StackRadar

opendistro-es Helm chart

lsst-sqre

Scored 14 Sept 2026

Open Distro for Elasticsearch

Latest 1.4.1 6 years agoapp version 1.4.0 0Artifact Hub

opendistro-es 1.4.1 deploys 3 container images: library/busybox, amazon/opendistro-for-elasticsearch and amazon/opendistro-for-elasticsearch-kibana. Across them, 378 findings — 4 critical, 34 high — 3 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.11.1, fixed in 2.12.2. Chart.yaml declares kubeVersion ^1.10.0-0; rendered for Kubernetes 1.10.0.

Radar Score

7,929434164176

378 findings over 3 of 3 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
library/busybox×51.27.200000
amazon/opendistro-for-elasticsearch×31.4.042493704,736
amazon/opendistro-for-elasticsearch-kibana1.4.0010711063,193

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

378 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumGHSA-gwp4-hfv6-p7hwjackson-databind@2.8.11.32.8.11.4
MediumGHSA-j823-4qch-3rgmjackson-databind@2.9.10.12.9.10.5
MediumGHSA-f3j5-rmmp-3fc5jackson-databind@2.8.11.32.8.11.5
MediumGHSA-p9m8-27x8-rg87cron-utils@7.0.59.1.6
MediumGHSA-5p34-5m6p-p58gjackson-databind@2.9.10.12.9.10.4
MediumGHSA-xvch-5gv4-984hminimist@0.0.100.2.4
MediumGHSA-r628-mhmh-qjhwtar@4.4.104.4.15
MediumGHSA-c265-37vj-cwccjackson-databind@2.9.10.12.9.10.5
MediumGHSA-9vvp-fxw6-jcxrjackson-databind@2.9.10.12.9.10.4
MediumGHSA-765h-qjxv-5f44handlebars@4.3.54.7.7
MediumGHSA-wh8g-3j2c-rqj5jackson-databind@2.8.11.32.9.10.8
MediumGHSA-mm9x-g8pc-w292netty-handler@4.1.38.Final4.1.46
MediumGHSA-5949-rw7g-wx7wjackson-databind@2.8.11.32.9.10.7
MediumGHSA-qjw2-hr98-qgfhjackson-databind@2.8.11.32.9.10.6
MediumGHSA-6wqp-v4v6-c87cjackson-databind@2.8.112.8.11.2
MediumGHSA-w3f4-3q6j-rh82jackson-databind@2.8.112.8.11.1
MediumGHSA-896r-f27r-55mwjson-schema@0.2.30.4.0
MediumGHSA-9c47-m6qq-7p4hjson5@2.1.02.2.2
MediumGHSA-fhjf-83wg-r2j9mixin-deep@1.3.11.3.2
MediumGHSA-j8wc-gxx9-82hxxmlsec@2.0.72.1.7
MediumGHSA-jv35-xqg7-f92rset-getter@0.1.00.1.1
MediumGHSA-cjjf-94ff-43w7jackson-databind@2.8.112.8.11.2
MediumGHSA-h4rc-386g-6m85jackson-databind@2.9.10.12.9.10.4
MediumGHSA-jp4x-w63m-7wgmhoek@2.16.34.2.1
MediumGHSA-9vjp-v76f-g363netty-codec@4.1.38.Final4.1.68.Final
MediumGHSA-8w26-6f25-cm9xjackson-databind@2.8.11.32.9.10.8
MediumGHSA-v585-23hc-c647jackson-databind@2.8.11.32.9.10.8
MediumGHSA-r695-7vr9-jgc2jackson-databind@2.8.11.32.9.10.8
MediumGHSA-8c4j-34r4-xr8gjackson-databind@2.8.11.32.9.10.8
MediumGHSA-89qr-369f-5m5xjackson-databind@2.8.11.32.9.10.8
MediumGHSA-cvm9-fjm9-3572jackson-databind@2.8.11.32.9.10.8
MediumGHSA-76p3-8jx3-jpfqloader-utils@1.1.01.4.1
MediumGHSA-vfqx-33qm-g869jackson-databind@2.8.11.32.9.10.8
MediumGHSA-9m6f-7xcq-8vf8jackson-databind@2.8.11.32.9.10.8
MediumGHSA-58pp-9c76-5625jackson-databind@2.9.10.12.9.10.4
MediumGHSA-grg4-wf29-r9vvnetty-codec@4.1.38.Final4.1.68.Final
MediumGHSA-rf6r-2c4q-2vwgjackson-databind@2.9.10.12.9.10.4
MediumGHSA-v3xw-c963-f5hcjackson-databind@2.9.10.12.9.10.4
MediumGHSA-758m-v56v-grj4jackson-databind@2.9.10.12.9.10.4
MediumGHSA-mc6h-4qgp-37qhjackson-databind@2.9.10.12.9.10.5
MediumGHSA-cf6r-3wgc-h863jackson-databind@2.8.11.32.8.11.5
MediumGHSA-c2q3-4qrh-fm48jackson-databind@2.9.10.12.9.10.5
MediumGHSA-4g88-fppr-53ppset-value@2.0.02.0.1
MediumGHSA-8hfj-j24r-96c4moment@2.24.02.29.2
MediumGHSA-p2v9-g2qv-p635netty-handler@4.1.38.Final4.1.45
MediumGHSA-cmfg-87vq-g5g4jackson-databind@2.8.11.32.8.11.4
MediumGHSA-x3x3-qwjq-8gj4cxf-core@3.2.23.4.10
MediumGHSA-wc69-rhjr-hc9gmoment@2.24.02.29.4
MediumGHSA-p6mc-m468-83gwlodash@4.17.154.17.19
MediumGHSA-p6mc-m468-83gwlodash-es@4.17.154.17.20

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.4.1latest6 years ago1.4.04341641767,929

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/lsst-sqre/opendistro-es.svg)](https://charts.stackradar.io/charts/lsst-sqre/opendistro-es)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.