fossology Helm chart

Name: fossology Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

midokura-community

Scored 14 Sept 2026

Open source license compliance software system and toolkit

Latest 0.2.2 2 years agoapp version 4.2.1 0Artifact Hub

fossology 0.2.2 deploys 2 container images: bitnami/postgresql and fossology/fossology. Across the 1 measured, 245 findings — 0 critical, 3 high — 2 on CISA KEV. The highest contribution is GHSA-x4qr-2fvf-3mr5 in cryptography 38.0.3, fixed in 39.0.1.

Radar Score

3,2940363179

245 findings over 1 of 2 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
bitnami/postgresql	15.2.0-debian-11-r11	—	unmeasured
fossology/fossology×2	4.2.1	0363179	3,294

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

245 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-94pj-82f3-465w	guzzlehttp/guzzle@7.5.0	7.14.2
Low	GHSA-wpwq-4j6v-78m3	guzzlehttp/guzzle@7.5.0	7.12.1
Low	PYSEC-2026-2275	requests@2.21.0	2.33.0
Low	GHSA-6wpp-88cp-7q68	phpoffice/phpspreadsheet@1.19.0	1.30.4
Low	GHSA-34xg-wgjx-8xph	guzzlehttp/psr7@2.4.1	2.10.2
Low	DLA-3297-1	tiff@4.1.0+git191117-2~deb10u4	4.1.0+git191117-2~deb10u6
Low	DLA-3466-1	avahi@0.7-4+deb10u1	0.7-4+deb10u3
Low	GHSA-hq7v-mx3g-29hw	guzzlehttp/psr7@2.4.1	2.10.2
Low	DLA-3333-1	tiff@4.1.0+git191117-2~deb10u4	4.1.0+git191117-2~deb10u7
Low	DLA-3474-1	systemd@241-7~deb10u8	241-7~deb10u10
Low	GHSA-g7vv-2v7x-gj9p	tqdm@4.64.1	4.66.3
Low	GHSA-vm85-hxw5-5432	guzzlehttp/psr7@2.4.1	2.12.1
Low	DLA-3414-1	avahi@0.7-4+deb10u1	0.7-4+deb10u2
Low	GHSA-c2w2-prh8-qm98	guzzlehttp/psr7@2.4.1	2.12.3
Low	GHSA-m959-cc7f-wv43	cryptography@38.0.3	46.0.6
Low	DLA-3771-1	python2.7@2.7.16-2+deb10u1	2.7.16-2+deb10u4
Low	DLA-3772-1	python3.7@3.7.3-2+deb10u4	3.7.3-2+deb10u7
Low	DLA-3434-1	sysstat@12.0.3-2+deb10u1	12.0.3-2+deb10u2
Low	GHSA-jp4c-xjxw-mgf9	pip@18.1	26.1
Low	DLA-3755-1	tar@1.30+dfsg-6	1.30+dfsg-6+deb10u1
Low	GHSA-g446-98w2-8p5w	guzzlehttp/guzzle@7.5.0	7.12.3
Low	GHSA-h4gh-qq45-vh27	cryptography@38.0.3	43.0.1
Low	GHSA-mrqx-rp3w-jpjp	symfony/http-foundation@v5.4.13	5.4.46
Low	DLA-3579-1	elfutils@0.176-1.1	0.176-1.1+deb10u1
Low	GHSA-58qw-9mgm-455v	pip@18.1	26.1
Low	DLA-3239-2	git@1:2.20.1-2+deb10u4	1:2.20.1-2+deb10u6
Low	DLA-3316-1	postgresql-11@11.18-0+deb10u1	11.19-0+deb10u1
Low	DLA-3366-1	tzdata@2021a-0+deb10u8	2021a-0+deb10u10
Low	DLA-3411-1	distro-info-data@0.41+deb10u6	0.41+deb10u7
Low	DLA-3412-1	tzdata@2021a-0+deb10u8	2021a-0+deb10u11
Low	DLA-3482-1	debian-archive-keyring@2019.1+deb10u1	2019.1+deb10u2
Low	DLA-3639-1	distro-info-data@0.41+deb10u6	0.41+deb10u8
Low	DLA-3684-1	tzdata@2021a-0+deb10u8	2021a-0+deb10u12
Low	DLA-3788-1	tzdata@2021a-0+deb10u8	2024a-0+deb10u1
Low	DLA-3806-1	distro-info-data@0.41+deb10u6	0.41+deb10u9
Low	GHSA-5239-wwwm-4pmq	pygments@2.13.0	2.20.0
Low	GHSA-6377-hfv9-hqf6	twig/twig@v3.4.3	3.11.2
Low	GHSA-jjxq-ff2g-95vh	twig/twig@v3.4.3	3.11.2
Low	GHSA-p42q-9prx-q5wq	twig/twig@v3.4.3	3.27.0
Low	GHSA-6vgw-5pg2-w6jp	pip@18.1	26.0
Low	GHSA-vcc8-phrv-43wj	twig/twig@v3.4.3	3.26.0
Low	GHSA-2g2g-8p8h-fgwm	twig/twig@v3.4.3	3.26.0
Low	GHSA-5cpq-8wj7-hf2v	cryptography@38.0.3	41.0.0
Low	GHSA-jm77-qphf-c4w8	cryptography@38.0.3	41.0.3
Low	GHSA-v8gr-m533-ghj9	cryptography@38.0.3	41.0.4

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.2latest	2 years ago	4.2.1	0363179	3,294

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/midokura-community/fossology.svg)](https://charts.stackradar.io/charts/midokura-community/fossology)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.