magistrala Helm chart

Name: magistrala Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

magistrala-devops

Scored 14 Sept 2026

Magistrala IoT Platform

Latest 0.16.2 1 year agodeploys tag v1.8.2 0Artifact Hub

magistrala 0.16.2 deploys 42 container images: quay.io/prometheus/node-exporter, jaegertracing/jaeger-collector, jaegertracing/jaeger-query, jaegertracing/jaeger-agent and 38 more. Across the 20 measured, 2,349 findings — 4 critical, 31 high — 1 on CISA KEV. The highest contribution is GHSA-mjmj-j48q-9wg2 in snakeyaml 1.26, fixed in 2.0.

Radar Score

24,4004313261,988

2,349 findings over 20 of 42 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

42 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/prometheus/node-exporter	v1.8.2	00889	817
jaegertracing/jaeger-collector	1.53.0	0113111	1,171
jaegertracing/jaeger-query	1.53.0	0111110	1,130
jaegertracing/jaeger-agent	1.53.0	01491	810
natsio/nats-box	0.14.3	0522130	1,790
registry.k8s.io/kube-state-metrics/kube-state-metrics	v2.14.0	00887	786
quay.io/prometheus/pushgateway	v1.11.0	00888	788
quay.io/prometheus-operator/prometheus-config-reloader	v0.79.2	00891	809
quay.io/prometheus/prometheus	v3.1.0	0010108	980
supermq/coap	latest	—	not yet scanned
supermq/http	latest	—	not yet scanned
supermq/auth	latest	—	not yet scanned
supermq/certs	latest	—	not yet scanned
supermq/channels	latest	—	not yet scanned
supermq/clients	latest	—	not yet scanned
supermq/domains	latest	—	not yet scanned
envoyproxy/envoy×2	v1.31-latest	0337117	1,917
supermq/groups	latest	—	not yet scanned
supermq/journal	latest	—	not yet scanned
authzed/spicedb×2	latest	0006	47
ghcr.io/absmach/magistrala/ui-backend	latest	00414	213
ghcr.io/absmach/magistrala/ui-smq	latest	022199	1,475
supermq/users	latest	—	not yet scanned
supermq/ws	latest	—	not yet scanned
magistrala/bootstrap	latest	—	not yet scanned
magistrala/postgres-reader	latest	—	not yet scanned
magistrala/postgres-writer	latest	—	not yet scanned
magistrala/provision	latest	—	not yet scanned
ghcr.io/absmach/magistrala/re	latest	0003	16
magistrala/timescale-reader	latest	—	not yet scanned
magistrala/timescale-writer	latest	—	not yet scanned
bitnami/postgresql×14	16.2.0-debian-12-r18	—	unmeasured
bitnami/cassandra	5.0.3-debian-12-r0	—	unmeasured
library/nats	2.10.17-alpine	0224109	1,449
natsio/nats-server-config-reloader	0.15.0	021379	952
quay.io/prometheus/alertmanager	v0.28.0	00791	785
bitnami/os-shell×4	12-debian-12-r24	—	unmeasured
bitnami/redis×4	7.2.5-debian-12-r2	—	unmeasured
supermq/vernemq	latest	031319	607
supermq/mqtt	latest	—	not yet scanned
timescale/timescaledb	latest-pg12	0327120	1,721
jaegertracing/jaeger-cassandra-schema	1.53.0	4888426	6,137

