magistrala 0.16.2 Helm chart

Name: magistrala Helm chart 0.16.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

magistrala-devops

Scored 15 Sept 2026

Magistrala IoT Platform

Version 0.16.2 1 year agodeploys tag v1.8.2 0Artifact Hub

magistrala 0.16.2 deploys 42 container images: quay.io/prometheus/node-exporter, jaegertracing/jaeger-collector, jaegertracing/jaeger-query, jaegertracing/jaeger-agent and 38 more. Across the 20 measured, 2,364 findings — 3 critical, 32 high — 1 on CISA KEV. The highest contribution is GHSA-mjmj-j48q-9wg2 in snakeyaml 1.26, fixed in 2.0.

Radar Score

24,4883323262,003

2,364 findings over 20 of 42 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

42 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/prometheus/node-exporter	v1.8.2	00889	817
jaegertracing/jaeger-collector	1.53.0	0113111	1,171
jaegertracing/jaeger-query	1.53.0	0111110	1,130
jaegertracing/jaeger-agent	1.53.0	01491	810
natsio/nats-box	0.14.3	0522130	1,790
registry.k8s.io/kube-state-metrics/kube-state-metrics	v2.14.0	00887	786
quay.io/prometheus/pushgateway	v1.11.0	00888	788
quay.io/prometheus-operator/prometheus-config-reloader	v0.79.2	00891	809
quay.io/prometheus/prometheus	v3.1.0	0010108	980
supermq/coap	latest	—	not yet scanned
supermq/http	latest	—	not yet scanned
supermq/auth	latest	—	not yet scanned
supermq/certs	latest	—	not yet scanned
supermq/channels	latest	—	not yet scanned
supermq/clients	latest	—	not yet scanned
supermq/domains	latest	—	not yet scanned
envoyproxy/envoy×2	v1.31-latest	0337124	1,956
supermq/groups	latest	—	not yet scanned
supermq/journal	latest	—	not yet scanned
authzed/spicedb×2	latest	0006	47
ghcr.io/absmach/magistrala/ui-backend	latest	00414	213
ghcr.io/absmach/magistrala/ui-smq	latest	022199	1,476
supermq/users	latest	—	not yet scanned
supermq/ws	latest	—	not yet scanned
magistrala/bootstrap	latest	—	not yet scanned
magistrala/postgres-reader	latest	—	not yet scanned
magistrala/postgres-writer	latest	—	not yet scanned
magistrala/provision	latest	—	not yet scanned
ghcr.io/absmach/magistrala/re	latest	0003	16
magistrala/timescale-reader	latest	—	not yet scanned
magistrala/timescale-writer	latest	—	not yet scanned
bitnami/postgresql×14	16.2.0-debian-12-r18	—	unmeasured
bitnami/cassandra	5.0.3-debian-12-r0	—	unmeasured
library/nats	2.10.17-alpine	0224109	1,449
natsio/nats-server-config-reloader	0.15.0	021379	952
quay.io/prometheus/alertmanager	v0.28.0	00791	785
bitnami/os-shell×4	12-debian-12-r24	—	unmeasured
bitnami/redis×4	7.2.5-debian-12-r2	—	unmeasured
supermq/vernemq	latest	031319	607
supermq/mqtt	latest	—	not yet scanned
timescale/timescaledb	latest-pg12	0327120	1,721
jaegertracing/jaeger-cassandra-schema	1.53.0	3988434	6,185

