standard-application-stack 11.4.1 Helm chart

Name: standard-application-stack Helm chart 11.4.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

mintel

Not scored yet

A generic chart to support most common application requirements

Version 11.4.1 todayApp version not verified against the render 0Artifact Hub

standard-application-stack 11.4.1 deploys 12 container images: docker.elastic.co/kibana/kibana, localstack/localstack, library/docker, mailhog/mailhog and 8 more. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.13.0, fixed in 2.15.0.

Radar Score

Not yet scored

The daily scoring run has not folded the 12 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
docker.elastic.co/kibana/kibana	7.5.2	—	unmeasured
localstack/localstack	latest	—	not yet scanned
library/docker	20.10-dind	1938172	2,787
mailhog/mailhog	v1.0.1	16133	778
opensearchproject/opensearch-dashboards	1.0.0	0452113	2,388
k3d-default.localhost:5000/test	v0.0.0	—	unmeasured
docker.elastic.co/elasticsearch/elasticsearch×2	7.5.2	—	unmeasured
bitnami/mariadb	10.6.8-debian-10-r0	—	unmeasured
library/busybox	latest	0000	0
opensearchproject/opensearch	1.1.0	535176	2,494
bitnami/postgresql	13.5.0-debian-10-r52	—	unmeasured
bitnami/redis×2	6.2.7-debian-10-r23	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

547 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-775g-4xr8-78h8	spring-expression@5.2.5.RELEASE	no fix listed
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.45.Final	4.1.136.Final
Low	ALPINE-CVE-2020-28928	musl@1.1.24-r9	1.1.24-r10
Low	GHSA-rfmp-97jj-h8m6	spring-core@5.2.5.RELEASE	5.2.18
Low	GHSA-vhjm-w67q-g75c	@hapi/wreck@15.1.0	18.1.1
Low	GHSA-6cqp-g7gg-8hr5	netty-codec-http@4.1.45.Final	4.1.136.Final
Low	GHSA-83g3-92jg-28cx	tar@4.4.13	7.5.8
Low	GHSA-6hg6-v5c8-fphq	log4j-core@2.13.0	2.25.4
Low	GO-2023-1987	stdlib@go1.19.7	1.19.12
Low	GHSA-m4cv-j2px-7723	netty-codec-http@4.1.45.Final	4.1.133.Final
Low	GO-2023-1752	stdlib@go1.19.7	1.19.9
Low	GHSA-w8wr-v893-vjvp	tar@4.4.13	7.5.18
Low	GO-2023-1705	stdlib@go1.19.7	1.19.8
Low	GHSA-wf66-mphr-4c4r	kafka-clients@2.5.0	3.9.2
Low	GO-2023-1878	stdlib@go1.19.7	1.19.11
Low	ALPINE-CVE-2021-42374	busybox@1.31.1-r16	1.31.1-r21
Low	ALPINE-CVE-2023-2975	openssl@3.1.0-r4	3.1.1-r2
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.2.0	0.52.0
Low	GHSA-4gc7-5j7h-4qph	spring-context@5.2.5.RELEASE	no fix listed
Low	GHSA-c2gf-v879-257j	netty-codec-http2@4.1.45.Final	4.1.135.Final
Low	GHSA-hpcv-96wg-7vj8	dompurify@2.1.1	3.4.6
Low	GO-2024-2963	stdlib@go1.19.7	1.21.12
Low	GO-2023-1702	stdlib@go1.19.7	1.19.8
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.4.0	0.55.0
Low	GHSA-rx8g-88g5-qh64	min-document@2.19.0	2.19.1
Low	GHSA-84h7-rjj3-6jx4	netty-codec-http@4.1.45.Final	4.1.129.Final
Low	MAL-2022-4691	monorepo-symlink-test@0.0.0	no fix listed
Low	GHSA-xw73-rw38-6vjc	github.com/docker/docker@v23.0.0-rc.1+incompatible	24.0.9
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.2.0	0.45.0
Low	GHSA-r47g-fvhr-h676	dompurify@2.1.1	3.4.6
Low	GHSA-hmfx-3pcx-653p	github.com/containerd/containerd@v1.6.16-0.20230124210447-1709cfe273d9	1.6.18
Low	GO-2023-2375	stdlib@go1.19.7	1.20.0
Low	GHSA-vvgc-356p-c3xw	golang.org/x/net@v0.4.0	0.38.0
Low	GHSA-65ch-62r8-g69g	node-forge@0.10.0	1.3.2
Low	GHSA-q7cg-457f-vx79	joi@13.7.0	17.13.4
Low	GHSA-crv5-9vww-q3g8	dompurify@2.1.1	3.4.0
Low	GHSA-g2j6-57v7-gm8c	github.com/opencontainers/runc@v1.1.3	1.1.5
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.50.1	1.83.1
Low	GO-2023-2382	stdlib@go1.19.7	1.20.12
Low	GHSA-22g5-r2x5-97cx	showdown@1.9.1	no fix listed
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.2.0	0.52.0
Low	GHSA-c69g-56f8-xwqj	netty-codec-http2@4.1.45.Final	4.1.136.Final
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.2.0	0.45.0
Low	GHSA-gvwx-54wh-qm9j	tar@4.4.13	7.5.17
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.2.0	0.52.0
Low	GO-2024-2599	stdlib@go1.19.7	1.21.8
Low	GHSA-cr32-g25g-vxjj	showdown@1.9.1	no fix listed
Low	GHSA-6pjf-3r9x-m592	github.com/distribution/distribution/v3@v3.0.0-20220725133111-4bf3547399eb	3.1.1
Low	GO-2024-3106	stdlib@go1.19.7	1.22.7
Low	ALPINE-CVE-2023-42364	busybox@1.36.0-r9	1.36.1-r7

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
11.4.1latest	today	—	—	—
11.4.0	1 month ago	—	722178562	10,603

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/mintel/standard-application-stack.svg)](https://charts.stackradar.io/charts/mintel/standard-application-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.