standard-application-stack 11.4.1 Helm chart
mintelScored 15 Sept 2026
A generic chart to support most common application requirements
Version 11.4.1 todayApp version not verified against the render 0Artifact Hub
standard-application-stack 11.4.1 deploys 12 container images: docker.elastic.co/kibana/kibana, localstack/localstack, library/docker, mailhog/mailhog and 8 more. Across the 6 measured, 766 findings — 7 critical, 22 high — 4 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.13.0, fixed in 2.15.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| docker.elastic.co/ | 7.5.2 | — | unmeasured |
| localstack/ | latest | 0023195 | 2,068 |
| library/ | 20.10-dind | 1938172 | 2,787 |
| mailhog/ | v1.0.1 | 16133 | 778 |
| opensearchproject/ | 1.0.0 | 0452113 | 2,388 |
| k3d-default.localhost:5000/ | v0.0.0 | — | unmeasured |
| docker.elastic.co/ | 7.5.2 | — | unmeasured |
| bitnami/ | 10.6.8-debian-10-r0 | — | unmeasured |
| library/ | latest | 0000 | 0 |
| opensearchproject/ | 1.1.0 | 535176 | 2,494 |
| bitnami/ | 13.5.0-debian-10-r52 | — | unmeasured |
| bitnami/ | 6.2.7-debian-10-r23 | — | unmeasured |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-5h4j-qrvg-9xhw | node-jose | 2.2.0 |
| Low | DEBIAN-CVE-2017-13716 | binutils | no fix listed |
| Low | GHSA-52cp-r559-cp3m | js-yaml | 3.15.0 |
| Low | GHSA-q67f-28xg-22rw | node-forge | 1.4.0 |
| Low | GHSA-hmw2-7cc7-3qxx | form-data | 2.5.6 |
| Low | GHSA-7x27-g8rg-x87w | angular | no fix listed |
| Low | GHSA-qw9x-cqr3-wc7r | github.com/ | 1.2.8 |
| Low | GHSA-cgrx-mc8f-2prm | github.com/ | 1.2.8 |
| Low | GHSA-7r86-cg39-jmmj | minimatch | 3.1.3 |
| Low | DEBIAN-CVE-2026-66035 | libssh2 | 1.11.1-1+deb13u2 |
| Low | DEBIAN-CVE-2018-9996 | binutils | no fix listed |
| Low | GHSA-952p-6rrq-rcjv | micromatch | 4.0.8 |
| Low | DEBIAN-CVE-2025-69720 | ncurses | no fix listed |
| Low | DEBIAN-CVE-2025-69650 | binutils | no fix listed |
| Low | GHSA-8qq5-rm4j-mr97 | tar | 7.5.3 |
| Low | GHSA-h4h5-3hr4-j3g2 | protobuf-java | 3.16.3 |
| Low | GHSA-hhhw-99gj-p3c3 | snakeyaml | 1.31 |
| Low | GHSA-jmr9-qjv8-65gv | extract-zip | no fix listed |
| Low | DEBIAN-CVE-2021-32256 | binutils | no fix listed |
| Low | DEBIAN-CVE-2026-86145 | pcre2 | 10.46-1~deb13u2 |
| Low | GHSA-5jpm-x58v-624v | netty-codec-http | 4.1.108.Final |
| Low | GHSA-6xx3-rg99-gc3p | bc-fips | 1.0.2.1 |
| Low | DEBIAN-CVE-2025-1178 | binutils | no fix listed |
| Low | GHSA-q4h4-gmj2-qvw2 | golang.org/ | 0.52.0 |
| Low | GHSA-23c5-xmqv-rm74 | minimatch | 3.1.4 |
| Low | GHSA-ppp5-5v6c-4jwp | node-forge | 1.4.0 |
| Low | GHSA-3p8m-j85q-pgmj | netty-codec | 4.1.125.Final |
| Low | GHSA-w879-237q-wc7r | golang.org/ | 0.52.0 |
| Low | GHSA-mh99-v99m-4gvg | brace-expansion | 1.1.17 |
| Low | GHSA-4vrq-3vrq-g6gg | github.com/ | 0.28.1 |
| Low | GHSA-mj4r-2hfc-f8p6 | netty-codec | 4.1.133.Final |
| Low | GHSA-ghvc-7hp8-2g2v | cxf-core | 3.6.12 |
| Low | GHSA-c653-97m9-rcg9 | netty-handler | 4.1.135.Final |
| Low | GHSA-f2g3-hh2r-cwgc | github.com/ | 3.1.0 |
| Low | GHSA-vc5p-v9hr-52mj | log4j-core | 2.25.3 |
| Low | GHSA-2wrh-6pvc-2jm9 | golang.org/ | 0.13.0 |
| Low | GHSA-6pff-fmh2-4mmf | cxf-rt-rs-security-jose | 3.5.9 |
| Low | GHSA-8fr3-hfg3-gpgp | node-forge | 1.0.0 |
| Low | DEBIAN-CVE-2026-9538 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-58050 | libssh2 | 1.11.1-1+deb13u2 |
| Low | GHSA-93wv-jw9v-4972 | netty-codec-http2 | 4.1.136.Final |
| Low | DEBIAN-CVE-2020-15719 | openldap | no fix listed |
| Low | GHSA-6jqx-86gh-f27w | netty-codec-http | 4.1.136.Final |
| Low | GHSA-v435-xc8x-wvr9 | bcprov-jdk15on | 1.78 |
| Low | DEBIAN-CVE-2026-66034 | libssh2 | 1.11.1-1+deb13u2 |
| Low | GHSA-8x88-c5mf-7j5w | tar | 7.5.18 |
| Low | DEBIAN-CVE-2026-82208 | curl | no fix listed |
| Low | GHSA-mvh2-crg5-v77c | netty-codec-http | 4.1.136.Final |
| Low | GO-2023-2185 | stdlib | 1.20.11 |
| Low | DEBIAN-CVE-2026-54411 | pam | no fix listed |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 11.4.1latest | today | — | 722177559 | 10,515 |
| 11.4.0 | 1 month ago | — | 722178567 | 10,639 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.