StackRadar

magistrala 0.16.2 Helm chart

magistrala-devopsVerified publisher

Scored 14 Sept 2026

Magistrala IoT Platform

Version 0.16.2 1 year agodeploys tag v1.8.2 0Artifact Hub

magistrala 0.16.2 deploys 42 container images: quay.io/prometheus/node-exporter, jaegertracing/jaeger-collector, jaegertracing/jaeger-query, jaegertracing/jaeger-agent and 38 more. Across the 20 measured, 2,349 findings4 critical, 31 high 1 on CISA KEV. The highest contribution is GHSA-mjmj-j48q-9wg2 in snakeyaml 1.26, fixed in 2.0.

Radar Score

24,4004313261,988

2,349 findings over 20 of 42 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

42 images
ImageTagVulnerabilitiesRadar Score
quay.io/prometheus/node-exporterv1.8.200889817
jaegertracing/jaeger-collector1.53.001131111,171
jaegertracing/jaeger-query1.53.001111101,130
jaegertracing/jaeger-agent1.53.001491810
natsio/nats-box0.14.305221301,790
registry.k8s.io/kube-state-metrics/kube-state-metricsv2.14.000887786
quay.io/prometheus/pushgatewayv1.11.000888788
quay.io/prometheus-operator/prometheus-config-reloaderv0.79.200891809
quay.io/prometheus/prometheusv3.1.00010108980
supermq/coaplatestnot yet scanned
supermq/httplatestnot yet scanned
supermq/authlatestnot yet scanned
supermq/certslatestnot yet scanned
supermq/channelslatestnot yet scanned
supermq/clientslatestnot yet scanned
supermq/domainslatestnot yet scanned
envoyproxy/envoy×2v1.31-latest03371171,917
supermq/groupslatestnot yet scanned
supermq/journallatestnot yet scanned
authzed/spicedb×2latest000647
ghcr.io/absmach/magistrala/ui-backendlatest00414213
ghcr.io/absmach/magistrala/ui-smqlatest0221991,475
supermq/userslatestnot yet scanned
supermq/wslatestnot yet scanned
magistrala/bootstraplatestnot yet scanned
magistrala/postgres-readerlatestnot yet scanned
magistrala/postgres-writerlatestnot yet scanned
magistrala/provisionlatestnot yet scanned
ghcr.io/absmach/magistrala/relatest000316
magistrala/timescale-readerlatestnot yet scanned
magistrala/timescale-writerlatestnot yet scanned
bitnami/postgresql×1416.2.0-debian-12-r18unmeasured
bitnami/cassandra5.0.3-debian-12-r0unmeasured
library/nats2.10.17-alpine02241091,449
natsio/nats-server-config-reloader0.15.0021379952
quay.io/prometheus/alertmanagerv0.28.000791785
bitnami/os-shell×412-debian-12-r24unmeasured
bitnami/redis×47.2.5-debian-12-r2unmeasured
supermq/vernemqlatest031319607
supermq/mqttlatestnot yet scanned
timescale/timescaledblatest-pg1203271201,721
jaegertracing/jaeger-cassandra-schema1.53.048884266,137