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

649 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2025-0167	curl@8.5.0-r0	8.12.0-r0
Low	UBUNTU-CVE-2025-0167	curl@7.81.0-1ubuntu1.15	7.81.0-1ubuntu1.23
Low	UBUNTU-CVE-2026-50812	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.7
Low	GO-2025-4014	stdlib@go1.21.5	1.24.8
Low	UBUNTU-CVE-2023-4641	shadow@1:4.8.1-2ubuntu2.1	1:4.8.1-2ubuntu2.2
Low	ALPINE-CVE-2026-6042	musl@1.2.5-r0	1.2.5-r2
Low	UBUNTU-CVE-2026-34757	libpng1.6@1.6.37-3build5	1.6.37-3ubuntu0.5
Low	GHSA-w9m9-85wc-3x92	postcss-selector-parser@6.1.2	6.1.3
Low	GO-2025-3503	stdlib@go1.21.5	1.23.7
Low	UBUNTU-CVE-2026-18938	p11-kit@0.24.0-6build1	0.24.0-6ubuntu0.1
Low	GO-2026-4976	stdlib@go1.21.5	1.25.10
Low	UBUNTU-CVE-2025-5278	coreutils@8.32-4.1ubuntu1	8.32-4.1ubuntu1.4
Low	GHSA-vp62-88p7-qqf5	github.com/docker/docker@v27.4.1+incompatible	no fix listed
Low	GO-2026-5856	stdlib@go1.21.5	1.25.12
Low	ALPINE-CVE-2026-22795	openssl@3.3.1-r0	3.3.6-r0
Low	UBUNTU-CVE-2026-22795	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.21
Low	GO-2025-4007	stdlib@go1.21.5	1.24.9
Low	GO-2026-6355	golang.org/x/crypto@v0.17.0	0.56.0
Low	GO-2026-4980	stdlib@go1.21.5	1.25.10
Low	UBUNTU-CVE-2026-42770	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.25
Low	GO-2026-5039	stdlib@go1.21.5	1.25.11
Low	UBUNTU-CVE-2025-6075	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.12
Low	GHSA-ffhc-5mcf-pf4q	next@15.3.4	15.5.16
Low	UBUNTU-CVE-2025-8114	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.5
Low	GO-2025-4013	stdlib@go1.21.5	1.24.8
Low	GO-2025-3849	stdlib@go1.21.5	1.23.12
Low	GO-2026-4946	stdlib@go1.21.5	1.25.9
Low	GO-2022-0646	github.com/aws/aws-sdk-go@v1.55.5	no fix listed
Low	UBUNTU-CVE-2026-54370	acl@2.3.1-1	no fix listed
Low	UBUNTU-CVE-2026-56412	expat@2.4.7-1ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-56131	expat@2.4.7-1ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-50219	expat@2.4.7-1ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2025-15649	perl@5.34.0-3ubuntu1.3	no fix listed
Low	GO-2026-4603	stdlib@go1.21.5	1.25.8
Low	UBUNTU-CVE-2026-0864	python3.10@3.10.12-1~22.04.3	no fix listed
Low	GO-2026-6303	golang.org/x/crypto@v0.17.0	0.55.0
Low	GO-2026-6354	golang.org/x/crypto@v0.17.0	0.56.0
Low	UBUNTU-CVE-2026-29111	systemd@249.11-0ubuntu3.11	249.11-0ubuntu3.19
Low	GO-2026-4982	stdlib@go1.21.5	1.25.10
Low	GO-2026-6091	stdlib@go1.21.5	1.25.13
Low	UBUNTU-CVE-2026-15059	systemd@249.11-0ubuntu3.11	249.11-0ubuntu3.22
Low	UBUNTU-CVE-2024-56433	shadow@1:4.8.1-2ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2026-41991	gzip@1.10-4ubuntu4.1	1.10-4ubuntu4.2
Low	GO-2026-6180	golang.org/x/mod@v0.22.0	0.40.0
Low	UBUNTU-CVE-2026-89157	pcre2@10.39-3ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2026-40226	systemd@249.11-0ubuntu3.11	249.11-0ubuntu3.21
Low	GO-2025-3750	stdlib@go1.21.5	1.23.10
Low	GO-2026-4864	stdlib@go1.21.5	1.25.9
Low	GO-2025-3447	stdlib@go1.21.5	1.22.12
Low	GO-2026-4865	stdlib@go1.21.5	1.25.9

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.16.2latest	1 year ago	v1.8.2	3323262,003	24,488

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/magistrala-devops/magistrala.svg)](https://charts.stackradar.io/charts/magistrala-devops/magistrala)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.