jenkins 0.10.38 Helm chart

Name: jenkins Helm chart 0.10.38: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

jenkins-x

Scored 14 Sept 2026

Open source continuous integration server. It supports multiple SCM tools including CVS, Subversion and Git. It can execute Apache Ant and Apache Maven-based projects as well as arbitrary scripts.

Version 0.10.38 7 years agoapp version 2.67 0Artifact Hub

jenkins 0.10.38 deploys 2 container images: jenkinsci/jenkins and gcr.io/jenkinsxio/jx. Across the 1 measured, 554 findings — 13 critical, 22 high — 6 on CISA KEV. The highest contribution is GHSA-xvxq-hq48-xphm in script-security 1.18.1, fixed in 1.54.

Radar Score

10,6821322244275

554 findings over 1 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
jenkinsci/jenkins×2	2.67	1322244275	10,682
gcr.io/jenkinsxio/jx	2.0.645	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

554 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-xvxq-hq48-xphmKEV	script-security@1.18.1	1.54
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@2.5.6.SEC03	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webmvc@2.5.6.SEC03	5.2.20.RELEASE
Critical	GHSA-6f9g-cxwr-q5jrKEV	jenkins-core@2.67	2.426.3
Critical	GHSA-hhpm-5cp2-hg4xKEV	jenkins-core@2.67	2.138.4
Critical	GHSA-784j-h234-m56x	script-security@1.18.1	1.50
Critical	GHSA-6q78-6xvr-26fg	script-security@1.18.1	1.50
Critical	GHSA-9g4m-ffx6-c29g	jenkins-core@2.67	2.235.4
Critical	GHSA-p66x-2cv9-qq3v	commons-beanutils@1.8.3	1.9.4
Critical	GHSA-vv7r-c36w-3prj	commons-fileupload@1.3.1-jenkins-1	1.6.0
Critical	GHSA-64mj-3p92-589v	junit@1.6	1119.1121.vc43d0fc45561
Critical	GHSA-qf38-f2fr-q4x9	jenkins-core@2.67	2.121.2
Critical	GHSA-g2xq-2v27-4rh3	jenkins-core@2.67	2.555.3
High	GHSA-v63g-v339-2673	script-security@1.18.1	1336.vf33a
High	GHSA-7x9j-7223-rg5m	commons-fileupload@1.3.1-jenkins-1	1.3.3
High	GHSA-4wrc-f8pq-fpqp	spring-web@2.5.6.SEC03	6.0.0
High	GHSA-g5vr-rgqm-vf78	spring-webmvc@2.5.6.SEC03	no fix listed
High	GHSA-26vr-8j45-3r4w	jetty-server@9.4.5.v20170502	9.4.39
High	GHSA-h856-ffvv-xvr4	remoting@3.7	3206.3208
High	GHSA-h856-ffvv-xvr4	jenkins-core@2.67	2.452.4
High	GHSA-hfrx-6qgj-fp6c	commons-fileupload@1.3.1-jenkins-1	1.5
High	GHSA-6x9x-8qw9-9pp6	jetty-server@9.4.5.v20170502	9.4.11.v20180605
High	GHSA-8cmm-qj8g-fcp6	spring-webmvc@2.5.6.SEC03	3.2.8
High	GHSA-fvm3-cfvj-gxqq	commons-fileupload@1.3.1-jenkins-1	1.3.2
High	GHSA-g6hf-f9cq-q7w7	spring-web@2.5.6.SEC03	3.2.5.RELEASE
High	GHSA-ghjx-3jg5-h6r2	mercurial@4.0	4.1.3
High	GHSA-x5jm-rj37-5qh7	script-security@1.18.1	1.51
High	GHSA-vqwg-4v6f-h6x5	matrix-project@1.4.1	1.18.1
High	GHSA-rvg5-f5fj-mxvg	credentials@2.1.2	2.6.1.1
High	GHSA-j8qv-mj4r-6fw4	jenkins-core@2.67	2.121.2
High	GHSA-6phf-73q6-gh87	commons-beanutils@1.8.3	1.9.4
High	GHSA-g8hw-794c-4j9g	spring-core@2.5.6.SEC03	4.3.15
High	GHSA-2f88-5hg8-9x2x	maven-compat@3.1.0	3.8.1
High	GHSA-2f88-5hg8-9x2x	maven-core@3.1.0	3.8.1
High	DLA-2415-1KEV	freetype@2.6.3-3.2	2.6.3-3.2+deb9u2
Medium	DSA-4280-1	openssh@1:7.4p1-10+deb9u1	1:7.4p1-10+deb9u4
Medium	DSA-4311-1	git@1:2.11.0-3+deb9u1	1:2.11.0-3+deb9u4
Medium	GHSA-6v56-cpg6-3rpx	mercurial@4.0	4.4.1
Medium	GHSA-mc84-pj99-q6hh	commons-compress@1.10	1.21
Medium	GHSA-3qmg-c9vc-r47j	mercurial@4.0	4.3
Medium	DLA-2544-1	openldap@2.4.44+dfsg-5	2.4.44+dfsg-5+deb9u7
Medium	DLA-3008-1	openssl@1.1.0f-3	1.1.0l-1~deb9u6
Medium	DSA-4511-1	nghttp2@1.18.1-1	1.18.1-1+deb9u1
Medium	GHSA-crv7-7245-f45f	commons-compress@1.10	1.21
Medium	GHSA-47wc-p5cp-w7pw	jenkins-core@2.67	2.176.4
Medium	DSA-4008-1	wget@1.18-5	1.18-5+deb9u1
Medium	DSA-4065-1	openssl1.0@1.0.2l-2	1.0.2l-2+deb9u2
Medium	GHSA-q446-82vq-w674	jsch@0.1.44-1	0.1.54
Medium	GHSA-7hfm-57qf-j43q	commons-compress@1.10	1.21
Medium	DLA-2341-1	inetutils@2:1.9.4-2+b1	2:1.9.4-2+deb9u1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.38latest	7 years ago	2.67	1322244275	10,682

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/jenkins-x/jenkins.svg)](https://charts.stackradar.io/charts/jenkins-x/jenkins)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.