magistrala 0.16.2 Helm chart

Name: magistrala Helm chart 0.16.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

magistrala-devops

Scored 14 Sept 2026

Magistrala IoT Platform

Version 0.16.2 1 year agodeploys tag v1.8.2 0Artifact Hub

magistrala 0.16.2 deploys 42 container images: quay.io/prometheus/node-exporter, jaegertracing/jaeger-collector, jaegertracing/jaeger-query, jaegertracing/jaeger-agent and 38 more. Across the 20 measured, 2,349 findings — 4 critical, 31 high — 1 on CISA KEV. The highest contribution is GHSA-mjmj-j48q-9wg2 in snakeyaml 1.26, fixed in 2.0.

Radar Score

24,4004313261,988

2,349 findings over 20 of 42 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

42 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/prometheus/node-exporter	v1.8.2	00889	817
jaegertracing/jaeger-collector	1.53.0	0113111	1,171
jaegertracing/jaeger-query	1.53.0	0111110	1,130
jaegertracing/jaeger-agent	1.53.0	01491	810
natsio/nats-box	0.14.3	0522130	1,790
registry.k8s.io/kube-state-metrics/kube-state-metrics	v2.14.0	00887	786
quay.io/prometheus/pushgateway	v1.11.0	00888	788
quay.io/prometheus-operator/prometheus-config-reloader	v0.79.2	00891	809
quay.io/prometheus/prometheus	v3.1.0	0010108	980
supermq/coap	latest	—	not yet scanned
supermq/http	latest	—	not yet scanned
supermq/auth	latest	—	not yet scanned
supermq/certs	latest	—	not yet scanned
supermq/channels	latest	—	not yet scanned
supermq/clients	latest	—	not yet scanned
supermq/domains	latest	—	not yet scanned
envoyproxy/envoy×2	v1.31-latest	0337117	1,917
supermq/groups	latest	—	not yet scanned
supermq/journal	latest	—	not yet scanned
authzed/spicedb×2	latest	0006	47
ghcr.io/absmach/magistrala/ui-backend	latest	00414	213
ghcr.io/absmach/magistrala/ui-smq	latest	022199	1,475
supermq/users	latest	—	not yet scanned
supermq/ws	latest	—	not yet scanned
magistrala/bootstrap	latest	—	not yet scanned
magistrala/postgres-reader	latest	—	not yet scanned
magistrala/postgres-writer	latest	—	not yet scanned
magistrala/provision	latest	—	not yet scanned
ghcr.io/absmach/magistrala/re	latest	0003	16
magistrala/timescale-reader	latest	—	not yet scanned
magistrala/timescale-writer	latest	—	not yet scanned
bitnami/postgresql×14	16.2.0-debian-12-r18	—	unmeasured
bitnami/cassandra	5.0.3-debian-12-r0	—	unmeasured
library/nats	2.10.17-alpine	0224109	1,449
natsio/nats-server-config-reloader	0.15.0	021379	952
quay.io/prometheus/alertmanager	v0.28.0	00791	785
bitnami/os-shell×4	12-debian-12-r24	—	unmeasured
bitnami/redis×4	7.2.5-debian-12-r2	—	unmeasured
supermq/vernemq	latest	031319	607
supermq/mqtt	latest	—	not yet scanned
timescale/timescaledb	latest-pg12	0327120	1,721
jaegertracing/jaeger-cassandra-schema	1.53.0	4888426	6,137

