node-red Helm chart

Name: node-red Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

lmatfy

Scored 14 Sept 2026

Node-RED is a programming tool for wiring together hardware devices, APIs and online services in new and interesting ways.

Latest 0.1.6 3 months agoapp version 4.1.10-minimal 0Artifact Hub

node-red 0.1.6 deploys 1 container image: nodered/node-red. Across them, 155 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-45447 in openssl 3.5.6-r0, fixed in 3.5.7-r0. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

1,8090028127

155 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
nodered/node-red	4.1.10-minimal	0028127	1,809

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

155 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-7r86-cg39-jmmj	minimatch@9.0.5	9.0.7
Low	ALPINE-CVE-2026-42766	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-gcfj-64vw-6mp9	axios@1.16.0	1.18.0
Low	GHSA-8qq5-rm4j-mr97	tar@6.2.1	7.5.3
Low	ALPINE-CVE-2026-63075	openssl@3.5.6-r0	3.5.8-r0
Low	GHSA-23c5-xmqv-rm74	minimatch@9.0.5	9.0.7
Low	GHSA-mh99-v99m-4gvg	brace-expansion@2.0.1	2.1.3
Low	ALPINE-CVE-2026-45186	expat@2.7.5-r0	2.8.1-r0
Low	GHSA-73rr-hh4g-fpgx	diff@5.2.0	5.2.2
Low	ALPINE-CVE-2026-33630	c-ares@1.34.6-r0	1.34.8-r0
Low	GHSA-v2hh-gcrm-f6hx	fast-uri@3.1.2	3.1.4
Low	GHSA-8x88-c5mf-7j5w	tar@7.5.12	7.5.18
Low	ALPINE-CVE-2026-82208	curl@8.17.0-r1	8.22.0-r0
Low	GHSA-c2c7-rcm5-vvqj	picomatch@4.0.3	4.0.4
Low	ALPINE-CVE-2026-12064	curl@8.17.0-r1	8.22.0-r0
Low	GHSA-mwp4-54f8-5fhr	ip-address@10.1.0	10.3.1
Low	ALPINE-CVE-2026-8932	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-8286	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-75803	openssl@3.5.6-r0	3.5.8-r0
Low	GHSA-r6q2-hw4h-h46w	tar@6.2.1	7.5.4
Low	GHSA-2883-xcg3-v3hh	js-yaml@4.1.1	4.3.2
Low	GHSA-4c8g-83qw-93j6	fast-uri@3.1.2	3.1.3
Low	GHSA-r292-9mhp-454m	tar@7.5.12	7.5.21
Low	ALPINE-CVE-2026-8458	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-6253	curl@8.17.0-r1	8.20.0-r0
Low	GHSA-w4pp-8pjf-rmxw	pacote@20.0.1	21.5.1
Low	GHSA-9ppj-qmqm-q256	tar@6.2.1	7.5.11
Low	GHSA-4xrf-jv44-h6hh	ip-address@10.2.0	10.2.2
Low	ALPINE-CVE-2026-9547	curl@8.17.0-r1	8.22.0-r0
Low	GHSA-jqh4-m9w3-8hp9	axios@1.16.0	1.18.0
Low	ALPINE-CVE-2026-6276	curl@8.17.0-r1	8.20.0-r0
Low	GHSA-wc9g-mqfw-jrwm	multer@2.1.1	2.3.0
Low	ALPINE-CVE-2026-76956	expat@2.7.5-r0	2.8.4-r0
Low	GHSA-hcpx-6fm6-wx23	axios@1.16.0	1.18.0
Low	GHSA-f886-m6hf-6m8v	brace-expansion@2.0.1	2.0.3
Low	GHSA-535w-7cp7-47q4	multer@2.1.1	2.3.0
Low	GHSA-72gw-mp4g-v24j	multer@2.1.1	2.2.0
Low	GHSA-22jq-vg5j-6vgg	ip-address@10.2.0	10.2.1
Low	ALPINE-CVE-2026-9080	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2026-42767	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-5545	curl@8.17.0-r1	8.20.0-r0
Low	ALPINE-CVE-2026-3784	curl@8.17.0-r1	8.19.0-r0
Low	ALPINE-CVE-2026-9545	curl@8.17.0-r1	8.22.0-r0
Low	ALPINE-CVE-2025-14819	curl@8.17.0-r1	8.18.0-r0
Low	GHSA-f4gw-2p7v-4548	axios@1.16.0	1.18.0
Low	GHSA-42h9-826w-cgv3	axios@1.16.0	1.18.0
Low	GHSA-pmv8-rq9r-6j72	axios@1.16.0	1.18.0
Low	GHSA-mwf2-3pr3-8698	axios@1.16.0	1.18.0
Low	GHSA-83g3-92jg-28cx	tar@6.2.1	7.5.8
Low	ALPINE-CVE-2026-63074	openssl@3.5.6-r0	3.5.8-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.6latest	3 months ago	4.1.10-minimal	0028127	1,809

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/lmatfy/node-red.svg)](https://charts.stackradar.io/charts/lmatfy/node-red)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.