magistrala Helm chart

Name: magistrala Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

magistrala-devops

Scored 14 Sept 2026

Magistrala IoT Platform

Latest 0.16.2 1 year agodeploys tag v1.8.2 0Artifact Hub

magistrala 0.16.2 deploys 42 container images: quay.io/prometheus/node-exporter, jaegertracing/jaeger-collector, jaegertracing/jaeger-query, jaegertracing/jaeger-agent and 38 more. Across the 20 measured, 2,349 findings — 4 critical, 31 high — 1 on CISA KEV. The highest contribution is GHSA-mjmj-j48q-9wg2 in snakeyaml 1.26, fixed in 2.0.

Radar Score

24,4004313261,988

2,349 findings over 20 of 42 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

42 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/prometheus/node-exporter	v1.8.2	00889	817
jaegertracing/jaeger-collector	1.53.0	0113111	1,171
jaegertracing/jaeger-query	1.53.0	0111110	1,130
jaegertracing/jaeger-agent	1.53.0	01491	810
natsio/nats-box	0.14.3	0522130	1,790
registry.k8s.io/kube-state-metrics/kube-state-metrics	v2.14.0	00887	786
quay.io/prometheus/pushgateway	v1.11.0	00888	788
quay.io/prometheus-operator/prometheus-config-reloader	v0.79.2	00891	809
quay.io/prometheus/prometheus	v3.1.0	0010108	980
supermq/coap	latest	—	not yet scanned
supermq/http	latest	—	not yet scanned
supermq/auth	latest	—	not yet scanned
supermq/certs	latest	—	not yet scanned
supermq/channels	latest	—	not yet scanned
supermq/clients	latest	—	not yet scanned
supermq/domains	latest	—	not yet scanned
envoyproxy/envoy×2	v1.31-latest	0337117	1,917
supermq/groups	latest	—	not yet scanned
supermq/journal	latest	—	not yet scanned
authzed/spicedb×2	latest	0006	47
ghcr.io/absmach/magistrala/ui-backend	latest	00414	213
ghcr.io/absmach/magistrala/ui-smq	latest	022199	1,475
supermq/users	latest	—	not yet scanned
supermq/ws	latest	—	not yet scanned
magistrala/bootstrap	latest	—	not yet scanned
magistrala/postgres-reader	latest	—	not yet scanned
magistrala/postgres-writer	latest	—	not yet scanned
magistrala/provision	latest	—	not yet scanned
ghcr.io/absmach/magistrala/re	latest	0003	16
magistrala/timescale-reader	latest	—	not yet scanned
magistrala/timescale-writer	latest	—	not yet scanned
bitnami/postgresql×14	16.2.0-debian-12-r18	—	unmeasured
bitnami/cassandra	5.0.3-debian-12-r0	—	unmeasured
library/nats	2.10.17-alpine	0224109	1,449
natsio/nats-server-config-reloader	0.15.0	021379	952
quay.io/prometheus/alertmanager	v0.28.0	00791	785
bitnami/os-shell×4	12-debian-12-r24	—	unmeasured
bitnami/redis×4	7.2.5-debian-12-r2	—	unmeasured
supermq/vernemq	latest	031319	607
supermq/mqtt	latest	—	not yet scanned
timescale/timescaledb	latest-pg12	0327120	1,721
jaegertracing/jaeger-cassandra-schema	1.53.0	4888426	6,137

