StackRadar

nodecg-chart Helm chart

marathon-charts

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 0.1.5 1 year agodeploys tag latest 0Artifact Hub

nodecg-chart 0.1.5 deploys 2 container images: ghcr.io/rodg/nodecg-base and ghcr.io/rodg/rtmp-controller. Across them, 566 findings5 critical, 12 high 7 on CISA KEV. The highest contribution is DEBIAN-CVE-2023-4911 in glibc 2.36-9, fixed in 2.36-9+deb12u3.

Radar Score

7,315512125423

566 findings over 2 of 2 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
ghcr.io/rodg/nodecg-baselatest08431782,902
ghcr.io/rodg/rtmp-controllerlatest54822454,413

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

409 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowDEBIAN-CVE-2026-11822sqlite3@3.40.1-2no fix listed
LowDEBIAN-CVE-2026-11824sqlite3@3.40.1-2no fix listed
LowGHSA-v5gw-mw7f-84pxstarlette@0.17.10.27.0
LowDEBIAN-CVE-2025-40909perl@5.36.0-75.36.0-7+deb12u3
LowGHSA-83g3-92jg-28cxtar@6.2.17.5.8
LowDEBIAN-CVE-2026-48961perl@5.36.0-7no fix listed
LowDEBIAN-CVE-2026-63074openssl@3.0.9-1no fix listed
LowDSA-5746-1postgresql-13@13.11-0+deb11u113.16-0+deb11u1
LowDLA-4107-1openjpeg2@2.4.0-32.4.0-3+deb11u1
LowDLA-3926-1perl@5.32.1-4+deb11u25.32.1-4+deb11u4
LowDEBIAN-CVE-2025-14831gnutls28@3.7.9-23.7.9-2+deb12u6
LowDEBIAN-CVE-2026-6238glibc@2.36-9no fix listed
LowGHSA-34jh-p97f-mpxfurllib3@2.0.32.2.2
LowGHSA-4xh5-x5gv-qwphpip@23.0.125.3
LowGHSA-w8wr-v893-vjvptar@6.2.17.5.18
LowGHSA-m7pr-hjqh-92cmaxios@1.6.81.15.1
LowDEBIAN-CVE-2026-25210expat@2.5.0-1no fix listed
LowDEBIAN-CVE-2023-2975openssl@3.0.9-13.0.10-1~deb12u1
LowDEBIAN-CVE-2026-5435glibc@2.36-9no fix listed
LowGHSA-h35f-9h28-mq5csetuptools@65.5.183.0.0
LowDEBIAN-CVE-2026-54369acl@2.3.1-3no fix listed
LowDSA-5567-1tiff@4.2.0-1+deb11u44.2.0-1+deb11u5
LowDLA-4432-1curl@7.74.0-1.3+deb11u77.74.0-1.3+deb11u16
LowDLA-3910-1e2fsprogs@1.46.2-21.46.2-2+deb11u1
LowGHSA-mmx7-hfxf-jppxaxios@1.6.81.18.0
LowDEBIAN-CVE-2026-7017perl@5.36.0-7no fix listed
LowDLA-4064-1libxml2@2.9.10+dfsg-6.7+deb11u42.9.10+dfsg-6.7+deb11u6
LowDEBIAN-CVE-2026-54371attr@1:2.5.1-4no fix listed
LowDEBIAN-CVE-2025-0395glibc@2.36-92.36-9+deb12u10
LowDEBIAN-CVE-2023-4039gcc-12@12.2.0-1412.2.0-14+deb12u1
LowDSA-5678-1glibc@2.31-13+deb11u62.31-13+deb11u10
LowDLA-4267-1gnutls28@3.7.1-5+deb11u33.7.1-5+deb11u8
LowDSA-5962-1gnutls28@3.7.9-23.7.9-2+deb12u5
LowGHSA-2c2j-9gv5-cj73starlette@0.17.10.47.2
LowDLA-4074-1mariadb-10.5@1:10.5.19-0+deb11u21:10.5.28-0+deb11u1
LowDEBIAN-CVE-2025-4598systemd@252.6-1252.38-1~deb12u1
LowDLA-3881-1aom@1.0.0.errata1-3+deb11u11.0.0.errata1-3+deb11u2
LowDLA-3962-1glib2.0@2.66.8-12.66.8-1+deb11u5
LowPYSEC-2026-3721pip@23.0.126.2
LowDLA-4309-1libxslt@1.1.34-4+deb11u11.1.34-4+deb11u3
LowGHSA-mq26-g339-26xfpip@23.0.123.3
LowGHSA-cm22-4g7w-348pserve-static@1.15.01.16.0
LowDEBIAN-CVE-2024-22365pam@1.5.2-61.5.2-6+deb12u2
LowDEBIAN-CVE-2026-22796openssl@3.0.9-13.0.18-1~deb12u2
LowGHSA-gvwx-54wh-qm9jtar@6.2.17.5.17
LowDLA-4344-1gdk-pixbuf@2.42.2+dfsg-1+deb11u12.42.2+dfsg-1+deb11u4
LowDEBIAN-CVE-2024-26462krb5@1.20.1-21.20.1-2+deb12u3
LowGHSA-mf9w-mj56-hr94python-dotenv@1.0.01.2.2
LowDEBIAN-CVE-2022-0563util-linux@2.38.1-5+b1no fix listed
LowDEBIAN-CVE-2025-3576krb5@1.20.1-21.20.1-2+deb12u4

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.5latest1 year agolatest5121254237,315

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/marathon-charts/nodecg-chart.svg)](https://charts.stackradar.io/charts/marathon-charts/nodecg-chart)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.