standard-application-stack Helm chart

Name: standard-application-stack Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

mintel

Scored 15 Sept 2026

A generic chart to support most common application requirements

Latest 11.4.1 yesterdayApp version not verified against the render 0Artifact Hub

standard-application-stack 11.4.1 deploys 12 container images: docker.elastic.co/kibana/kibana, localstack/localstack, library/docker, mailhog/mailhog and 8 more. Across the 6 measured, 766 findings — 7 critical, 22 high — 4 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.13.0, fixed in 2.15.0.

Radar Score

10,515722177559

766 findings over 6 of 12 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
docker.elastic.co/kibana/kibana	7.5.2	—	unmeasured
localstack/localstack	latest	0023195	2,068
library/docker	20.10-dind	1938172	2,787
mailhog/mailhog	v1.0.1	16133	778
opensearchproject/opensearch-dashboards	1.0.0	0452113	2,388
k3d-default.localhost:5000/test	v0.0.0	—	unmeasured
docker.elastic.co/elasticsearch/elasticsearch×2	7.5.2	—	unmeasured
bitnami/mariadb	10.6.8-debian-10-r0	—	unmeasured
library/busybox	latest	0000	0
opensearchproject/opensearch	1.1.0	535176	2,494
bitnami/postgresql	13.5.0-debian-10-r52	—	unmeasured
bitnami/redis×2	6.2.7-debian-10-r23	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

766 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-7236-3392-c5c6	github.com/moby/buildkit@v0.11.2	0.31.1
Low	GHSA-5c6j-r48x-rmvq	serialize-javascript@3.1.0	7.0.3
Low	GHSA-m6hq-p25p-ffr2	github.com/containerd/containerd@v1.6.16-0.20230124210447-1709cfe273d9	1.7.29
Low	GO-2023-1621	stdlib@go1.19.6	1.19.7
Low	GO-2026-4981	stdlib@go1.19.7	1.25.10
Low	GO-2025-3563	stdlib@go1.19.7	1.23.8
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.11.2	2.18.9
Low	GHSA-vmf3-w455-68vh	tar@4.4.13	7.5.16
Low	GO-2026-4977	stdlib@go1.19.7	1.25.10
Low	GO-2024-2610	stdlib@go1.19.7	1.21.8
Low	GO-2026-4986	stdlib@go1.19.7	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.4.0	0.53.0
Low	GO-2026-4918	stdlib@go1.19.7	1.25.10
Low	GO-2026-4337	stdlib@go1.19.7	1.24.13
Low	GHSA-39q2-94rc-95cp	dompurify@2.1.1	3.4.0
Low	GHSA-x426-x7cc-3fpc	@hapi/wreck@15.1.0	18.1.2
Low	GHSA-cj63-jhhr-wcxv	dompurify@2.1.1	3.3.2
Low	DEBIAN-CVE-2025-3198	binutils@2.44-3	no fix listed
Low	GO-2026-4601	stdlib@go1.19.7	1.25.8
Low	GHSA-gcjf-9mgh-3p7g	netty-codec-http@4.1.45.Final	4.1.136.Final
Low	GHSA-v8h7-rr48-vmmv	netty-codec-http@4.1.45.Final	4.1.133.Final
Low	DEBIAN-CVE-2026-19499	glibc@2.41-12+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-78410	util-linux@2.41-5	no fix listed
Low	GHSA-9cmq-m9j5-mvww	spring-expression@5.2.5.RELEASE	5.3.39
Low	GHSA-563q-j3cm-6jxm	netty-codec-http2@4.1.45.Final	4.1.135.Final
Low	GHSA-6hxr-mr5r-9836	re2@1.15.4	1.25.2
Low	DEBIAN-CVE-2026-89161	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	GHSA-rp9w-3fw7-7cwq	dompurify@2.1.1	3.4.7
Low	GO-2026-5026	stdlib@go1.19.7	1.25.13
Low	GO-2026-5026	golang.org/x/net@v0.4.0	0.55.0
Low	GHSA-j58c-ww9w-pwp5	angular@1.8.0	no fix listed
Low	DEBIAN-CVE-2025-14104	util-linux@2.41-5	2.41.3-1
Low	GHSA-5x3r-wrvg-rp6q	netty-codec-http2@4.1.45.Final	4.1.135.Final
Low	GO-2025-3420	stdlib@go1.19.7	1.22.11
Low	GO-2026-4342	stdlib@go1.19.7	1.24.12
Low	GO-2024-2598	stdlib@go1.19.7	1.21.8
Low	GO-2025-3751	stdlib@go1.19.7	1.23.10
Low	DEBIAN-CVE-2025-11839	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-11840	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-78409	util-linux@2.41-5	no fix listed
Low	ALPINE-CVE-2024-13176	openssl@3.1.0-r4	3.1.8-r0
Low	GHSA-2mvq-xp48-4c77	subtext@6.0.7	no fix listed
Low	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.50.1	1.82.2
Low	GHSA-36jr-mh4h-2g58	d3-color@1.4.1	3.1.0
Low	GHSA-5854-jvxx-2cg9	content@4.0.5	no fix listed
Low	GHSA-5p4m-2wfm-xmqj	js-yaml@3.14.1	3.15.1
Low	GHSA-7hx8-2rxv-66xv	hapi@17.6.0	no fix listed
Low	GHSA-g64q-3vg8-8f93	pez@4.0.2	no fix listed
Low	GHSA-m425-mq94-257g	google.golang.org/grpc@v1.50.1	1.56.3
Low	GHSA-mg85-8mv5-ffjr	ammo@3.0.1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
11.4.1latest	yesterday	—	722177559	10,515
11.4.0	1 month ago	—	722178567	10,639

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/mintel/standard-application-stack.svg)](https://charts.stackradar.io/charts/mintel/standard-application-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.