kanbanapp-demo Helm chart

Name: kanbanapp-demo Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kanbanapp-demo

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 0.3.0 5 years agodeploys tag kanban-board-kanban-app 0Artifact Hub

kanbanapp-demo 0.3.0 deploys 3 container images: sdandey/dandey-apps and library/postgres. Across them, 267 findings — 13 critical, 38 high — 8 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-beans 5.1.8.RELEASE, fixed in 5.2.20.RELEASE.

Radar Score

7,498133814274

267 findings over 3 of 3 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
sdandey/dandey-apps×2	kanban-board-kanban-app	112611065	5,784
library/postgres×2	9.6-alpine	19184	1,087
sdandey/dandey-apps×2	kanban-board-kanban-ui	13145	627

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

252 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@5.1.8.RELEASE	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webmvc@5.1.8.RELEASE	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-boot-starter-web@2.1.6.RELEASE	2.5.12
Critical	GHSA-83qj-6fr2-vhqgKEV	tomcat-embed-core@9.0.21	9.0.99
Critical	GHSA-c9hw-wf7x-jp9jKEV	tomcat-embed-core@9.0.21	9.0.31
Critical	ALPINE-CVE-2020-15999KEV	freetype@2.9.1-r2	2.9.1-r3
Critical	ALPINE-CVE-2022-29155	openldap@2.6.0-r0	2.6.2-r0
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.23	2.0
Critical	ALPINE-CVE-2019-8457	sqlite@3.26.0-r3	3.28.0-r0
Critical	GHSA-5j33-cvvr-w245	tomcat-embed-core@9.0.21	9.0.98
Critical	GHSA-8wx2-9q48-vm9r	spring-webmvc@5.1.8.RELEASE	5.1.13.RELEASE
Critical	GHSA-m7jv-hq7h-mq7c	tomcat-embed-websocket@9.0.21	9.0.37
High	ALPINE-CVE-2022-0778	openssl@1.1.1l-r7	1.1.1n-r0
High	ALPINE-CVE-2022-0778	libretls@3.3.4-r2	3.3.4-r3
High	GHSA-4wrc-f8pq-fpqp	spring-web@5.1.8.RELEASE	6.0.0
High	GHSA-wmwf-9ccg-fff5	tomcat-embed-core@9.0.21	9.0.109
High	GHSA-h3gc-qfqq-6h8f	tomcat-embed-core@9.0.21	9.0.106
High	GHSA-4w82-r329-3q67	jackson-databind@2.9.9	2.9.10.3
High	ALPINE-CVE-2023-0286	openssl@1.1.1l-r7	1.1.1t-r0
High	GHSA-g5vr-rgqm-vf78	spring-webmvc@5.1.8.RELEASE	no fix listed
High	ALPINE-CVE-2018-25032	zlib@1.2.11-r3	1.2.12-r0
High	ALPINE-CVE-2021-23840	openssl@1.1.1b-r1	1.1.1j-r0
High	ALPINE-CVE-2023-2650	openssl@1.1.1l-r7	1.1.1u-r0
High	GHSA-hfrx-6qgj-fp6c	tomcat-embed-core@9.0.21	9.0.71
High	GHSA-344f-f5vg-2jfj	tomcat-embed-core@9.0.21	9.0.35
High	GHSA-q93h-jc49-78gg	jackson-databind@2.9.9	2.9.10.4
High	GHSA-p43x-xfjf-5jhr	jackson-databind@2.9.9	2.9.10.4
High	ALPINE-CVE-2022-37434	zlib@1.2.11-r3	1.2.12-r2
High	GHSA-qppj-fm5r-hxr3KEV	tomcat-embed-core@9.0.21	9.0.81
High	ALPINE-CVE-2021-30560	libxslt@1.1.34-r1	1.1.35-r0
High	ALPINE-CVE-2021-3449	openssl@1.1.1b-r1	1.1.1k-r0
High	GHSA-rvwf-54qp-4r6v	snakeyaml@1.23	1.26
High	GHSA-53hp-jpwq-2jgq	tomcat-embed-core@9.0.21	9.0.35
High	GHSA-9gph-22xh-8x98	jackson-databind@2.9.9	2.9.10.8
High	GHSA-h822-r4r5-v8jg	jackson-databind@2.9.9	2.9.10
High	GHSA-558x-2xjg-6232	spring-expression@5.1.8.RELEASE	5.2.20.RELEASE
High	GHSA-7w75-32cg-r6g2	tomcat-embed-core@9.0.21	9.0.86
High	ALPINE-CVE-2022-40303	libxml2@2.9.12-r2	2.9.14-r2
High	GHSA-mph4-vhrx-mv67	jackson-databind@2.9.9	2.9.9.1
High	ALPINE-CVE-2022-4450	openssl@1.1.1l-r7	1.1.1t-r0
High	GHSA-gww7-p5w4-wrfv	jackson-databind@2.9.9	2.9.10.2
High	GHSA-j39c-c8hj-x4j3	tomcat-embed-core@9.0.21	9.0.43
High	GHSA-6fpp-rgj9-8rwc	jackson-databind@2.9.9	2.9.9.2
High	GHSA-288c-cq4h-88gq	jackson-databind@2.9.9	2.9.10.7
High	ALPINE-CVE-2019-12900	bzip2@1.0.6-r6	1.0.6-r7
High	GHSA-27hp-xhwr-wr2m	tomcat-embed-core@9.0.21	9.0.98
High	GHSA-5r5r-6hpj-8gg9	jackson-databind@2.9.9	2.9.10.8
Medium	GHSA-f9xh-2qgp-cq57	jackson-databind@2.9.9	2.9.10.8
Medium	GHSA-m6x4-97wx-4q27	jackson-databind@2.9.9	2.9.10.8
Medium	GHSA-fqwf-pjwf-7vqv	jackson-databind@2.9.9	2.9.10.4

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.3.0latest	5 years ago	kanban-board-kanban-app	133814274	7,498

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kanbanapp-demo/kanbanapp-demo.svg)](https://charts.stackradar.io/charts/kanbanapp-demo/kanbanapp-demo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.