magistrala 0.16.2 Helm chart

Name: magistrala Helm chart 0.16.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

magistrala-devops

Scored 15 Sept 2026

Magistrala IoT Platform

Version 0.16.2 1 year agodeploys tag v1.8.2 0Artifact Hub

magistrala 0.16.2 deploys 42 container images: quay.io/prometheus/node-exporter, jaegertracing/jaeger-collector, jaegertracing/jaeger-query, jaegertracing/jaeger-agent and 38 more. Across the 20 measured, 2,364 findings — 3 critical, 32 high — 1 on CISA KEV. The highest contribution is GHSA-mjmj-j48q-9wg2 in snakeyaml 1.26, fixed in 2.0.

Radar Score

24,4883323262,003

2,364 findings over 20 of 42 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

42 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/prometheus/node-exporter	v1.8.2	00889	817
jaegertracing/jaeger-collector	1.53.0	0113111	1,171
jaegertracing/jaeger-query	1.53.0	0111110	1,130
jaegertracing/jaeger-agent	1.53.0	01491	810
natsio/nats-box	0.14.3	0522130	1,790
registry.k8s.io/kube-state-metrics/kube-state-metrics	v2.14.0	00887	786
quay.io/prometheus/pushgateway	v1.11.0	00888	788
quay.io/prometheus-operator/prometheus-config-reloader	v0.79.2	00891	809
quay.io/prometheus/prometheus	v3.1.0	0010108	980
supermq/coap	latest	—	not yet scanned
supermq/http	latest	—	not yet scanned
supermq/auth	latest	—	not yet scanned
supermq/certs	latest	—	not yet scanned
supermq/channels	latest	—	not yet scanned
supermq/clients	latest	—	not yet scanned
supermq/domains	latest	—	not yet scanned
envoyproxy/envoy×2	v1.31-latest	0337124	1,956
supermq/groups	latest	—	not yet scanned
supermq/journal	latest	—	not yet scanned
authzed/spicedb×2	latest	0006	47
ghcr.io/absmach/magistrala/ui-backend	latest	00414	213
ghcr.io/absmach/magistrala/ui-smq	latest	022199	1,476
supermq/users	latest	—	not yet scanned
supermq/ws	latest	—	not yet scanned
magistrala/bootstrap	latest	—	not yet scanned
magistrala/postgres-reader	latest	—	not yet scanned
magistrala/postgres-writer	latest	—	not yet scanned
magistrala/provision	latest	—	not yet scanned
ghcr.io/absmach/magistrala/re	latest	0003	16
magistrala/timescale-reader	latest	—	not yet scanned
magistrala/timescale-writer	latest	—	not yet scanned
bitnami/postgresql×14	16.2.0-debian-12-r18	—	unmeasured
bitnami/cassandra	5.0.3-debian-12-r0	—	unmeasured
library/nats	2.10.17-alpine	0224109	1,449
natsio/nats-server-config-reloader	0.15.0	021379	952
quay.io/prometheus/alertmanager	v0.28.0	00791	785
bitnami/os-shell×4	12-debian-12-r24	—	unmeasured
bitnami/redis×4	7.2.5-debian-12-r2	—	unmeasured
supermq/vernemq	latest	031319	607
supermq/mqtt	latest	—	not yet scanned
timescale/timescaledb	latest-pg12	0327120	1,721
jaegertracing/jaeger-cassandra-schema	1.53.0	3988434	6,185

