verapdf Helm chart

Name: verapdf Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

mlohr

Scored 14 Sept 2026

Helm Chart for deployment veraPDF REST service

Latest 1.4.0 3 days agoapp version v1.30.2 0Artifact Hub

verapdf 1.4.0 deploys 1 container image: verapdf/rest. Across them, 40 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-45447 in openssl 3.5.6-r0, fixed in 3.5.7-r0.

Radar Score

492001327

40 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
verapdf/rest	v1.30.2	001327	492

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

27 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-2fvj-hgj9-j2gr	jetty-security@10.0.26	10.0.31
Low	ALPINE-CVE-2026-14456	openssl@3.5.6-r0	3.5.8-r0
Low	ALPINE-CVE-2026-9076	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-63072	openssl@3.5.6-r0	3.5.8-r0
Low	ALPINE-CVE-2026-45445	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-54874	openssl@3.5.6-r0	3.5.8-r0
Low	ALPINE-CVE-2026-42766	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-63075	openssl@3.5.6-r0	3.5.8-r0
Low	ALPINE-CVE-2026-75803	openssl@3.5.6-r0	3.5.8-r0
Low	ALPINE-CVE-2026-42767	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-63074	openssl@3.5.6-r0	3.5.8-r0
Low	ALPINE-CVE-2026-34181	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-jhq6-gfmj-v8fx	logback-core@1.3.15	1.5.34
Low	GHSA-3pjw-73gf-8qr5	jackson-databind@2.19.2	2.21.4
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.21.1	2.21.4
Low	ALPINE-CVE-2026-42769	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.19.2	2.21.4
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.19.2	2.21.5
Low	GHSA-qh8g-58pp-2wxh	jetty-http@10.0.26	12.0.12
Low	GHSA-7p3p-8qv8-m2vh	jetty-server@10.0.26	no fix listed
Low	ALPINE-CVE-2026-45446	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-25qh-j22f-pwp8	logback-core@1.3.15	1.3.16
Low	ALPINE-CVE-2026-42768	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-42770	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-wjpw-4j6x-6rwh	jetty-http@10.0.26	no fix listed
Low	GHSA-p47f-322f-whfh	logback-core@1.3.15	1.5.33
Low	GHSA-qqpg-mvqg-649v	logback-core@1.3.15	1.5.25

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.4.0latest	3 days ago	v1.30.2	001327	492

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/mlohr/verapdf.svg)](https://charts.stackradar.io/charts/mlohr/verapdf)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.