nacos 0.1.1 Helm chart

Name: nacos Helm chart 0.1.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kubesphere-test

Scored 14 Sept 2026

A Helm chart for Nacos

Version 0.1.1 5 years agoapp version 1.4.1 0Artifact Hub

nacos 0.1.1 deploys 1 container image: nacos/nacos-server. Across them, 203 findings — 6 critical, 16 high — 5 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.1.17.RELEASE, fixed in 2.5.12.

Radar Score

4,1536168497

203 findings over 1 of 1 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
nacos/nacos-server	1.4.1	6168497	4,153

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

203 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-36p3-wjmg-h94xKEV	spring-boot-starter-web@2.1.17.RELEASE	2.5.12
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@5.1.18.RELEASE	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webmvc@5.1.18.RELEASE	5.2.20.RELEASE
Critical	GHSA-83qj-6fr2-vhqgKEV	tomcat-embed-core@9.0.38	9.0.99
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.23	2.0
Critical	GHSA-5j33-cvvr-w245	tomcat-embed-core@9.0.38	9.0.98
High	GHSA-4wrc-f8pq-fpqp	spring-web@5.1.18.RELEASE	6.0.0
High	GHSA-wmwf-9ccg-fff5	tomcat-embed-core@9.0.38	9.0.109
High	GHSA-h3gc-qfqq-6h8f	tomcat-embed-core@9.0.38	9.0.106
High	GHSA-g5vr-rgqm-vf78	spring-webmvc@5.1.18.RELEASE	no fix listed
High	GHSA-76h9-2vwh-w278	mina-core@2.0.0-RC1	2.0.27
High	GHSA-hfrx-6qgj-fp6c	tomcat-embed-core@9.0.38	9.0.71
High	GHSA-qppj-fm5r-hxr3KEV	tomcat-embed-core@9.0.38	9.0.81
High	GHSA-hh32-7344-cg2f	spring-security-core@5.1.12.RELEASE	5.4.11
High	GHSA-hh32-7344-cg2f	spring-security-web@5.1.12.RELEASE	5.4.11
High	GHSA-rvwf-54qp-4r6v	snakeyaml@1.23	1.26
High	GHSA-558x-2xjg-6232	spring-expression@5.1.18.RELEASE	5.2.20.RELEASE
High	GHSA-7w75-32cg-r6g2	tomcat-embed-core@9.0.38	9.0.86
High	GHSA-j39c-c8hj-x4j3	tomcat-embed-core@9.0.38	9.0.43
High	GHSA-288c-cq4h-88gq	jackson-databind@2.10.4	2.10.5.1
High	GHSA-27hp-xhwr-wr2m	tomcat-embed-core@9.0.38	9.0.98
High	GHSA-cqqj-4p63-rrmm	netty-codec-http@4.1.38.Final	4.1.44
Medium	GHSA-4jrv-ppp4-jm57	gson@2.8.6	2.8.9
Medium	GHSA-2g86-r6w2-wqqr	nacos-client@1.4.1	no fix listed
Medium	GHSA-2rvv-w9r2-rg7m	tomcat-embed-core@9.0.38	9.0.40
Medium	GHSA-mm9x-g8pc-w292	netty-handler@4.1.38.Final	4.1.46
Medium	GHSA-wm47-8v5p-wjpj	netty-codec-http2@4.1.38.Final	4.1.60.Final
Medium	GHSA-jgwr-3qm3-26f3	tomcat-embed-core@9.0.38	9.0.41
Medium	GHSA-9vjp-v76f-g363	netty-codec@4.1.38.Final	4.1.68.Final
Medium	GHSA-grg4-wf29-r9vv	netty-codec@4.1.38.Final	4.1.68.Final
Medium	GHSA-g5mm-vmx4-3rg7	spring-context@5.1.18.RELEASE	5.2.21.RELEASE
Medium	GHSA-p2v9-g2qv-p635	netty-handler@4.1.38.Final	4.1.45
Medium	GHSA-gq28-h5vg-8prx	spring-security-web@5.1.12.RELEASE	5.2.9
Medium	GHSA-f4qf-m5gf-8jm8	tomcat-embed-core@9.0.38	9.0.44
Medium	GHSA-ccgv-vj62-xf9h	spring-web@5.1.18.RELEASE	no fix listed
Medium	GHSA-57j2-w4cx-62h2	jackson-databind@2.10.4	2.12.6.1
Medium	GHSA-wm9w-rjj3-j356	tomcat-embed-core@9.0.38	9.0.90
Medium	GHSA-gqp3-2cvr-x8m3	tomcat-embed-core@9.0.38	9.0.108
Medium	GHSA-r29c-68gh-xp6x	tomcat-embed-core@9.0.38	9.0.118
Medium	GHSA-57qw-cc2g-pv5p	lxml@3.2.1	3.3.5
Medium	GHSA-q3mw-pvr8-9ggc	tomcat-embed-core@9.0.38	9.0.80
Medium	GHSA-hgjh-9rj2-g67j	spring-web@5.1.18.RELEASE	5.3.33
Medium	GHSA-55x5-fj6c-h6m8	lxml@3.2.1	4.6.5
Medium	GHSA-7r82-7xv7-xcpj	httpclient@4.5	4.5.13
Medium	GHSA-c4q5-6c82-3qpw	spring-security-web@5.1.12.RELEASE	5.7.13
Medium	GHSA-6mcm-j9cj-3vc3	mina-core@2.0.0-RC1	2.0.22
Medium	GHSA-668q-qrv7-99fm	logback-core@1.2.3	1.2.9
Medium	GHSA-jjjh-jjxp-wpff	jackson-databind@2.10.4	2.12.7.1
Medium	GHSA-rgv9-q543-rqg4	jackson-databind@2.10.4	2.12.7.1
Medium	GHSA-735f-pc8j-v9w8	protobuf-java@3.8.0	3.25.5

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.1latest	5 years ago	1.4.1	6168497	4,153

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kubesphere-test/nacos.svg)](https://charts.stackradar.io/charts/kubesphere-test/nacos)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.