magistrala Helm chart

Name: magistrala Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

magistrala-devops

Scored 14 Sept 2026

Magistrala IoT Platform

Latest 0.16.2 1 year agodeploys tag v1.8.2 0Artifact Hub

magistrala 0.16.2 deploys 42 container images: quay.io/prometheus/node-exporter, jaegertracing/jaeger-collector, jaegertracing/jaeger-query, jaegertracing/jaeger-agent and 38 more. Across the 20 measured, 2,349 findings — 4 critical, 31 high — 1 on CISA KEV. The highest contribution is GHSA-mjmj-j48q-9wg2 in snakeyaml 1.26, fixed in 2.0.

Radar Score

24,4004313261,988

2,349 findings over 20 of 42 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

42 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/prometheus/node-exporter	v1.8.2	00889	817
jaegertracing/jaeger-collector	1.53.0	0113111	1,171
jaegertracing/jaeger-query	1.53.0	0111110	1,130
jaegertracing/jaeger-agent	1.53.0	01491	810
natsio/nats-box	0.14.3	0522130	1,790
registry.k8s.io/kube-state-metrics/kube-state-metrics	v2.14.0	00887	786
quay.io/prometheus/pushgateway	v1.11.0	00888	788
quay.io/prometheus-operator/prometheus-config-reloader	v0.79.2	00891	809
quay.io/prometheus/prometheus	v3.1.0	0010108	980
supermq/coap	latest	—	not yet scanned
supermq/http	latest	—	not yet scanned
supermq/auth	latest	—	not yet scanned
supermq/certs	latest	—	not yet scanned
supermq/channels	latest	—	not yet scanned
supermq/clients	latest	—	not yet scanned
supermq/domains	latest	—	not yet scanned
envoyproxy/envoy×2	v1.31-latest	0337117	1,917
supermq/groups	latest	—	not yet scanned
supermq/journal	latest	—	not yet scanned
authzed/spicedb×2	latest	0006	47
ghcr.io/absmach/magistrala/ui-backend	latest	00414	213
ghcr.io/absmach/magistrala/ui-smq	latest	022199	1,475
supermq/users	latest	—	not yet scanned
supermq/ws	latest	—	not yet scanned
magistrala/bootstrap	latest	—	not yet scanned
magistrala/postgres-reader	latest	—	not yet scanned
magistrala/postgres-writer	latest	—	not yet scanned
magistrala/provision	latest	—	not yet scanned
ghcr.io/absmach/magistrala/re	latest	0003	16
magistrala/timescale-reader	latest	—	not yet scanned
magistrala/timescale-writer	latest	—	not yet scanned
bitnami/postgresql×14	16.2.0-debian-12-r18	—	unmeasured
bitnami/cassandra	5.0.3-debian-12-r0	—	unmeasured
library/nats	2.10.17-alpine	0224109	1,449
natsio/nats-server-config-reloader	0.15.0	021379	952
quay.io/prometheus/alertmanager	v0.28.0	00791	785
bitnami/os-shell×4	12-debian-12-r24	—	unmeasured
bitnami/redis×4	7.2.5-debian-12-r2	—	unmeasured
supermq/vernemq	latest	031319	607
supermq/mqtt	latest	—	not yet scanned
timescale/timescaledb	latest-pg12	0327120	1,721
jaegertracing/jaeger-cassandra-schema	1.53.0	4888426	6,137

