StackRadar

activemq 3.8.0 Helm chart

microboxlabs

Scored 14 Sept 2026

A Helm chart providing a basic Apache ActiveMQ deployment required to evaluate ACS (not meant to be used in production).

Version 3.8.0 7 months agoapp version 5.18.7 0Artifact Hub

activemq 3.8.0 deploys 1 container image: alfresco/alfresco-activemq. Across them, 98 findings — 2 critical, 3 high — 2 on CISA KEV. The highest contribution is GHSA-rxpj-7qvf-xv32 in activemq-all 5.18.7, fixed in 5.19.5.

Radar Score

1,494232568

98 findings over 1 of 1 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
alfresco/alfresco-activemq5.18.7-jre17-rockylinux82325681,494

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

98 distinct across the version’s images
SeverityAdvisoryPackageFixed in
CriticalGHSA-rxpj-7qvf-xv32KEVactivemq-all@5.18.75.19.5
CriticalGHSA-rxpj-7qvf-xv32KEVactivemq-broker@5.18.75.19.5
HighGHSA-4wrc-f8pq-fpqpspring-web@5.3.396.0.0
HighGHSA-g5vr-rgqm-vf78spring-webmvc@5.3.39no fix listed
HighRLSA-2025:9318javapackages-tools@5.3.0-2.module+el8.3.0+125+5da1ae290:5.3.0-2.module+el8.10.0+2003+8aeac9cb
MediumGHSA-cx7f-g6mp-7hqmspring-webmvc@5.3.39no fix listed
MediumGHSA-hfg5-xpvw-c9x4camel-core@2.25.43.2.0
MediumGHSA-w3w2-mpp5-92gmactivemq-broker@5.18.75.19.6
MediumGHSA-w3w2-mpp5-92gmactivemq-all@5.18.75.19.6
MediumGHSA-cx63-2mw6-8hw5setuptools@39.2.070.0.0
MediumGHSA-gpvv-69j7-gwj8pip@9.0.319.2
MediumGHSA-wxr5-93ph-8wr9commons-beanutils@1.10.01.11.0
MediumGHSA-r9hx-vwmv-q579setuptools@39.2.065.5.1
MediumPYSEC-2025-49setuptools@39.2.078.1.1
MediumGHSA-mr6m-xj7v-3cv3activemq-broker@5.18.75.19.6
MediumGHSA-mr6m-xj7v-3cv3activemq-all@5.18.75.19.6
MediumGHSA-j288-q9x7-2f5vcommons-lang3@3.14.03.18.0
MediumGHSA-355h-qmc2-wpwfjetty-http@9.4.57.v202412199.4.60
MediumGHSA-rmj7-2vxq-3g9fjackson-databind@2.18.22.18.8
MediumGHSA-j3rv-43j4-c7qmjackson-databind@2.18.22.18.8
MediumGHSA-r936-gwx5-v52fspring-webmvc@5.3.39no fix listed
MediumGHSA-v853-w46p-fv2hactivemq-broker@5.18.75.19.7
MediumGHSA-v853-w46p-fv2hactivemq-all@5.18.75.19.7
MediumGHSA-hg6c-8mvr-jqc9activemq-all@5.18.75.19.7
MediumGHSA-hg6c-8mvr-jqc9activemq-broker@5.18.75.19.7
MediumRLSA-2026:41948javapackages-tools@5.3.0-2.module+el8.3.0+125+5da1ae290:5.3.0-2.module+el8.10.0+2003+8aeac9cb
MediumGHSA-5568-6qcg-g7fxactivemq-broker@5.18.75.19.4
MediumGHSA-5568-6qcg-g7fxactivemq-all@5.18.75.19.4
MediumGHSA-5568-6qcg-g7fxactivemq-client@5.18.75.19.4
MediumGHSA-5xp3-jfq3-5q8xpip@9.0.321.1
LowGHSA-x96m-rh44-vgv8shiro-core@1.13.02.2.1
LowGHSA-3pxv-7cmr-fjr4log4j-core@2.24.12.25.4
LowGHSA-445c-vh5m-36rjlog4j-core@2.24.12.25.4
LowGHSA-2fvj-hgj9-j2grjetty-security@9.4.57.v202412199.4.63
LowRLSA-2026:61766glib2@2.56.4-170.el8_100:2.56.4-177.el8_10
LowGHSA-8wm6-6fqh-phmcactivemq-web@5.18.75.19.7
LowRLSA-2026:66348vim@2:8.0.1763-31.el8_102:8.0.1763-31.el8_10.7
LowGHSA-qv9r-c865-cp47log4j-api@2.24.12.25.5
LowGHSA-jmp9-x22r-554xspring-core@5.3.39no fix listed
LowGHSA-vc5p-v9hr-52mjlog4j-core@2.24.12.25.3
LowGHSA-x23c-287f-qqv5spring-webmvc@5.3.39no fix listed
LowGHSA-wf93-45jw-7689pip@9.0.326.1.2
LowGHSA-2jp3-2923-9h52activemq-broker@5.18.75.19.6
LowGHSA-2jp3-2923-9h52activemq-all@5.18.75.19.6
LowGHSA-x863-p983-p4f7spring-jms@5.3.39no fix listed
LowGHSA-r5w3-xv2f-j59qspring-expression@5.3.39no fix listed
LowGHSA-c825-6ph3-4h84activemq-mqtt@5.18.75.19.2
LowGHSA-c825-6ph3-4h84activemq-all@5.18.75.19.2
LowGHSA-775g-4xr8-78h8spring-expression@5.3.39no fix listed
LowGHSA-w3c8-7r8f-9jp8spring-webmvc@5.3.395.3.42

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
3.8.0latest7 months ago5.18.72325681,494

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/microboxlabs/activemq.svg)](https://charts.stackradar.io/charts/microboxlabs/activemq)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.