yapi Helm chart

Name: yapi Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

joelee2012

Scored 14 Sept 2026

A Helm chart for yapi

Latest 0.2.0 1 year agoapp version 1.10.2 0Artifact Hub

yapi 0.2.0 deploys 1 container image: jayfong/yapi. Across them, 368 findings — 4 critical, 15 high. The highest contribution is ALPINE-CVE-2021-3711 in openssl 1.1.1g-r0, fixed in 1.1.1l-r0.

Radar Score

6,454415155194

368 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
jayfong/yapi	1.10.2	415155194	6,454

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

194 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-m5w8-4gq2-6f8x	vm2@3.9.4	3.11.6
Low	GHSA-w8wr-v893-vjvp	tar@4.4.13	7.5.18
Low	GHSA-m7pr-hjqh-92cm	axios@0.18.1	0.31.1
Low	GHSA-hjrf-2m68-5959	jsonwebtoken@7.4.1	9.0.0
Low	GHSA-h8hf-x3f4-xwgp	mongoose@5.7.5	5.13.15
Low	ALPINE-CVE-2021-42374	busybox@1.31.1-r9	1.31.1-r11
Low	GHSA-49q7-c7j4-3p7m	elliptic@6.5.4	6.5.7
Low	GHSA-wvqx-v3f6-w8rh	jsrsasign@8.0.12	11.1.1
Low	GHSA-p6gq-j5cr-w38f	nodemailer@4.0.1	9.0.1
Low	GHSA-869p-cjfg-cm3x	jws@3.2.2	3.2.3
Low	GHSA-mmx7-hfxf-jppx	axios@0.18.1	0.33.0
Low	GHSA-3c3p-xh4f-pfh7	json-schema-editor-visual@1.1.1	no fix listed
Low	GHSA-vvjj-xcjg-gr5g	nodemailer@4.0.1	8.0.5
Low	MAL-2022-4933	npm-cli-docs@0.1.0	no fix listed
Low	GHSA-cm22-4g7w-348p	serve-static@1.10.3	1.16.0
Low	GHSA-q7cg-457f-vx79	joi@6.10.1	17.13.4
Low	GHSA-p9pc-299p-vxgp	yargs-parser@9.0.2	13.1.2
Low	GHSA-gvwx-54wh-qm9j	tar@4.4.13	7.5.17
Low	GHSA-434g-2637-qmqr	elliptic@6.5.4	6.5.6
Low	GHSA-9965-vmph-33xx	validator@10.11.0	13.15.20
Low	GHSA-vjh7-7g9h-fjfh	elliptic@6.5.4	6.6.1
Low	GHSA-378v-28hj-76wf	bn.js@5.2.0	5.2.3
Low	GHSA-663h-2vr3-ghrj	yapi-vendor@1.10.2	no fix listed
Low	GHSA-977x-g7h5-7qgw	elliptic@6.5.4	6.5.7
Low	GHSA-m6fv-jmcg-4jfg	send@0.13.2	0.19.0
Low	GHSA-w9j2-pvgh-6h63	axios@0.18.1	0.31.1
Low	GHSA-fc9h-whq2-v747	elliptic@6.5.4	6.6.0
Low	GHSA-3v7f-55p6-f55p	picomatch@2.3.0	2.3.2
Low	GHSA-qw6h-vgh9-j6wx	express@4.13.4	4.20.0
Low	GHSA-mh29-5h37-fv8m	js-yaml@3.14.1	3.14.2
Low	GHSA-7q8q-rj6j-mhjq	axios@0.18.1	0.33.0
Low	GHSA-h9rv-jmmf-4pgx	serialize-javascript@1.9.1	2.1.1
Low	GHSA-fxwf-4rqh-v8g3	socket.io@1.7.3	2.4.0
Low	GHSA-h67p-54hq-rp68	js-yaml@3.14.1	3.15.0
Low	GHSA-6v5v-wf23-fmfq	markdown-it@8.4.0	14.2.0
Low	GHSA-mpf8-4hx2-7cjg	vm2@3.9.4	3.11.0
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@1.1.11	1.1.16
Low	GHSA-5c6j-r48x-rmvq	serialize-javascript@1.9.1	7.0.3
Low	GHSA-vmf3-w455-68vh	tar@4.4.13	7.5.16
Low	GHSA-4vj7-5mj6-jm8m	morgan@1.6.1	1.11.0
Low	GHSA-5c9x-8gcm-mpgx	axios@0.18.1	0.31.1
Low	GHSA-vf2m-468p-8v99	axios@0.18.1	0.31.1
Low	GHSA-v27g-jcqj-v8rw	vm2@3.9.4	3.11.0
Low	GHSA-qx2v-qp2m-jg93	postcss@5.2.18	8.5.10
Low	GHSA-9h6g-pr28-7cqp	nodemailer@4.0.1	6.9.9
Low	GHSA-f7q4-pwc6-w24p	elliptic@6.5.4	6.5.7
Low	GHSA-2x7j-588g-ccc2	nodemailer@4.0.1	9.1.0
Low	GHSA-36jr-mh4h-2g58	d3-color@1.4.1	3.1.0
Low	GHSA-5p4m-2wfm-xmqj	js-yaml@3.14.1	3.15.1
Low	GHSA-5v72-xg48-5rpm	ws@2.3.1	3.3.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.0latest	1 year ago	1.10.2	415155194	6,454

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/joelee2012/yapi.svg)](https://charts.stackradar.io/charts/joelee2012/yapi)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.