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

641 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2025-69420	openssl@3.3.1-r0	3.3.6-r0
Low	UBUNTU-CVE-2025-69420	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.21
Low	UBUNTU-CVE-2026-57433	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8
Low	UBUNTU-CVE-2026-25646	libpng1.6@1.6.37-3build5	1.6.37-3ubuntu0.4
Low	UBUNTU-CVE-2024-0397	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.5
Low	GHSA-9493-h29p-rfm2	github.com/opencontainers/runc@v1.1.0	1.2.8
Low	UBUNTU-CVE-2026-27135	nghttp2@1.43.0-1ubuntu0.1	1.43.0-1ubuntu0.3
Low	UBUNTU-CVE-2026-13221	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8
Low	UBUNTU-CVE-2026-42496	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.7
Low	UBUNTU-CVE-2026-33636	libpng1.6@1.6.37-3build5	1.6.37-3ubuntu0.5
Low	GHSA-vmq6-5m68-f53m	logback-core@1.2.9	1.2.13
Low	GHSA-vmq6-5m68-f53m	logback-classic@1.2.9	1.2.13
Low	UBUNTU-CVE-2024-56406	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.4
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.17.0	0.52.0
Low	ALPINE-CVE-2024-37370	krb5@1.20.1-r1	1.20.2-r1
Low	UBUNTU-CVE-2024-37370	krb5@1.19.2-2ubuntu0.3	1.19.2-2ubuntu0.4
Low	GHSA-mg66-mrh9-m8jx	next@15.3.4	15.5.16
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.17.0	0.52.0
Low	UBUNTU-CVE-2026-6100	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.16
Low	ALPINE-CVE-2026-14456	openssl@3.5.7-r0	3.5.8-r0
Low	UBUNTU-CVE-2024-9287	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.7
Low	GHSA-mh63-6h87-95cp	github.com/golang-jwt/jwt/v5@v5.2.1	5.2.2
Low	GHSA-34x7-hfp2-rc4v	tar@7.4.3	7.5.7
Low	UBUNTU-CVE-2026-9076	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.25
Low	UBUNTU-CVE-2026-82209	curl@7.81.0-1ubuntu1.15	no fix listed
Low	UBUNTU-CVE-2024-10524	wget@1.21.2-2ubuntu1	no fix listed
Low	GO-2023-1571	stdlib@go1.18.2	1.19.6
Low	UBUNTU-CVE-2026-4224	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.16
Low	UBUNTU-CVE-2026-7210	python3.10@3.10.12-1~22.04.3	no fix listed
Low	UBUNTU-CVE-2026-12087	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.8
Low	GHSA-fr2g-9hjm-wr23	github.com/nats-io/nats-server/v2@v2.9.19	2.9.23
Low	GHSA-52jh-2xxh-pwh6	github.com/nats-io/nats-server/v2@v0.0.0-20240627223150-b91de0356018	2.11.14
Low	GHSA-jqcq-xjh3-6g23	github.com/jackc/pgproto3/v2@v2.3.0	no fix listed
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.60.0	1.83.1
Low	UBUNTU-CVE-2025-8194	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.11
Low	UBUNTU-CVE-2026-15308	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.18
Low	UBUNTU-CVE-2026-0915	glibc@2.35-0ubuntu3.5	2.35-0ubuntu3.13
Low	UBUNTU-CVE-2025-4802	glibc@2.35-0ubuntu3.5	2.35-0ubuntu3.10
Low	UBUNTU-CVE-2023-50495	ncurses@6.3-2ubuntu0.1	no fix listed
Low	GHSA-rgw5-rvv9-x895	brace-expansion@2.0.1	2.1.4
Low	GHSA-36qx-fr4f-26g5	next@15.3.4	15.5.16
Low	UBUNTU-CVE-2026-5773	curl@7.81.0-1ubuntu1.15	7.81.0-1ubuntu1.24
Low	GHSA-3wrr-7qpf-2prh	jackson-databind@2.13.2.2	2.14.0
Low	GHSA-vprv-35vv-q339	github.com/nats-io/nats-server/v2@v0.0.0-20240627223150-b91de0356018	2.11.15
Low	ALPINE-CVE-2026-63072	openssl@3.5.7-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-63072	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.29
Low	GHSA-8wv5-x4w7-5gww	github.com/apache/thrift@v0.19.0	0.24.0
Low	UBUNTU-CVE-2026-45445	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.25
Low	GHSA-93mq-9ffx-83m2	github.com/expr-lang/expr@v1.16.1	1.17.0
Low	UBUNTU-CVE-2021-31879	wget@1.21.2-2ubuntu1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.16.2latest	1 year ago	v1.8.2	4313261,988	24,400

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/magistrala-devops/magistrala.svg)](https://charts.stackradar.io/charts/magistrala-devops/magistrala)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.