crowd 2.4.3 Helm chart

Name: crowd Helm chart 2.4.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

mox

Scored 14 Sept 2026

Centralized identity management

Version 2.4.3 2 years agoapp version 5.2.2 0Artifact Hub

crowd 2.4.3 deploys 3 container images: library/postgres, atlassian/crowd and bitnami/postgresql. Across the 2 measured, 278 findings — 7 critical, 26 high. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.7.0, fixed in 3.2.2.

Radar Score

5,66372694151

278 findings over 2 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres	9.6.11-alpine	02135	493
atlassian/crowd	5.2.2	72481146	5,170
bitnami/postgresql	11	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

151 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-hr8g-6v94-x4m9	bcprov-jdk15on@1.70	no fix listed
Low	GHSA-775g-4xr8-78h8	spring-expression@5.3.30	no fix listed
Low	ALPINE-CVE-2020-28928	musl@1.1.20-r3	1.1.20-r6
Low	UBUNTU-CVE-2026-42015	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	GHSA-w3c8-7r8f-9jp8	spring-webmvc@5.3.30	5.3.42
Low	GHSA-x83m-pf6f-pf9g	hibernate-validator@6.0.23.Final	6.2.0.Final
Low	GHSA-6hg6-v5c8-fphq	log4j-core@2.17.2	2.25.4
Low	UBUNTU-CVE-2026-19672	python3.12@3.12.3-1ubuntu0.16	no fix listed
Low	GHSA-4gc7-5j7h-4qph	spring-web@5.3.30	no fix listed
Low	GHSA-4gc7-5j7h-4qph	spring-context@5.3.30	no fix listed
Low	UBUNTU-CVE-2026-15806	python3.12@3.12.3-1ubuntu0.16	no fix listed
Low	UBUNTU-CVE-2026-76642	util-linux@2.39.3-9ubuntu6.6	no fix listed
Low	UBUNTU-CVE-2025-12781	python3.12@3.12.3-1ubuntu0.16	no fix listed
Low	GHSA-4773-3jfm-qmx3	spring-webmvc@5.3.30	no fix listed
Low	UBUNTU-CVE-2025-15366	python3.12@3.12.3-1ubuntu0.16	no fix listed
Low	GHSA-cpwx-vrp4-4pq7	jinja2@3.1.2	3.1.6
Low	GHSA-72pg-x5f8-j25j	spring-webmvc@5.3.30	no fix listed
Low	GHSA-w6w4-rjh9-9r58	c3p0@0.9.5.4	0.14.0
Low	GHSA-mq64-j8f9-9gcj	spring-webmvc@5.3.30	no fix listed
Low	GHSA-h84g-69h7-mw6v	mchange-commons-java@0.2.15	0.6.0
Low	UBUNTU-CVE-2025-15367	python3.12@3.12.3-1ubuntu0.16	no fix listed
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.13.4	2.18.8
Low	UBUNTU-CVE-2026-84366	python3.12@3.12.3-1ubuntu0.16	no fix listed
Low	UBUNTU-CVE-2026-19487	perl@5.38.2-3.2ubuntu0.4	no fix listed
Low	GHSA-3chg-m5w7-qfv5	spring-webmvc@5.3.30	no fix listed
Low	UBUNTU-CVE-2026-78408	util-linux@2.39.3-9ubuntu6.6	no fix listed
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.13.4.2	2.18.8
Low	UBUNTU-CVE-2026-54369	acl@2.3.2-1build1.1	no fix listed
Low	UBUNTU-CVE-2026-41989	libgcrypt20@1.10.3-2ubuntu0.2	1.12.0-2ubuntu0.1~Fips1~rc11
Low	GHSA-wxpp-56q6-5pcg	spring-expression@5.3.30	no fix listed
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.13.4.2	2.18.9
Low	GHSA-6p4f-wcwh-5vvm	spring-webmvc@5.3.30	no fix listed
Low	UBUNTU-CVE-2026-16599	wget@1.21.4-1ubuntu4.5	no fix listed
Low	GHSA-qh8g-58pp-2wxh	jetty-http@8.1.15.v20140411	12.0.12
Low	GHSA-x2r2-rvhq-2mqv	spring-security-web@5.5.8	no fix listed
Low	UBUNTU-CVE-2026-72522	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-56403	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-56404	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-56405	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-56408	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-56406	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-56407	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-56410	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-56411	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-78410	util-linux@2.39.3-9ubuntu6.6	no fix listed
Low	GHSA-9cmq-m9j5-mvww	spring-expression@5.3.30	5.3.39
Low	UBUNTU-CVE-2026-42014	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	UBUNTU-CVE-2026-78409	util-linux@2.39.3-9ubuntu6.6	no fix listed
Low	GHSA-293q-567p-wmwq	spring-security-web@5.5.8	no fix listed
Low	GHSA-q3v6-hm2v-pw99	spring-security-core@5.5.8	5.7.14

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.4.3latest	2 years ago	5.2.2	72694151	5,663

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/mox/crowd.svg)](https://charts.stackradar.io/charts/mox/crowd)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.