StackRadar

tapm-component 5.7.1 Helm chart

kubebb

Scored 14 Sept 2026

帮助用户理解系统行为。通过对系统运行数据的分析，当系统发生故障时，快速定位故障

Version 5.7.1 2 years agoapp version v5.7.1 0Artifact Hub

tapm-component 5.7.1 deploys 3 container images: refar/apm-api, refar/apm-operator-server and refar/apm-portal. Across them, 444 findings — 14 critical, 54 high — 10 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.3.2.RELEASE, fixed in 2.5.12.

Radar Score

10,2641454177199

444 findings over 3 of 3 images measured

KEV ×10 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
refar/apm-apiv5.7.1634931005,551
refar/apm-operator-serverv5.7.171552583,146
refar/apm-portalv5.7.11532411,567

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

High findings

40 distinct across the version’s images

High: findings whose contribution to the Radar Score is 40–69. Show every band

SeverityAdvisoryPackageFixed in
HighGHSA-phwq-j96m-2c2qejs@2.7.43.1.7
HighGHSA-4wrc-f8pq-fpqpspring-web@5.2.8.RELEASE6.0.0
HighGHSA-wmwf-9ccg-fff5tomcat-embed-core@9.0.379.0.109
HighGHSA-h3gc-qfqq-6h8ftomcat-embed-core@9.0.379.0.106
HighGHSA-4w82-r329-3q67jackson-databind@2.7.9.42.7.9.7
HighGHSA-g5vr-rgqm-vf78spring-webmvc@5.2.8.RELEASEno fix listed
HighALPINE-CVE-2020-1967openssl@1.1.1d-r01.1.1g-r0
HighALPINE-CVE-2021-23840openssl@1.1.1d-r01.1.1j-r0
HighGHSA-hfrx-6qgj-fp6ctomcat-embed-core@9.0.379.0.71
HighALPINE-CVE-2021-3712openssl@1.1.1k-r01.1.1l-r0
HighGHSA-q93h-jc49-78ggjackson-databind@2.7.9.42.7.9.7
HighGHSA-p43x-xfjf-5jhrjackson-databind@2.7.9.42.7.9.7
HighALPINE-CVE-2022-37434zlib@1.2.11-r31.2.11-r4
HighGHSA-59j4-wjwp-mw9mvelocity@1.6.4no fix listed
HighGHSA-qppj-fm5r-hxr3KEVtomcat-embed-core@9.0.379.0.81
HighALPINE-CVE-2021-3449openssl@1.1.1d-r01.1.1k-r0
HighGHSA-645p-88qh-w398jackson-databind@2.7.9.42.7.9.5
HighGHSA-crf3-v9rr-v7hjfastjson@1.2.75no fix listed
HighGHSA-9gph-22xh-8x98jackson-databind@2.7.9.42.9.10.8
HighGHSA-9mxf-g3x6-wv74jackson-databind@2.7.9.42.7.9.5
HighGHSA-h822-r4r5-v8jgjackson-databind@2.7.9.42.8.11.5
HighGHSA-w573-4hg7-7wgqdecode-uri-component@0.2.00.2.1
HighGHSA-c8hm-7hpq-7jhgjackson-databind@2.7.9.42.7.9.5
HighGHSA-f9hv-mg5h-xcw9jackson-databind@2.7.9.42.7.9.5
HighGHSA-mx9v-gmh4-mgqwjackson-databind@2.7.9.42.7.9.5
HighGHSA-pv7h-hx5h-mgfjfastjson@1.2.751.2.83
HighGHSA-558x-2xjg-6232spring-expression@5.2.8.RELEASE5.2.20.RELEASE
HighGHSA-7w75-32cg-r6g2tomcat-embed-core@9.0.379.0.86
HighGHSA-mph4-vhrx-mv67jackson-databind@2.7.9.42.7.9.6
HighGHSA-5ww9-j83m-q7qxjackson-databind@2.7.9.42.7.9.6
HighGHSA-4gq5-ch57-c2mgjackson-databind@2.7.9.42.7.9.5
HighGHSA-3jfq-g458-7qm9tar@4.4.134.4.14
HighGHSA-gww7-p5w4-wrfvjackson-databind@2.7.9.42.7.9.7
HighGHSA-j39c-c8hj-x4j3tomcat-embed-core@9.0.379.0.43
HighGHSA-6fpp-rgj9-8rwcjackson-databind@2.7.9.42.7.9.6
HighGHSA-6hgm-866r-3cjvcommons-collections@3.2.13.2.2
HighGHSA-288c-cq4h-88gqjackson-databind@2.7.9.42.9.10.7
HighGHSA-x2w5-5m2g-7h5mjackson-databind@2.7.9.42.7.9.5
HighGHSA-27hp-xhwr-wr2mtomcat-embed-core@9.0.379.0.98
HighGHSA-5r5r-6hpj-8gg9jackson-databind@2.7.9.42.9.10.8

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
5.7.1latest2 years agov5.7.1145417719910,264

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/kubebb/tapm-component.svg)](https://charts.stackradar.io/charts/kubebb/tapm-component)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.