crowd 2.4.3 Helm chart

Name: crowd Helm chart 2.4.3: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

mox

Scored 14 Sept 2026

Centralized identity management

Version 2.4.3 2 years agoapp version 5.2.2 0Artifact Hub

crowd 2.4.3 deploys 3 container images: library/postgres, atlassian/crowd and bitnami/postgresql. Across the 2 measured, 278 findings — 7 critical, 26 high. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.7.0, fixed in 3.2.2.

Radar Score

5,66372694151

278 findings over 2 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
library/postgres	9.6.11-alpine	02135	493
atlassian/crowd	5.2.2	72481146	5,170
bitnami/postgresql	11	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

278 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-19487	perl@5.38.2-3.2ubuntu0.4	no fix listed
Low	GHSA-3chg-m5w7-qfv5	spring-webmvc@5.3.30	no fix listed
Low	UBUNTU-CVE-2026-78408	util-linux@2.39.3-9ubuntu6.6	no fix listed
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.13.4.2	2.18.8
Low	UBUNTU-CVE-2026-54369	acl@2.3.2-1build1.1	no fix listed
Low	UBUNTU-CVE-2026-41989	libgcrypt20@1.10.3-2ubuntu0.2	1.12.0-2ubuntu0.1~Fips1~rc11
Low	GHSA-wxpp-56q6-5pcg	spring-expression@5.3.30	no fix listed
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.13.4.2	2.18.9
Low	GHSA-6p4f-wcwh-5vvm	spring-webmvc@5.3.30	no fix listed
Low	UBUNTU-CVE-2026-16599	wget@1.21.4-1ubuntu4.5	no fix listed
Low	GHSA-qh8g-58pp-2wxh	jetty-http@8.1.15.v20140411	12.0.12
Low	GHSA-x2r2-rvhq-2mqv	spring-security-web@5.5.8	no fix listed
Low	UBUNTU-CVE-2026-72522	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-56403	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-56404	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-56405	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-56408	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-56406	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-56407	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-56410	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-56411	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-78410	util-linux@2.39.3-9ubuntu6.6	no fix listed
Low	GHSA-9cmq-m9j5-mvww	spring-expression@5.3.30	5.3.39
Low	UBUNTU-CVE-2026-42014	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	UBUNTU-CVE-2026-78409	util-linux@2.39.3-9ubuntu6.6	no fix listed
Low	GHSA-293q-567p-wmwq	spring-security-web@5.5.8	no fix listed
Low	GHSA-q3v6-hm2v-pw99	spring-security-core@5.5.8	5.7.14
Low	GHSA-m6cp-vxjx-65j6	jetty-server@8.1.15.v20140411	9.4.41
Low	GHSA-7g45-4rm6-3mm3	guava@31.1-jre	32.0.0-android
Low	UBUNTU-CVE-2026-4360	python3.12@3.12.3-1ubuntu0.16	3.12.3-1ubuntu0.17
Low	UBUNTU-CVE-2026-3446	python3.12@3.12.3-1ubuntu0.16	no fix listed
Low	UBUNTU-CVE-2026-3832	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	UBUNTU-CVE-2026-56409	expat@2.6.1-2ubuntu0.4	no fix listed
Low	GHSA-5mg8-w23w-74h3	guava@31.1-jre	32.0.0-android
Low	UBUNTU-CVE-2026-56132	expat@2.6.1-2ubuntu0.4	no fix listed
Low	GHSA-957g-f97v-vppc	spring-webmvc@5.3.30	no fix listed
Low	UBUNTU-CVE-2026-15534	perl@5.38.2-3.2ubuntu0.4	no fix listed
Low	GHSA-cjpg-rgq5-fr37	spring-webmvc@5.3.30	no fix listed
Low	UBUNTU-CVE-2024-10041	pam@1.5.3-5ubuntu5.7	no fix listed
Low	GHSA-wf8f-6423-gfxg	jackson-core@2.3.3	2.13.0
Low	GHSA-cj7v-27pg-wf7q	jetty-http@8.1.15.v20140411	9.4.47
Low	UBUNTU-CVE-2026-54370	acl@2.3.2-1build1.1	no fix listed
Low	UBUNTU-CVE-2026-56412	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-56131	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-50219	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-0864	python3.12@3.12.3-1ubuntu0.16	no fix listed
Low	UBUNTU-CVE-2024-56433	shadow@1:4.13+dfsg1-4ubuntu3.2	no fix listed
Low	GHSA-pmhh-3w7g-xqp8	jsoup@1.16.2	1.23.1
Low	UBUNTU-CVE-2026-5419	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	GHSA-p26g-97m4-6q7c	jetty-server@8.1.15.v20140411	9.4.51.v20230217

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.4.3latest	2 years ago	5.2.2	72694151	5,663

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/mox/crowd.svg)](https://charts.stackradar.io/charts/mox/crowd)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.