chirpstack Helm chart

Name: chirpstack Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

mosquitto-helm-chart

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 0.5.0 4 years agodeploys tag 3 0Artifact Hub

chirpstack 0.5.0 deploys 8 container images: library/busybox, chirpstack/chirpstack-application-server, chirpstack/chirpstack-network-server, apachepulsar/pulsar and 4 more. Across them, 1,744 findings — 18 critical, 64 high — 8 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.14.0, fixed in 2.15.0.

Radar Score

25,93318644741,186

1,744 findings over 8 of 8 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

8 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox×7	1.31	0000	0
chirpstack/chirpstack-application-server	3	0942155	2,662
chirpstack/chirpstack-network-server	3	0828133	2,104
apachepulsar/pulsar	2.9.0	1631351737	17,328
oliver006/redis_exporter	v1.14.0	009126	1,288
library/eclipse-mosquitto	1.6.12	17122	785
library/postgres	9.6-alpine	19184	1,087
library/redis	6.0.9	001429	679

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

950 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2025-12781	python3.8@3.8.10-0ubuntu1~20.04.1	no fix listed
Low	GHSA-mq26-g339-26xf	pip@21.3.1	23.3
Low	UBUNTU-CVE-2026-60147	openjdk-lts@11.0.11+9-0ubuntu2~20.04	11.0.32+9-1ubuntu1~20.04
Low	UBUNTU-CVE-2025-15366	python3.8@3.8.10-0ubuntu1~20.04.1	3.8.10-0ubuntu1~20.04.18+esm6
Low	GHSA-cpwx-vrp4-4pq7	jinja2@2.10.1	3.1.6
Low	UBUNTU-CVE-2022-21624	openjdk-lts@11.0.11+9-0ubuntu2~20.04	11.0.17+8-1ubuntu2~20.04
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.33.1	1.83.1
Low	GO-2023-2382	stdlib@go1.15.6	1.20.12
Low	UBUNTU-CVE-2026-6429	curl@7.68.0-1ubuntu2.7	no fix listed
Low	GO-2022-1143	stdlib@go1.15.6	1.18.9
Low	UBUNTU-CVE-2023-43786	libx11@2:1.6.9-2ubuntu1.2	2:1.6.9-2ubuntu1.6
Low	UBUNTU-CVE-2023-43786	libxpm@1:3.5.12-1	1:3.5.12-1ubuntu0.20.04.2
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899	0.52.0
Low	UBUNTU-CVE-2024-22365	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.7
Low	GHSA-c69g-56f8-xwqj	netty-codec-http2@4.1.68.Final	4.1.136.Final
Low	ALPINE-CVE-2026-22796	openssl@3.0.7-r0	3.0.19-r0
Low	UBUNTU-CVE-2026-22796	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm2
Low	UBUNTU-CVE-2021-20197	binutils@2.34-6ubuntu1.3	no fix listed
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899	0.45.0
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899	0.52.0
Low	GO-2024-2599	stdlib@go1.15.6	1.21.8
Low	UBUNTU-CVE-2023-22049	openjdk-lts@11.0.11+9-0ubuntu2~20.04	11.0.20+8-1ubuntu1~20.04
Low	UBUNTU-CVE-2025-1182	binutils@2.34-6ubuntu1.3	2.34-6ubuntu1.11
Low	GO-2022-1038	stdlib@go1.15.6	1.18.7
Low	UBUNTU-CVE-2019-8842	cups@2.3.1-9ubuntu1.1	2.3.1-9ubuntu1.2
Low	UBUNTU-CVE-2022-47010	binutils@2.34-6ubuntu1.3	2.34-6ubuntu1.8
Low	GO-2024-3106	stdlib@go1.15.6	1.22.7
Low	ALPINE-CVE-2023-42364	busybox@1.35.0-r29	1.35.0-r31
Low	UBUNTU-CVE-2026-24401	avahi@0.7-4ubuntu7.1	0.7-4ubuntu7.3+esm2
Low	UBUNTU-CVE-2022-47007	binutils@2.34-6ubuntu1.3	2.34-6ubuntu1.8
Low	ALPINE-CVE-2023-42363	busybox@1.35.0-r29	1.35.0-r31
Low	UBUNTU-CVE-2026-1965	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm3
Low	GO-2023-1570	stdlib@go1.15.6	1.19.6
Low	ALPINE-CVE-2022-0563	util-linux@2.37.2-r1	2.37.4-r0
Low	UBUNTU-CVE-2025-3576	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.11
Low	UBUNTU-CVE-2025-68973	gnupg2@2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.5+esm1
Low	UBUNTU-CVE-2026-11979	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	no fix listed
Low	UBUNTU-CVE-2026-7168	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm5
Low	UBUNTU-CVE-2022-3821	systemd@245.4-4ubuntu3.13	245.4-4ubuntu3.20
Low	UBUNTU-CVE-2026-86140	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	no fix listed
Low	UBUNTU-CVE-2024-21011	openjdk-lts@11.0.11+9-0ubuntu2~20.04	11.0.23+9-1ubuntu1~20.04.2
Low	UBUNTU-CVE-2023-21843	openjdk-lts@11.0.11+9-0ubuntu2~20.04	11.0.18+10-0ubuntu1~20.04.1
Low	GO-2022-0531	stdlib@go1.15.6	1.17.11
Low	GO-2024-2600	stdlib@go1.15.6	1.21.8
Low	UBUNTU-CVE-2025-15367	python3.8@3.8.10-0ubuntu1~20.04.1	3.8.10-0ubuntu1~20.04.18+esm6
Low	ALPINE-CVE-2023-42366	busybox@1.35.0-r29	1.35.0-r30
Low	UBUNTU-CVE-2026-59847	libssh@0.9.3-2ubuntu2.2	no fix listed
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.33.1	1.82.1
Low	GHSA-38f8-5428-x5cv	netty-codec-http@4.1.68.Final	4.1.133.Final
Low	GHSA-xq3w-v528-46rv	netty-common@4.1.51.Final	4.1.115.Final

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.5.0latest	4 years ago	3	18644741,186	25,933

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/mosquitto-helm-chart/chirpstack.svg)](https://charts.stackradar.io/charts/mosquitto-helm-chart/chirpstack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.