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

641 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-78410	util-linux@2.37.2-4ubuntu3	no fix listed
Low	UBUNTU-CVE-2026-58471	wget@1.21.2-2ubuntu1	1.21.2-2ubuntu1.3
Low	UBUNTU-CVE-2026-58472	wget@1.21.2-2ubuntu1	1.21.2-2ubuntu1.3
Low	UBUNTU-CVE-2025-4516	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.10
Low	GO-2026-5026	golang.org/x/net@v0.19.0	0.55.0
Low	GO-2026-5026	stdlib@go1.21.5	1.25.13
Low	UBUNTU-CVE-2025-64505	libpng1.6@1.6.37-3build5	1.6.37-3ubuntu0.1
Low	UBUNTU-CVE-2025-6069	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.11
Low	GHSA-xv57-4mr9-wg8v	next@15.3.4	15.4.5
Low	UBUNTU-CVE-2026-42014	gnutls28@3.7.3-4ubuntu1.3	3.7.3-4ubuntu1.9
Low	GO-2025-3420	stdlib@go1.21.5	1.22.11
Low	GO-2026-4342	stdlib@go1.21.5	1.24.12
Low	GO-2024-2598	stdlib@go1.21.5	1.21.8
Low	GO-2025-3751	stdlib@go1.21.5	1.23.10
Low	UBUNTU-CVE-2026-78409	util-linux@2.37.2-4ubuntu3	no fix listed
Low	ALPINE-CVE-2024-13176	openssl@3.3.1-r0	3.3.2-r2
Low	UBUNTU-CVE-2024-13176	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.19
Low	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.60.0	1.82.2
Low	GHSA-87m9-rv8p-rgmg	github.com/mostynb/go-grpc-compression@v1.2.2	1.2.3
Low	GHSA-8h8q-6873-q5fj	next@15.3.4	15.5.16
Low	GHSA-gwj5-3vfq-q992	github.com/nats-io/nats-server/v2@v0.0.0-20240627223150-b91de0356018	2.2.0
Low	GHSA-h25m-26qc-wcjf	next@15.3.4	15.3.9
Low	GHSA-mwv6-3258-q52c	next@15.3.4	15.3.7
Low	GHSA-q4gf-8mx6-v5v3	next@15.3.4	15.5.15
Low	UBUNTU-CVE-2025-52099	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.4
Low	GHSA-jfc7-64v2-mr8c	@sigstore/core@2.0.0	3.2.1
Low	UBUNTU-CVE-2026-45446	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.25
Low	GHSA-7g45-4rm6-3mm3	guava@27.0-jre	32.0.0-android
Low	UBUNTU-CVE-2026-4360	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.18
Low	UBUNTU-CVE-2026-22801	libpng1.6@1.6.37-3build5	1.6.37-3ubuntu0.3
Low	GO-2024-2961	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.0.0-20220525230936-793ad666bf5e
Low	UBUNTU-CVE-2026-3446	python3.10@3.10.12-1~22.04.3	no fix listed
Low	GHSA-vx52-2968-3vc6	pnpm@10.12.1	10.34.5
Low	GO-2025-4116	golang.org/x/crypto@v0.17.0	0.43.0
Low	GHSA-25qh-j22f-pwp8	logback-core@1.2.9	1.3.16
Low	UBUNTU-CVE-2026-58055	nghttp2@1.43.0-1ubuntu0.1	1.43.0-1ubuntu0.4
Low	GO-2026-4870	stdlib@go1.21.5	1.25.9
Low	GO-2022-0532	stdlib@go1.18.2	1.17.11
Low	GO-2025-4009	stdlib@go1.21.5	1.24.8
Low	GO-2026-4947	stdlib@go1.21.5	1.25.9
Low	UBUNTU-CVE-2026-2297	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.16
Low	GHSA-rg2x-37c3-w2rh	github.com/docker/docker@v27.4.1+incompatible	no fix listed
Low	GO-2025-4006	stdlib@go1.21.5	1.24.8
Low	UBUNTU-CVE-2025-29088	sqlite3@3.37.2-2ubuntu0.3	3.37.2-2ubuntu0.4
Low	GO-2026-5037	stdlib@go1.21.5	1.25.11
Low	UBUNTU-CVE-2026-40225	systemd@249.11-0ubuntu3.11	249.11-0ubuntu3.19
Low	GO-2026-4971	stdlib@go1.21.5	1.25.10
Low	GHSA-55h8-8g96-x4hj	github.com/nats-io/nats-server/v2@v0.0.0-20240627223150-b91de0356018	2.11.15
Low	UBUNTU-CVE-2026-3832	gnutls28@3.7.3-4ubuntu1.3	3.7.3-4ubuntu1.9
Low	UBUNTU-CVE-2025-13837	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.14

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.16.2latest	1 year ago	v1.8.2	4313261,988	24,400

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/magistrala-devops/magistrala.svg)](https://charts.stackradar.io/charts/magistrala-devops/magistrala)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.