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

820 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-34743	xz-utils@5.2.5-2ubuntu1	5.2.5-2ubuntu1.1
Low	GO-2024-3107	stdlib@go1.21.5	1.22.7
Low	GO-2023-1751	stdlib@go1.18.2	1.19.9
Low	GO-2023-1753	stdlib@go1.18.2	1.19.9
Low	GHSA-fcjp-h8cc-6879	github.com/nats-io/nats-server/v2@v0.0.0-20240627223150-b91de0356018	2.11.15
Low	ALPINE-CVE-2023-42365	busybox@1.36.1-r28	1.36.1-r29
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.13.2	2.18.8
Low	UBUNTU-CVE-2026-54411	pam@1.4.0-11ubuntu2.3	1.4.0-11ubuntu2.7
Low	GHSA-2v37-7h3g-55p8	nanoid@3.3.11	3.3.18
Low	UBUNTU-CVE-2026-84366	python3.10@3.10.12-1~22.04.3	no fix listed
Low	UBUNTU-CVE-2026-25210	expat@2.4.7-1ubuntu0.2	2.4.7-1ubuntu0.7
Low	GO-2024-2824	stdlib@go1.22.1	1.22.3
Low	GHSA-cp6g-7hqx-qxhp	go.mongodb.org/mongo-driver@v1.14.0	1.17.7
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.6	1.7.8
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/service/s3@v1.96.3	1.97.3
Low	ALPINE-CVE-2024-6874	curl@8.5.0-r0	8.9.0-r0
Low	UBUNTU-CVE-2026-19487	perl@5.34.0-3ubuntu1.3	5.34.0-3ubuntu1.9
Low	UBUNTU-CVE-2026-4878	libcap2@1:2.44-1ubuntu0.22.04.1	1:2.44-1ubuntu0.22.04.3
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.17.0	0.52.0
Low	GHSA-jc7w-c686-c4v9	github.com/ulikunitz/xz@v0.5.11	0.5.15
Low	GHSA-x86f-5xw2-fm2r	github.com/docker/docker@v27.4.1+incompatible	no fix listed
Low	GO-2023-2041	stdlib@go1.18.2	1.20.8
Low	GHSA-vffh-x6r8-xx99	github.com/prometheus/prometheus@v0.301.0	0.311.2-0.20260410083055-07c6232d159b
Low	GO-2023-2043	stdlib@go1.18.2	1.20.8
Low	ALPINE-CVE-2024-25629	c-ares@1.24.0-r1	1.27.0-r0
Low	GO-2022-0515	stdlib@go1.18.2	1.17.12
Low	GO-2023-2186	stdlib@go1.18.2	1.20.11
Low	UBUNTU-CVE-2025-29481	libbpf@1:0.5.0-1ubuntu22.04.1	no fix listed
Low	GHSA-q6j5-fjx5-2mc3	pnpm@10.12.1	10.34.1
Low	GO-2024-3333	golang.org/x/net@v0.19.0	0.33.0
Low	GHSA-9h8m-3fm2-qjrq	go.opentelemetry.io/otel/sdk@v1.21.0	1.40.0
Low	UBUNTU-CVE-2026-78408	util-linux@2.37.2-4ubuntu3	no fix listed
Low	GHSA-pwx7-fx9r-hr4h	github.com/nats-io/nats-server/v2@v0.0.0-20240627223150-b91de0356018	2.11.15
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.13.2.2	2.18.8
Low	UBUNTU-CVE-2026-54369	acl@2.3.1-1	no fix listed
Low	UBUNTU-CVE-2026-41989	libgcrypt20@1.9.4-3ubuntu3	1.9.4-3ubuntu3.2
Low	UBUNTU-CVE-2025-1377	elfutils@0.186-1build1	0.186-1ubuntu0.1
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@2.0.1	2.1.2
Low	ALPINE-CVE-2024-11053	curl@8.5.0-r0	8.11.1-r0
Low	UBUNTU-CVE-2024-11053	curl@7.81.0-1ubuntu1.15	7.81.0-1ubuntu1.20
Low	UBUNTU-CVE-2025-5372	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.4
Low	GO-2024-3105	stdlib@go1.21.5	1.22.7
Low	GO-2022-1095	stdlib@go1.18.2	1.18.8
Low	GHSA-54hh-g5mx-jqcp	pnpm@10.12.1	10.34.0
Low	UBUNTU-CVE-2026-13595	util-linux@2.37.2-4ubuntu3	2.37.2-4ubuntu3.6
Low	GO-2023-1621	stdlib@go1.18.2	1.19.7
Low	UBUNTU-CVE-2026-54371	attr@1:2.5.1-1build1	1:2.5.1-1ubuntu0.1
Low	GO-2026-4981	stdlib@go1.21.5	1.25.10
Low	UBUNTU-CVE-2026-6019	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.16
Low	GO-2025-3563	stdlib@go1.21.5	1.23.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.16.2latest	1 year ago	v1.8.2	4313261,988	24,400

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/magistrala-devops/magistrala.svg)](https://charts.stackradar.io/charts/magistrala-devops/magistrala)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.