standard-application-stack 11.4.1 Helm chart
mintelScored 15 Sept 2026
A generic chart to support most common application requirements
Version 11.4.1 todayApp version not verified against the render 0Artifact Hub
standard-application-stack 11.4.1 deploys 12 container images: docker.elastic.co/kibana/kibana, localstack/localstack, library/docker, mailhog/mailhog and 8 more. Across the 6 measured, 766 findings — 7 critical, 22 high — 4 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.13.0, fixed in 2.15.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| docker.elastic.co/ | 7.5.2 | — | unmeasured |
| localstack/ | latest | 0023195 | 2,068 |
| library/ | 20.10-dind | 1938172 | 2,787 |
| mailhog/ | v1.0.1 | 16133 | 778 |
| opensearchproject/ | 1.0.0 | 0452113 | 2,388 |
| k3d-default.localhost:5000/ | v0.0.0 | — | unmeasured |
| docker.elastic.co/ | 7.5.2 | — | unmeasured |
| bitnami/ | 10.6.8-debian-10-r0 | — | unmeasured |
| library/ | latest | 0000 | 0 |
| opensearchproject/ | 1.1.0 | 535176 | 2,494 |
| bitnami/ | 13.5.0-debian-10-r52 | — | unmeasured |
| bitnami/ | 6.2.7-debian-10-r23 | — | unmeasured |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-9ppj-qmqm-q256 | tar | 7.5.11 |
| Low | GHSA-2r2c-g63r-vccr | node-forge | 1.3.0 |
| Low | GO-2026-4341 | stdlib | 1.24.12 |
| Low | GHSA-67mf-3cr5-8w23 | bc-fips | 1.0.2.6 |
| Low | DEBIAN-CVE-2025-66866 | binutils | no fix listed |
| Low | DEBIAN-CVE-2025-5244 | binutils | no fix listed |
| Low | DEBIAN-CVE-2025-5245 | binutils | no fix listed |
| Low | DEBIAN-CVE-2026-9547 | curl | no fix listed |
| Low | GHSA-968p-4wvh-cqc8 | @babel/ | 7.26.10 |
| Low | DEBIAN-CVE-2021-45346 | sqlite3 | no fix listed |
| Low | DEBIAN-CVE-2025-8941 | pam | no fix listed |
| Low | DEBIAN-CVE-2025-7545 | binutils | no fix listed |
| Low | DEBIAN-CVE-2025-70873 | sqlite3 | no fix listed |
| Low | RUSTSEC-2023-0071 | rsa | no fix listed |
| Low | DEBIAN-CVE-2026-57432 | perl | 5.40.1-6+deb13u1 |
| Low | GO-2024-2887 | stdlib | 1.21.11 |
| Low | GHSA-xxqh-mfjm-7mv9 | netty-codec-http | 4.1.133.Final |
| Low | GHSA-pxq6-2prw-chj9 | github.com/ | no fix listed |
| Low | DEBIAN-CVE-2025-11083 | binutils | no fix listed |
| Low | GO-2023-1704 | stdlib | 1.19.8 |
| Low | DEBIAN-CVE-2025-11082 | binutils | no fix listed |
| Low | GHSA-rmmh-p597-ppvv | showdown | no fix listed |
| Low | ALPINE-CVE-2025-26519 | musl | 1.2.4-r3 |
| Low | GHSA-f886-m6hf-6m8v | brace-expansion | 1.1.13 |
| Low | GHSA-3p65-76g6-3w7r | github.com/ | 3.1.0 |
| Low | GHSA-fccg-mwvh-qqg4 | netty-handler | 4.1.137.Final |
| Low | GHSA-4cx2-fc23-5wg6 | bcpkix-jdk15on | 1.79 |
| Low | GHSA-36wv-v2qp-v4g4 | cxf-core | 3.5.11 |
| Low | GHSA-hr8g-6v94-x4m9 | bcprov-jdk15on | no fix listed |
| Low | DEBIAN-CVE-2026-9080 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-48962 | perl | 5.40.1-6+deb13u1 |
| Low | DEBIAN-CVE-2026-9545 | curl | no fix listed |
| Low | GHSA-775g-4xr8-78h8 | spring-expression | no fix listed |
| Low | GHSA-q4f6-jm68-57ww | netty-codec-http | 4.1.136.Final |
| Low | ALPINE-CVE-2020-28928 | musl | 1.1.24-r10 |
| Low | GHSA-rfmp-97jj-h8m6 | spring-core | 5.2.18 |
| Low | DEBIAN-CVE-2026-76642 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2025-69649 | binutils | no fix listed |
| Low | DEBIAN-CVE-2026-11822 | sqlite3 | 3.46.1-7+deb13u2 |
| Low | DEBIAN-CVE-2026-11824 | sqlite3 | 3.46.1-7+deb13u2 |
| Low | GHSA-vhjm-w67q-g75c | @hapi/ | 18.1.1 |
| Low | GHSA-6cqp-g7gg-8hr5 | netty-codec-http | 4.1.136.Final |
| Low | GHSA-83g3-92jg-28cx | tar | 7.5.8 |
| Low | GHSA-6hg6-v5c8-fphq | log4j-core | 2.25.4 |
| Low | DEBIAN-CVE-2026-48961 | perl | 5.40.1-6+deb13u1 |
| Low | GO-2023-1987 | stdlib | 1.19.12 |
| Low | DEBIAN-CVE-2025-66864 | binutils | no fix listed |
| Low | GHSA-m4cv-j2px-7723 | netty-codec-http | 4.1.133.Final |
| Low | DEBIAN-CVE-2025-1147 | binutils | no fix listed |
| Low | GO-2023-1752 | stdlib | 1.19.9 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 11.4.1latest | today | — | 722177559 | 10,515 |
| 11.4.0 | 1 month ago | — | 722178567 | 10,639 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.