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

641 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowALPINE-CVE-2024-2004curl@8.5.0-r08.7.1-r0
LowALPINE-CVE-2023-42364busybox@1.36.1-r281.36.1-r29
LowALPINE-CVE-2023-42363busybox@1.36.1-r151.36.1-r17
LowUBUNTU-CVE-2026-1965curl@7.81.0-1ubuntu1.157.81.0-1ubuntu1.23
LowGO-2023-1570stdlib@go1.18.21.19.6
LowGHSA-gh32-pc56-4c96github.com/jaegertracing/jaeger@v0.0.0-20240108180540-b620f0eaefa51.18.1
LowUBUNTU-CVE-2025-3576krb5@1.19.2-2ubuntu0.31.19.2-2ubuntu0.7
LowGHSA-rgj7-g3m4-5g8csharp@0.34.20.35.4
LowUBUNTU-CVE-2025-68973gnupg2@2.2.27-3ubuntu2.12.2.27-3ubuntu2.5
LowGHSA-v2v4-37r5-5v8gip-address@9.0.510.1.1
LowUBUNTU-CVE-2026-7168curl@7.81.0-1ubuntu1.157.81.0-1ubuntu1.24
LowGO-2022-0531stdlib@go1.18.21.17.11
LowGO-2024-2600stdlib@go1.21.51.21.8
LowUBUNTU-CVE-2025-15367python3.10@3.10.12-1~22.04.33.10.12-1~22.04.15
LowALPINE-CVE-2023-42366busybox@1.35.0-r171.35.0-r18
LowUBUNTU-CVE-2026-59847libssh@0.9.6-2ubuntu0.22.04.10.9.6-2ubuntu0.22.04.8
LowGHSA-hrxh-6v49-42gfgoogle.golang.org/grpc@v1.60.01.82.1
LowGHSA-28wg-ghj8-5hjvnanoid@3.3.113.3.16
LowUBUNTU-CVE-2026-3783curl@7.81.0-1ubuntu1.157.81.0-1ubuntu1.23
LowUBUNTU-CVE-2026-4873curl@7.81.0-1ubuntu1.157.81.0-1ubuntu1.24
LowGO-2024-2609stdlib@go1.21.51.21.8
LowUBUNTU-CVE-2026-34743xz-utils@5.2.5-2ubuntu15.2.5-2ubuntu1.1
LowGO-2024-3107stdlib@go1.21.51.22.7
LowGO-2023-1751stdlib@go1.18.21.19.9
LowGO-2023-1753stdlib@go1.18.21.19.9
LowGHSA-fcjp-h8cc-6879github.com/nats-io/nats-server/v2@v0.0.0-20240627223150-b91de03560182.11.15
LowALPINE-CVE-2023-42365busybox@1.36.1-r281.36.1-r29
LowGHSA-r7wm-3cxj-wff9jackson-core@2.13.22.18.8
LowUBUNTU-CVE-2026-54411pam@1.4.0-11ubuntu2.31.4.0-11ubuntu2.7
LowGHSA-2v37-7h3g-55p8nanoid@3.3.113.3.18
LowUBUNTU-CVE-2026-84366python3.10@3.10.12-1~22.04.3no fix listed
LowUBUNTU-CVE-2026-25210expat@2.4.7-1ubuntu0.22.4.7-1ubuntu0.7
LowGO-2024-2824stdlib@go1.22.11.22.3
LowGHSA-cp6g-7hqx-qxhpgo.mongodb.org/mongo-driver@v1.14.01.17.7
LowGHSA-xmrv-pmrh-hhx2github.com/aws/aws-sdk-go-v2/service/s3@v1.96.31.97.3
LowGHSA-xmrv-pmrh-hhx2github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.61.7.8
LowALPINE-CVE-2024-6874curl@8.5.0-r08.9.0-r0
LowUBUNTU-CVE-2026-19487perl@5.34.0-3ubuntu1.35.34.0-3ubuntu1.9
LowUBUNTU-CVE-2026-4878libcap2@1:2.44-1ubuntu0.22.04.11:2.44-1ubuntu0.22.04.3
LowGHSA-9m57-25v3-79x9golang.org/x/crypto@v0.17.00.52.0
LowGHSA-jc7w-c686-c4v9github.com/ulikunitz/xz@v0.5.110.5.15
LowGHSA-x86f-5xw2-fm2rgithub.com/docker/docker@v27.4.1+incompatibleno fix listed
LowGO-2023-2041stdlib@go1.18.21.20.8
LowGHSA-vffh-x6r8-xx99github.com/prometheus/prometheus@v0.301.00.311.2-0.20260410083055-07c6232d159b
LowGO-2023-2043stdlib@go1.18.21.20.8
LowALPINE-CVE-2024-25629c-ares@1.24.0-r11.27.0-r0
LowGO-2022-0515stdlib@go1.18.21.17.12
LowGO-2023-2186stdlib@go1.18.21.20.11
LowUBUNTU-CVE-2025-29481libbpf@1:0.5.0-1ubuntu22.04.1no fix listed
LowGHSA-q6j5-fjx5-2mc3pnpm@10.12.110.34.1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.16.2latest1 year agov1.8.24313261,98824,400

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/magistrala-devops/magistrala.svg)](https://charts.stackradar.io/charts/magistrala-devops/magistrala)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.