tapm-component 5.7.1 Helm chart

Name: tapm-component Helm chart 5.7.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kubebb

Scored 14 Sept 2026

帮助用户理解系统行为。通过对系统运行数据的分析，当系统发生故障时，快速定位故障

Version 5.7.1 2 years agoapp version v5.7.1 0Artifact Hub

tapm-component 5.7.1 deploys 3 container images: refar/apm-api, refar/apm-operator-server and refar/apm-portal. Across them, 444 findings — 14 critical, 54 high — 10 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.3.2.RELEASE, fixed in 2.5.12.

Radar Score

10,2641454177199

444 findings over 3 of 3 images measured

KEV ×10 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
refar/apm-api	v5.7.1	63493100	5,551
refar/apm-operator-server	v5.7.1	7155258	3,146
refar/apm-portal	v5.7.1	153241	1,567

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

313 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-36p3-wjmg-h94xKEV	spring-boot-starter-web@2.3.2.RELEASE	2.5.12
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webmvc@5.2.8.RELEASE	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@5.2.8.RELEASE	5.2.20.RELEASE
Critical	GHSA-83qj-6fr2-vhqgKEV	tomcat-embed-core@9.0.37	9.0.99
Critical	ALPINE-CVE-2021-3711	openssl@1.1.1k-r0	1.1.1l-r0
Critical	GHSA-fjq5-5j5f-mvxh	commons-collections@3.2.1	3.2.2
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.26	2.0
Critical	GHSA-5j33-cvvr-w245	tomcat-embed-core@9.0.37	9.0.98
High	GHSA-phwq-j96m-2c2q	ejs@2.7.4	3.1.7
High	GHSA-4wrc-f8pq-fpqp	spring-web@5.2.8.RELEASE	6.0.0
High	GHSA-wmwf-9ccg-fff5	tomcat-embed-core@9.0.37	9.0.109
High	GHSA-h3gc-qfqq-6h8f	tomcat-embed-core@9.0.37	9.0.106
High	GHSA-4w82-r329-3q67	jackson-databind@2.7.9.4	2.7.9.7
High	GHSA-g5vr-rgqm-vf78	spring-webmvc@5.2.8.RELEASE	no fix listed
High	ALPINE-CVE-2020-1967	openssl@1.1.1d-r0	1.1.1g-r0
High	ALPINE-CVE-2021-23840	openssl@1.1.1d-r0	1.1.1j-r0
High	GHSA-hfrx-6qgj-fp6c	tomcat-embed-core@9.0.37	9.0.71
High	ALPINE-CVE-2021-3712	openssl@1.1.1k-r0	1.1.1l-r0
High	GHSA-q93h-jc49-78gg	jackson-databind@2.7.9.4	2.7.9.7
High	GHSA-p43x-xfjf-5jhr	jackson-databind@2.7.9.4	2.7.9.7
High	ALPINE-CVE-2022-37434	zlib@1.2.11-r3	1.2.11-r4
High	GHSA-59j4-wjwp-mw9m	velocity@1.6.4	no fix listed
High	GHSA-qppj-fm5r-hxr3KEV	tomcat-embed-core@9.0.37	9.0.81
High	ALPINE-CVE-2021-3449	openssl@1.1.1d-r0	1.1.1k-r0
High	GHSA-645p-88qh-w398	jackson-databind@2.7.9.4	2.7.9.5
High	GHSA-crf3-v9rr-v7hj	fastjson@1.2.75	no fix listed
High	GHSA-9gph-22xh-8x98	jackson-databind@2.7.9.4	2.9.10.8
High	GHSA-9mxf-g3x6-wv74	jackson-databind@2.7.9.4	2.7.9.5
High	GHSA-h822-r4r5-v8jg	jackson-databind@2.7.9.4	2.8.11.5
High	GHSA-w573-4hg7-7wgq	decode-uri-component@0.2.0	0.2.1
High	GHSA-c8hm-7hpq-7jhg	jackson-databind@2.7.9.4	2.7.9.5
High	GHSA-f9hv-mg5h-xcw9	jackson-databind@2.7.9.4	2.7.9.5
High	GHSA-mx9v-gmh4-mgqw	jackson-databind@2.7.9.4	2.7.9.5
High	GHSA-pv7h-hx5h-mgfj	fastjson@1.2.75	1.2.83
High	GHSA-558x-2xjg-6232	spring-expression@5.2.8.RELEASE	5.2.20.RELEASE
High	GHSA-7w75-32cg-r6g2	tomcat-embed-core@9.0.37	9.0.86
High	GHSA-mph4-vhrx-mv67	jackson-databind@2.7.9.4	2.7.9.6
High	GHSA-5ww9-j83m-q7qx	jackson-databind@2.7.9.4	2.7.9.6
High	GHSA-4gq5-ch57-c2mg	jackson-databind@2.7.9.4	2.7.9.5
High	GHSA-3jfq-g458-7qm9	tar@4.4.13	4.4.14
High	GHSA-gww7-p5w4-wrfv	jackson-databind@2.7.9.4	2.7.9.7
High	GHSA-j39c-c8hj-x4j3	tomcat-embed-core@9.0.37	9.0.43
High	GHSA-6fpp-rgj9-8rwc	jackson-databind@2.7.9.4	2.7.9.6
High	GHSA-6hgm-866r-3cjv	commons-collections@3.2.1	3.2.2
High	GHSA-288c-cq4h-88gq	jackson-databind@2.7.9.4	2.9.10.7
High	GHSA-x2w5-5m2g-7h5m	jackson-databind@2.7.9.4	2.7.9.5
High	GHSA-27hp-xhwr-wr2m	tomcat-embed-core@9.0.37	9.0.98
High	GHSA-5r5r-6hpj-8gg9	jackson-databind@2.7.9.4	2.9.10.8
Medium	GHSA-hrpp-h998-j3pp	qs@6.5.2	6.5.3
Medium	GHSA-f9xh-2qgp-cq57	jackson-databind@2.7.9.4	2.9.10.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
5.7.1latest	2 years ago	v5.7.1	1454177199	10,264

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kubebb/tapm-component.svg)](https://charts.stackradar.io/charts/kubebb/tapm-component)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.