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

641 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2024-33600	glibc@2.35-0ubuntu3.5	2.35-0ubuntu3.8
Low	GHSA-6g55-p6wh-862q	postcss@8.4.31	8.5.12
Low	UBUNTU-CVE-2026-66046	expat@2.4.7-1ubuntu0.2	no fix listed
Low	GHSA-pq2q-rcw4-3hr6	github.com/nats-io/nats-server/v2@v2.10.12	2.11.14
Low	UBUNTU-CVE-2026-11972	python3.10@3.10.12-1~22.04.3	no fix listed
Low	GO-2023-2102	stdlib@go1.18.2	1.20.10
Low	UBUNTU-CVE-2025-5318	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.4
Low	GHSA-qffp-2rhf-9h96	tar@7.4.3	7.5.10
Low	GHSA-26hh-7cqf-hhc6	next@15.3.4	15.5.18
Low	UBUNTU-CVE-2025-69534	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.16
Low	UBUNTU-CVE-2026-80230	curl@7.81.0-1ubuntu1.15	no fix listed
Low	GHSA-23hp-3jrh-7fpw	tar@7.4.3	7.5.19
Low	UBUNTU-CVE-2026-42013	gnutls28@3.7.3-4ubuntu1.3	3.7.3-4ubuntu1.9
Low	UBUNTU-CVE-2026-0861	glibc@2.35-0ubuntu3.5	2.35-0ubuntu3.13
Low	GHSA-v722-jcv5-w7mc	github.com/nats-io/nats-server/v2@v0.0.0-20240627223150-b91de0356018	2.11.15
Low	UBUNTU-CVE-2024-2236	libgcrypt20@1.9.4-3ubuntu3	1.9.4-3ubuntu3.3
Low	ALPINE-CVE-2026-31789	openssl@3.3.1-r0	3.3.7-r0
Low	UBUNTU-CVE-2026-31789	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.23
Low	ALPINE-CVE-2025-69419	openssl@3.3.1-r0	3.3.6-r0
Low	UBUNTU-CVE-2025-69419	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.21
Low	GHSA-3x4c-7xq6-9pq8	next@15.3.4	15.5.14
Low	GHSA-qrv3-253h-g69c	pnpm@10.12.1	10.34.4
Low	ALPINE-CVE-2026-54874	openssl@3.5.7-r0	3.5.8-r0
Low	UBUNTU-CVE-2026-54874	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.29
Low	GHSA-qw9x-cqr3-wc7r	github.com/opencontainers/runc@v1.1.0	1.2.8
Low	GHSA-cgrx-mc8f-2prm	github.com/opencontainers/selinux@v1.11.0	1.13.0
Low	GHSA-cgrx-mc8f-2prm	github.com/opencontainers/runc@v1.1.0	1.2.8
Low	GHSA-7r86-cg39-jmmj	minimatch@9.0.5	9.0.7
Low	UBUNTU-CVE-2026-42766	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.25
Low	UBUNTU-CVE-2025-32990	gnutls28@3.7.3-4ubuntu1.3	3.7.3-4ubuntu1.7
Low	UBUNTU-CVE-2024-50602	expat@2.4.7-1ubuntu0.2	2.4.7-1ubuntu0.5
Low	GHSA-8qq5-rm4j-mr97	tar@7.4.3	7.5.3
Low	UBUNTU-CVE-2023-6918	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.3
Low	GO-2022-0969	stdlib@go1.18.2	1.18.6
Low	UBUNTU-CVE-2025-6020	pam@1.4.0-11ubuntu2.3	1.4.0-11ubuntu2.6
Low	GHSA-hhhw-99gj-p3c3	snakeyaml@1.26	1.31
Low	UBUNTU-CVE-2026-86145	pcre2@10.39-3ubuntu0.1	no fix listed
Low	ALPINE-CVE-2026-63075	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-w466-c33r-3gjp	pnpm@10.12.1	10.34.2
Low	UBUNTU-CVE-2026-3644	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.16
Low	ALPINE-CVE-2026-22184	zlib@1.3.1-r1	1.3.2-r0
Low	ALPINE-CVE-2024-8096	curl@8.5.0-r0	8.10.0-r0
Low	UBUNTU-CVE-2024-8096	curl@7.81.0-1ubuntu1.15	7.81.0-1ubuntu1.18
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.17.0	0.52.0
Low	GHSA-23c5-xmqv-rm74	minimatch@9.0.5	9.0.7
Low	UBUNTU-CVE-2023-47039	perl@5.34.0-3ubuntu1.3	no fix listed
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.17.0	0.52.0
Low	GHSA-mh99-v99m-4gvg	brace-expansion@2.0.1	2.1.3
Low	UBUNTU-CVE-2025-15281	glibc@2.35-0ubuntu3.5	2.35-0ubuntu3.13
Low	UBUNTU-CVE-2025-6297	dpkg@1.21.1ubuntu2.2	1.21.1ubuntu2.6

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.16.2latest	1 year ago	v1.8.2	4313261,988	24,400

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/magistrala-devops/magistrala.svg)](https://charts.stackradar.io/charts/magistrala-devops/magistrala)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.