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

649 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-5024	golang.org/x/sys@v0.15.0	0.44.0
Low	UBUNTU-CVE-2026-59846	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.8
Low	GO-2026-6179	golang.org/x/mod@v0.22.0	0.40.0
Low	UBUNTU-CVE-2026-18477	tar@1.34+dfsg-1ubuntu0.1.22.04.2	no fix listed
Low	GHSA-xjvp-4fhw-gc47	github.com/opencontainers/runc@v1.1.0	1.3.6
Low	UBUNTU-CVE-2025-6141	ncurses@6.3-2ubuntu0.1	6.3-2ubuntu0.3
Low	GHSA-xhgw-qwwf-pg32	github.com/cilium/ebpf@v0.11.0	0.22.0
Low	GO-2022-0398	github.com/nats-io/nats-server/v2@v0.0.0-20240627223150-b91de0356018	2.2.0
Low	GO-2024-2911	github.com/mostynb/go-grpc-compression@v1.2.2	1.2.3
Low	GO-2026-5841	github.com/klauspost/compress@v1.17.4	1.18.7
Low	GO-2026-5932	golang.org/x/crypto@v0.17.0	no fix listed
Low	GO-2026-6061	google.golang.org/grpc@v1.60.0	1.82.1
Low	GO-2026-6278	github.com/gorilla/websocket@v1.5.0	1.5.3
Low	USN-5495-2	curl@7.81.0-1ubuntu1.15	7.81.0-1ubuntu1.21
Low	USN-6541-2	glibc@2.35-0ubuntu3.5	2.35-0ubuntu3.6
Low	USN-6663-1	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.15
Low	USN-7034-1	ca-certificates@20230311ubuntu0.22.04.1	20240203~22.04.1
Low	USN-7412-2	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.4
Low	USN-8091-1	util-linux@2.37.2-4ubuntu3	2.37.2-4ubuntu3.5
Low	USN-8436-1	ca-certificates@20230311ubuntu0.22.04.1	20260601~22.04.1
Low	USN-8543-2	wget@1.21.2-2ubuntu1	1.21.2-2ubuntu1.5
Low	USN-8625-1	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.26
Low	USN-8688-1	pam@1.4.0-11ubuntu2.3	1.4.0-11ubuntu2.8
Low	ALPINE-CVE-2025-46394	busybox@1.36.1-r29	1.36.1-r31
Low	UBUNTU-CVE-2025-13462	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.16
Low	UBUNTU-CVE-2026-0965	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.6
Low	GHSA-4vq8-7jfc-9cvp	github.com/docker/docker@v27.4.1+incompatible	28.0.0
Low	GHSA-m8cg-xc2p-r3fc	github.com/opencontainers/runc@v1.1.0	1.1.5
Low	UBUNTU-CVE-2025-66382	expat@2.4.7-1ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2025-1376	elfutils@0.186-1build1	no fix listed
Low	GHSA-j88v-2chj-qfwx	github.com/jackc/pgx/v4@v4.16.1	no fix listed
Low	UBUNTU-CVE-2026-24515	expat@2.4.7-1ubuntu0.2	2.4.7-1ubuntu0.7
Low	UBUNTU-CVE-2026-40228	systemd@249.11-0ubuntu3.11	no fix listed
Low	UBUNTU-CVE-2026-32778	expat@2.4.7-1ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2025-30258	gnupg2@2.2.27-3ubuntu2.1	2.2.27-3ubuntu2.3
Low	GHSA-p47f-322f-whfh	logback-core@1.2.9	1.5.33
Low	UBUNTU-CVE-2026-15310	python3.10@3.10.12-1~22.04.3	no fix listed
Low	GHSA-6v67-2wr5-gvf4	logback-core@1.2.9	1.3.15
Low	UBUNTU-CVE-2026-53910	diffutils@1:3.8-0ubuntu2	1:3.8-0ubuntu2.1
Low	UBUNTU-CVE-2026-6879	python3.10@3.10.12-1~22.04.3	no fix listed
Low	ALPINE-CVE-2024-58251	busybox@1.36.1-r29	1.36.1-r31
Low	UBUNTU-CVE-2026-89162	pcre2@10.39-3ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2026-89156	pcre2@10.39-3ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2026-0967	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.6
Low	UBUNTU-CVE-2026-18503	python3.10@3.10.12-1~22.04.3	no fix listed
Low	UBUNTU-CVE-2026-5958	sed@4.8-1ubuntu2	4.8-1ubuntu2.1
Low	UBUNTU-CVE-2026-6368	glibc@2.35-0ubuntu3.5	2.35-0ubuntu3.15
Low	GHSA-qqpg-mvqg-649v	logback-core@1.2.9	1.5.25
Low	GHSA-jj54-5q2m-q7pj	github.com/nats-io/nats-server/v2@v0.0.0-20240627223150-b91de0356018	2.2.3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.16.2latest	1 year ago	v1.8.2	3323262,003	24,488

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/magistrala-devops/magistrala.svg)](https://charts.stackradar.io/charts/magistrala-devops/magistrala)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.