StackRadar

opendistro-es 1.4.1 Helm chart

lsst-sqre

Scored 14 Sept 2026

Open Distro for Elasticsearch

Version 1.4.1 6 years agoapp version 1.4.0 0Artifact Hub

opendistro-es 1.4.1 deploys 3 container images: library/busybox, amazon/opendistro-for-elasticsearch and amazon/opendistro-for-elasticsearch-kibana. Across them, 378 findings4 critical, 34 high 3 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.11.1, fixed in 2.12.2. Chart.yaml declares kubeVersion ^1.10.0-0; rendered for Kubernetes 1.10.0.

Radar Score

7,929434164176

378 findings over 3 of 3 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
library/busybox×51.27.200000
amazon/opendistro-for-elasticsearch×31.4.042493704,736
amazon/opendistro-for-elasticsearch-kibana1.4.0010711063,193

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

176 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGHSA-q2c6-c6pm-g3ghhandlebars@4.3.54.5.3
LowGHSA-7g45-4rm6-3mm3guava@15.032.0.0-android
LowGHSA-2cf5-4w76-r9qvhandlebars@4.3.54.5.2
LowGHSA-4mjr-xmp4-gh2gqs@6.5.26.16.0
LowGHSA-5mg8-w23w-74h3guava@15.032.0.0-android
LowGHSA-hvcg-qmg6-jm4cnetty-codec-http@4.1.38.Final4.1.135.Final
LowGHSA-4p4w-6hg8-63wxangular-sanitize@1.7.8no fix listed
LowGHSA-848j-6mx2-7j84elliptic@6.4.0no fix listed
LowGHSA-g9fw-9x87-rmrjelasticsearch@7.4.27.9.2
LowGHSA-w7rc-rwvf-8q5rnode-fetch@2.3.02.6.1
LowGHSA-2qvq-rjwj-gvw9handlebars@4.3.54.7.9
LowGHSA-wf8f-6423-gfxgjackson-core@2.8.112.13.0
LowGHSA-5v8f-xx9m-wj44elasticsearch@7.4.27.17.23
LowGHSA-6rw7-vpxm-498pqs@6.5.26.14.1
LowGHSA-pc5p-h8pf-mvwphttps-proxy-agent@2.2.12.2.3
LowGHSA-v6h2-p8h4-qcjwbrace-expansion@1.1.81.1.12
LowGHSA-7wwv-vh3v-89cqhighlight.js@9.12.010.4.1
LowGHSA-f52g-6jhx-586phandlebars@4.3.54.4.5
LowGHSA-v78c-4p63-2j6cmoment-timezone@0.5.140.5.35
LowGHSA-99pc-69q9-jxf2elasticsearch@7.4.27.17.13
LowGHSA-4xcv-9jjx-gfj3mem@1.1.04.0.0
LowGHSA-5cp4-xmrw-59wfangular@1.7.81.8.0
LowGHSA-fghv-69vj-qj49netty-codec-http@4.1.38.Final4.1.125.Final
LowGHSA-442j-39wm-28r2handlebars@4.3.54.7.9
LowGHSA-4x5r-pxfx-6jf8@babel/core@7.5.57.29.6
LowGHSA-56x4-j7p9-fcf9moment-timezone@0.5.140.5.35

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.4.1latest6 years ago1.4.04341641767,929

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/lsst-sqre/opendistro-es.svg)](https://charts.stackradar.io/charts/lsst-sqre/opendistro-es)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.