node-red 0.1.6 Helm chart

Name: node-red Helm chart 0.1.6: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

lmatfy

Scored 14 Sept 2026

Node-RED is a programming tool for wiring together hardware devices, APIs and online services in new and interesting ways.

Version 0.1.6 3 months agoapp version 4.1.10-minimal 0Artifact Hub

node-red 0.1.6 deploys 1 container image: nodered/node-red. Across them, 155 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-45447 in openssl 3.5.6-r0, fixed in 3.5.7-r0. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

1,8090028127

155 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
nodered/node-red	4.1.10-minimal	0028127	1,809

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

155 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2025-14524	curl@8.17.0-r1	8.18.0-r0
Low	GHSA-jqff-g426-hqxp	fast-uri@3.1.2	3.1.6
Low	GHSA-w8wr-v893-vjvp	tar@7.5.12	7.5.18
Low	ALPINE-CVE-2026-34181	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-7p8r-x3mc-p8w7	fast-uri@3.1.2	3.1.5
Low	GHSA-f65p-4m7j-42xc	fast-uri@3.1.2	3.1.6
Low	GHSA-fph4-wmhf-6fwf	fast-uri@3.1.2	3.1.6
Low	GHSA-mmx7-hfxf-jppx	axios@1.16.0	1.18.0
Low	GHSA-xj6q-8x83-jv6g	axios@1.16.0	1.18.0
Low	GHSA-52v5-jr5w-gjxr	sigstore@3.1.0	4.1.1
Low	ALPINE-CVE-2026-6429	curl@8.17.0-r1	8.20.0-r0
Low	GHSA-gvwx-54wh-qm9j	tar@7.5.12	7.5.17
Low	ALPINE-CVE-2026-1965	curl@8.17.0-r1	8.19.0-r0
Low	ALPINE-CVE-2026-7168	curl@8.17.0-r1	8.20.0-r0
Low	GHSA-v2v4-37r5-5v8g	ip-address@10.1.0	10.1.1
Low	ALPINE-CVE-2026-3783	curl@8.17.0-r1	8.19.0-r0
Low	ALPINE-CVE-2026-4873	curl@8.17.0-r1	8.20.0-r0
Low	GHSA-58qx-3vcg-4xpx	ws@8.20.0	8.20.1
Low	GHSA-3v7f-55p6-f55p	picomatch@4.0.3	4.0.4
Low	ALPINE-CVE-2026-42769	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-7q8q-rj6j-mhjq	axios@1.16.0	1.18.0
Low	GHSA-h67p-54hq-rp68	js-yaml@4.1.1	4.2.0
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@2.0.1	2.1.2
Low	GHSA-q8mj-m7cp-5q26	qs@6.14.2	6.15.2
Low	GHSA-vmf3-w455-68vh	tar@7.5.12	7.5.16
Low	ALPINE-CVE-2026-76957	expat@2.7.5-r0	2.8.4-r0
Low	GHSA-663r-x48j-fg8p	jsonata@2.0.6	2.2.1
Low	ALPINE-CVE-2026-56403	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56404	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56405	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56408	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56406	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56407	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56410	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56411	expat@2.7.5-r0	2.8.2-r0
Low	GHSA-5p4m-2wfm-xmqj	js-yaml@4.1.1	4.3.1
Low	GHSA-jfc7-64v2-mr8c	@sigstore/core@2.0.0	3.2.1
Low	GHSA-3p4h-7m6x-2hcm	multer@2.1.1	2.2.0
Low	ALPINE-CVE-2026-45446	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-7009	curl@8.17.0-r1	8.20.0-r0
Low	GHSA-4mjr-xmp4-gh2g	qs@6.14.2	6.16.0
Low	ALPINE-CVE-2026-56412	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-50219	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56409	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56132	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-42768	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2025-14017	curl@8.17.0-r1	8.18.0-r0
Low	GHSA-w9m9-85wc-3x92	postcss-selector-parser@6.1.0	6.1.3
Low	ALPINE-CVE-2026-42770	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-56131	expat@2.7.5-r0	2.8.2-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.6latest	3 months ago	4.1.10-minimal	0028127	1,809

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/lmatfy/node-red.svg)](https://charts.stackradar.io/charts/lmatfy/node-red)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.