zwave-js-ui Helm chart

Name: zwave-js-ui Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

k8sonlab

Scored 14 Sept 2026

Helmchart for zwave-js-ui

Latest 0.7.12 24 days agoapp version 11.22.3 0Artifact Hub

zwave-js-ui 0.7.12 deploys 1 container image: zwavejs/zwave-js-ui. Across them, 80 findings — 0 critical, 1 high. The highest contribution is GHSA-r5fr-rjxr-66jc in lodash 4.17.23, fixed in 4.18.0.

Radar Score

973011564

80 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
zwavejs/zwave-js-ui	11.22.3	011564	973

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

64 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-34x7-hfp2-rc4v	tar@7.4.3	7.5.7
Low	GHSA-r635-g3xr-vw7x	engine.io@6.6.4	6.6.7
Low	GHSA-rgw5-rvv9-x895	brace-expansion@2.0.2	2.1.4
Low	ALPINE-CVE-2026-63072	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-gr94-w7qr-f4j3	engine.io@6.6.4	6.6.7
Low	GHSA-5m6q-g25r-mvwx	node-forge@1.3.2	1.4.0
Low	GHSA-qffp-2rhf-9h96	tar@7.4.3	7.5.10
Low	GHSA-23hp-3jrh-7fpw	tar@7.4.3	7.5.19
Low	GHSA-52cp-r559-cp3m	js-yaml@4.1.1	4.3.0
Low	GHSA-q67f-28xg-22rw	node-forge@1.3.2	1.4.0
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-7r86-cg39-jmmj	minimatch@9.0.5	9.0.7
Low	GHSA-2m8v-j782-fhvr	socket.io-parser@4.2.4	4.2.7
Low	GHSA-8qq5-rm4j-mr97	tar@7.4.3	7.5.3
Low	GHSA-jmr9-qjv8-65gv	extract-zip@2.0.1	no fix listed
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-23c5-xmqv-rm74	minimatch@9.0.5	9.0.7
Low	GHSA-ppp5-5v6c-4jwp	node-forge@1.3.2	1.4.0
Low	GHSA-mh99-v99m-4gvg	brace-expansion@2.0.2	2.1.3
Low	GHSA-73rr-hh4g-fpgx	diff@5.2.0	5.2.2
Low	GHSA-8x88-c5mf-7j5w	tar@7.4.3	7.5.18
Low	GHSA-c2c7-rcm5-vvqj	picomatch@4.0.2	4.0.4
Low	GHSA-mwp4-54f8-5fhr	ip-address@9.0.5	10.3.1
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-r6q2-hw4h-h46w	tar@7.4.3	7.5.4
Low	GHSA-2883-xcg3-v3hh	js-yaml@4.1.1	4.3.2
Low	GHSA-r292-9mhp-454m	tar@7.4.3	7.5.21
Low	GHSA-7pqw-9j4j-h8q3	extract-zip@2.0.1	no fix listed
Low	GHSA-w4pp-8pjf-rmxw	pacote@19.0.1	21.5.1
Low	GHSA-2328-f5f3-gj25	node-forge@1.3.2	1.4.0
Low	GHSA-9ppj-qmqm-q256	tar@7.4.3	7.5.11
Low	GHSA-wc9g-mqfw-jrwm	multer@2.0.2	2.3.0
Low	GHSA-f886-m6hf-6m8v	brace-expansion@2.0.2	2.0.3
Low	GHSA-535w-7cp7-47q4	multer@2.0.2	2.3.0
Low	GHSA-72gw-mp4g-v24j	multer@2.0.2	2.2.0
Low	ALPINE-CVE-2026-76642	util-linux@2.41-r9	2.41.6-r0
Low	GHSA-83g3-92jg-28cx	tar@7.4.3	7.5.8
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-w8wr-v893-vjvp	tar@7.4.3	7.5.18
Low	GHSA-52v5-jr5w-gjxr	sigstore@3.1.0	4.1.1
Low	GHSA-gvwx-54wh-qm9j	tar@7.4.3	7.5.17
Low	GHSA-v2v4-37r5-5v8g	ip-address@9.0.5	10.1.1
Low	GHSA-378v-28hj-76wf	bn.js@4.12.2	4.12.3
Low	GHSA-58qx-3vcg-4xpx	ws@8.17.1	8.20.1
Low	GHSA-3v7f-55p6-f55p	picomatch@4.0.2	4.0.4
Low	GHSA-h67p-54hq-rp68	js-yaml@4.1.1	4.2.0
Low	ALPINE-CVE-2026-78408	util-linux@2.41-r9	2.41.6-r1
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@2.0.2	2.1.2
Low	GHSA-q8mj-m7cp-5q26	qs@6.14.2	6.15.2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.7.12latest	24 days ago	11.22.3	011564	973

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/k8sonlab/zwave-js-ui.svg)](https://charts.stackradar.io/charts/k8sonlab/zwave-js-ui)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.