.16.2.11
LowGHSA-rv64-5gf8-9qq8tomcat-embed-core@10.1.3410.1.54
LowGHSA-x4m4-345f-5h5gtomcat-embed-core@10.1.3410.1.54
LowGHSA-fpj8-gq4v-p354tomcat-embed-core@10.1.3410.1.50
LowGHSA-hgrr-935x-pq79tomcat-embed-core@10.1.3410.1.47
LowGHSA-x23c-287f-qqv5spring-webmvc@6.2.16.2.19
LowGHSA-6r3c-xf4w-jxjmspring-web@6.2.16.2.8
LowGHSA-rc42-6c7j-7h5rspring-boot@3.4.13.4.5
LowGHSA-42wg-hm62-jcwgtomcat-embed-core@10.1.3410.1.42
LowRHSA-2026:42887java-17-openjdk@1:17.0.19.0.10-2.el91:17.0.20.0.8-1.2.el9
LowGHSA-r5w3-xv2f-j59qspring-expression@6.2.16.2.19
LowRHSA-2026:39316cups@1:2.3.3op2-38.el9_81:2.3.3op2-39.el9_8
LowGHSA-9m3c-qcxr-9x87tomcat-embed-core@10.1.3410.1.53
LowRHSA-2026:39315libsolv@0.7.24-5.el9_80:0.7.24-6.el9_8
LowGHSA-72hv-8253-57qqjackson-core@2.18.22.18.6
LowRHSA-2026:42952glibc@2.34-270.el9_80:2.34-274.el9_8
LowRHSA-2026:55781java-17-openjdk@1:17.0.19.0.10-2.el91:17.0.20.1.1-1.2.el9
LowGHSA-5gvw-p9qm-jgwhjackson-databind@2.18.22.18.9
LowGHSA-pr98-23f8-jwxvlogback-core@1.5.121.5.13
LowGHSA-jhq6-gfmj-v8fxlogback-core@1.5.121.5.34
LowRHSA-2026:64800glib2@2.68.4-19.el9_8.10:2.68.4-19.el9_8.10
LowGHSA-3pjw-73gf-8qr5jackson-databind@2.18.22.18.8
LowRHSA-2026:58936sqlite@3.34.1-10.el9_80:3.34.1-11.el9_8
LowGHSA-4773-3jfm-qmx3spring-webmvc@6.2.16.2.17
LowRHSA-2026:50147libgcrypt@1.10.0-11.el90:1.10.0-13.el9_8
LowGHSA-72pg-x5f8-j25jspring-webmvc@6.2.16.2.19
LowRHSA-2026:61247libxml2@2.9.13-14.el9_8.10:2.9.13-14.el9_8.4
LowGHSA-mq64-j8f9-9gcjspring-webmvc@6.2.16.2.19
LowGHSA-r7wm-3cxj-wff9jackson-core@2.18.22.18.8
LowRHSA-2026:33226glibc@2.34-270.el9_80:2.34-272.el9_8
LowRHSA-2026:64812expat@2.5.0-6.el9_8.10:2.5.0-6.el9_8.3
LowGHSA-3chg-m5w7-qfv5spring-webmvc@6.2.16.2.19
LowGHSA-hgj6-7826-r7m5jackson-databind@2.18.22.18.8
LowRHSA-2026:42736acl@2.3.1-4.el90:2.4.0-1.el9_8
LowGHSA-wxpp-56q6-5pcgspring-expression@6.2.16.2.19
LowGHSA-5jmj-h7xm-6q6vjackson-databind@2.18.22.18.9
LowGHSA-6p4f-wcwh-5vvmspring-webmvc@6.2.16.2.18

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.6.5latest13 days ago2317731,345

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/it-at-m/zammad-ldap-sync.svg)](https://charts.stackradar.io/charts/it-at-m/zammad-ldap-sync)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.