imagebox Helm chart
kysoScored 14 Sept 2026
A Helm chart to deploy imagebox
Latest 1.0.0 2 years agoapp version latest 0Artifact Hub
imagebox 1.0.0 deploys 1 container image: kyso/imagebox. Across them, 146 findings — 4 critical, 20 high. The highest contribution is GHSA-2qrg-x229-3v8q in log4j 1.2.17, with no fix listed.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
1 image
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| kyso/ | latest | 4207547 | 3,833 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
146 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-cvm9-fjm9-3572 | jackson-databind | 2.9.10.8 |
| Medium | GHSA-vfqx-33qm-g869 | jackson-databind | 2.9.10.8 |
| Medium | GHSA-9m6f-7xcq-8vf8 | jackson-databind | 2.9.10.8 |
| Medium | GHSA-58pp-9c76-5625 | jackson-databind | 2.9.10.4 |
| Medium | GHSA-rf6r-2c4q-2vwg | jackson-databind | 2.9.10.4 |
| Medium | GHSA-v3xw-c963-f5hc | jackson-databind | 2.9.10.4 |
| Medium | GHSA-758m-v56v-grj4 | jackson-databind | 2.9.10.4 |
| Medium | GHSA-mc6h-4qgp-37qh | jackson-databind | 2.9.10.5 |
| Medium | GHSA-cf6r-3wgc-h863 | jackson-databind | 2.9.10 |
| Medium | GHSA-c2q3-4qrh-fm48 | jackson-databind | 2.9.10.5 |
| Medium | GHSA-cmfg-87vq-g5g4 | jackson-databind | 2.9.9.1 |
| Medium | GHSA-95cm-88f5-f2c7 | jackson-databind | 2.9.10.4 |
| Medium | GHSA-57j2-w4cx-62h2 | jackson-databind | 2.12.6.1 |
| Medium | GHSA-27xj-rqx5-2255 | jackson-databind | 2.9.10.4 |
| Medium | ALPINE-CVE-2023-0215 | openssl | 3.0.8-r0 |
| Medium | GHSA-rpr3-cw39-3pxh | jackson-databind | 2.9.10.4 |
| Medium | GHSA-qmqc-x3r4-6v39 | jackson-databind | 2.9.10 |
| Medium | ALPINE-CVE-2023-0464 | openssl | 3.0.8-r1 |
| Medium | ALPINE-CVE-2023-5363 | openssl | 3.0.12-r0 |
| Medium | GHSA-7r82-7xv7-xcpj | httpclient | 4.5.13 |
| Medium | ALPINE-CVE-2024-45492 | expat | 2.6.3-r0 |
| Medium | GHSA-668q-qrv7-99fm | logback-core | 1.2.9 |
| Medium | ALPINE-CVE-2024-4741 | openssl | 3.0.14-r0 |
| Medium | GHSA-jjjh-jjxp-wpff | jackson-databind | 2.12.7.1 |
| Medium | GHSA-rgv9-q543-rqg4 | jackson-databind | 2.12.7.1 |
| Medium | GHSA-gwrp-pvrq-jmwv | commons-io | 2.7 |
| Medium | ALPINE-CVE-2024-45491 | expat | 2.6.3-r0 |
| Medium | ALPINE-CVE-2023-3446 | openssl | 3.0.9-r3 |
| Medium | ALPINE-CVE-2024-28757 | expat | 2.6.2-r0 |
| Medium | GHSA-vp98-w2p3-mv35 | log4j | 2.0 |
| Medium | ALPINE-CVE-2023-0216 | openssl | 3.0.8-r0 |
| Medium | ALPINE-CVE-2023-0217 | openssl | 3.0.8-r0 |
| Medium | ALPINE-CVE-2023-0401 | openssl | 3.0.8-r0 |
| Medium | ALPINE-CVE-2023-52425 | expat | 2.6.0-r0 |
| Medium | ALPINE-CVE-2024-45490 | expat | 2.6.3-r0 |
| Medium | ALPINE-CVE-2023-5678 | openssl | 3.0.12-r1 |
| Medium | ALPINE-CVE-2025-9230 | openssl | 3.0.19-r0 |
| Medium | ALPINE-CVE-2023-6129 | openssl | 3.0.12-r2 |
| Medium | GHSA-j288-q9x7-2f5v | commons-lang | no fix listed |
| Medium | ALPINE-CVE-2024-0727 | openssl | 3.0.12-r4 |
| Medium | GHSA-355h-qmc2-wpwf | jetty-http | 9.4.60 |
| Medium | GHSA-qw69-rqj8-6qw8 | jetty-server | 9.4.51.v20230217 |
| Medium | ALPINE-CVE-2023-6237 | openssl | 3.0.12-r3 |
| Medium | ALPINE-CVE-2024-9143 | openssl | 3.0.15-r1 |
| Medium | ALPINE-CVE-2023-3817 | openssl | 3.0.10-r0 |
| Medium | GHSA-h46c-h94j-95f3 | jackson-core | 2.15.0 |
| Medium | ALPINE-CVE-2025-9232 | openssl | 3.0.19-r0 |
| Medium | ALPINE-CVE-2025-69421 | openssl | 3.0.19-r0 |
| Medium | GHSA-3cqm-mf7h-prrj | okhttp | 4.9.2 |
| Low | ALPINE-CVE-2025-69420 | openssl | 3.0.19-r0 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/kyso/imagebox)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.