StackRadar

sample-app Helm chart

mongodb-helm-charts

Scored 14 Sept 2026

A sample application to install in your Kubernetes cluster that uses a Secret containing a connection string to your Mongo Database.

Latest 0.1.0 4 years agodeploys tag 0.1 0Artifact Hub

sample-app 0.1.0 deploys 2 container images: quay.io/mongodb/farm-intro-backend and quay.io/mongodb/farm-intro-frontend. Across them, 422 findings0 critical, 12 high 4 on CISA KEV. The highest contribution is GHSA-phwq-j96m-2c2q in ejs 2.7.4, fixed in 3.1.7. Chart.yaml declares kubeVersion >=1.16-0; rendered for Kubernetes 1.16.0.

Radar Score

6,438012131278

422 findings over 2 of 2 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
quay.io/mongodb/farm-intro-backend0.10226641,368
quay.io/mongodb/farm-intro-frontend0.10101052145,070

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

123 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumPYSEC-2026-2120black@20.8b126.3.0
MediumGHSA-8h2j-cgx8-6xv7fastapi@0.61.10.65.2
MediumGHSA-8v38-pw62-9cw2url-parse@1.4.71.5.7
MediumGHSA-6fc8-4gx4-v693ws@6.2.16.2.2
MediumGHSA-67hx-6x53-jw92@babel/traverse@7.12.57.23.2
MediumDLA-3530-1openssl@1.1.1d-0+deb10u71.1.1n-0+deb10u6
MediumGHSA-hh27-ffr2-f2jcurl-parse@1.4.71.5.2
MediumDLA-3213-1krb5@1.17-3+deb10u31.17-3+deb10u5
MediumDLA-3613-1curl@7.64.0-4+deb10u27.64.0-4+deb10u7
MediumGHSA-37ch-88jc-xwx2path-to-regexp@0.1.70.1.13
MediumGHSA-9wv6-86v2-598jpath-to-regexp@0.1.70.1.10
MediumGHSA-r9p9-mrjm-926welliptic@6.5.36.5.4
MediumGHSA-3rq5-2g8h-59hcdnspython@2.0.02.6.1
MediumGHSA-cpq7-6gpm-g9rccipher-base@1.0.41.0.5
MediumGHSA-566m-qj78-rww5postcss@7.0.217.0.36
MediumDLA-3175-1python3.7@3.7.3-2+deb10u33.7.3-2+deb10u4
MediumGHSA-3xgq-45jj-v275cross-spawn@6.0.56.0.6
MediumGHSA-w8qv-6jwh-64r5browserslist@4.14.24.16.5
MediumGHSA-qwcr-r2fm-qrc7body-parser@1.19.01.20.3
MediumDLA-3152-1glibc@2.28-102.28-10+deb10u2
MediumGHSA-96hv-2xvq-fx4pws@6.2.16.2.4
MediumGHSA-3ppc-4f35-3m26minimatch@3.0.43.1.3
MediumGHSA-25h7-pfq9-p65fflatted@2.0.23.4.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.0latest4 years ago0.10121312786,438

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/mongodb-helm-charts/sample-app.svg)](https://charts.stackradar.io/charts/mongodb-helm-charts/sample-app)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.