standard-application-stack Helm chart

Name: standard-application-stack Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

mintel

Scored 15 Sept 2026

A generic chart to support most common application requirements

Latest 11.4.1 yesterdayApp version not verified against the render 0Artifact Hub

standard-application-stack 11.4.1 deploys 12 container images: docker.elastic.co/kibana/kibana, localstack/localstack, library/docker, mailhog/mailhog and 8 more. Across the 6 measured, 766 findings — 7 critical, 22 high — 4 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.13.0, fixed in 2.15.0.

Radar Score

10,515722177559

766 findings over 6 of 12 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
docker.elastic.co/kibana/kibana	7.5.2	—	unmeasured
localstack/localstack	latest	0023195	2,068
library/docker	20.10-dind	1938172	2,787
mailhog/mailhog	v1.0.1	16133	778
opensearchproject/opensearch-dashboards	1.0.0	0452113	2,388
k3d-default.localhost:5000/test	v0.0.0	—	unmeasured
docker.elastic.co/elasticsearch/elasticsearch×2	7.5.2	—	unmeasured
bitnami/mariadb	10.6.8-debian-10-r0	—	unmeasured
library/busybox	latest	0000	0
opensearchproject/opensearch	1.1.0	535176	2,494
bitnami/postgresql	13.5.0-debian-10-r52	—	unmeasured
bitnami/redis×2	6.2.7-debian-10-r23	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

766 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2026-5027	golang.org/x/net@v0.4.0	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.4.0	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.4.0	0.55.0
Low	DEBIAN-CVE-2026-42250	bzip2@1.0.8-6	no fix listed
Low	DEBIAN-CVE-2026-39113	sqlite3@3.46.1-7+deb13u1	no fix listed
Low	GHSA-m4gq-fm9h-8q75	github.com/docker/buildx@v0.0.0-20230306162559-c513d34049e4	0.21.3
Low	GO-2026-4602	stdlib@go1.19.7	1.25.8
Low	DEBIAN-CVE-2026-27456	util-linux@2.41-5	2.41.5-0+deb13u1
Low	GHSA-4wp7-92pw-q264	spring-context@5.2.5.RELEASE	no fix listed
Low	DEBIAN-CVE-2026-18508	tar@1.35+dfsg-3.1	no fix listed
Low	DEBIAN-CVE-2026-89160	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	GO-2026-5622	github.com/containerd/containerd@v1.6.16-0.20230124210447-1709cfe273d9	no fix listed
Low	DEBIAN-CVE-2026-90803	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-90804	binutils@2.44-3	no fix listed
Low	GHSA-7rx3-28cr-v5wh	handlebars@4.7.7	4.7.9
Low	DEBIAN-CVE-2024-26461	krb5@1.21.3-5+deb13u1	no fix listed
Low	GHSA-9f52-rjqv-25qv	spring-expression@5.2.5.RELEASE	no fix listed
Low	DEBIAN-CVE-2025-1181	binutils@2.44-3	no fix listed
Low	GHSA-w573-9ffj-6ff9	netty-transport-native-epoll@4.1.45.Final	4.1.135.Final
Low	DEBIAN-CVE-2026-90802	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-1180	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2007-5686	shadow@1:4.17.4-2	no fix listed
Low	DEBIAN-CVE-2025-1151	binutils@2.44-3	no fix listed
Low	GO-2026-5024	golang.org/x/sys@v0.3.0	0.44.0
Low	DEBIAN-CVE-2025-1182	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-18477	tar@1.35+dfsg-3.1	no fix listed
Low	GHSA-xjvp-4fhw-gc47	github.com/opencontainers/runc@v1.1.5	1.3.6
Low	DEBIAN-CVE-2024-26458	krb5@1.21.3-5+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-53612	util-linux@2.41-5	2.41.5-0+deb13u1
Low	DEBIAN-CVE-2026-53613	util-linux@2.41-5	2.41.5-0+deb13u1
Low	DEBIAN-CVE-2026-53614	util-linux@2.41-5	2.41.5-0+deb13u1
Low	DEBIAN-CVE-2026-53615	util-linux@2.41-5	2.41.5-0+deb13u1
Low	DEBIAN-CVE-2026-77117	glibc@2.41-12+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-80489	glibc@2.41-12+deb13u3	no fix listed
Low	GO-2023-2153	google.golang.org/grpc@v1.50.1	1.56.3
Low	GO-2023-2412	github.com/containerd/containerd@v1.6.16-0.20230124210447-1709cfe273d9	1.6.26
Low	GO-2026-5932	golang.org/x/crypto@v0.2.0	no fix listed
Low	GO-2026-6061	google.golang.org/grpc@v1.50.1	1.82.1
Low	RUSTSEC-2026-0173	proc-macro-error2@2.0.1	no fix listed
Low	RUSTSEC-2026-0186	memmap2@0.9.10	0.9.11
Low	RUSTSEC-2026-0204	crossbeam-epoch@0.9.18	0.9.20
Low	RUSTSEC-2026-0221	event-listener@5.4.1	5.4.2
Low	RUSTSEC-2026-0258	h2@0.4.15	0.4.16
Low	DEBIAN-CVE-2026-40228	systemd@257.13-1~deb13u1	no fix listed
Low	GHSA-pxg6-pf52-xh8x	cookie@0.4.0	0.7.0
Low	GHSA-4vq8-7jfc-9cvp	github.com/docker/docker@v23.0.0-rc.1+incompatible	25.0.13
Low	GHSA-fghv-69vj-qj49	netty-codec-http@4.1.45.Final	4.1.125.Final
Low	GHSA-442j-39wm-28r2	handlebars@4.7.7	4.7.9
Low	GHSA-m8cg-xc2p-r3fc	github.com/opencontainers/runc@v1.1.3	1.1.5
Low	GHSA-72x6-4j93-7w86	github.com/moby/buildkit@v0.11.2	0.31.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
11.4.1latest	yesterday	—	722177559	10,515
11.4.0	1 month ago	—	722178567	10,639

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/mintel/standard-application-stack.svg)](https://charts.stackradar.io/charts/mintel/standard-application-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.