crowd Helm chart
moxVerified publisherScored 14 Sept 2026
Centralized identity management
Latest 2.4.3 2 years agoapp version 5.2.2 0Artifact Hub
crowd 2.4.3 deploys 3 container images: library/postgres, atlassian/crowd and bitnami/postgresql. Across the 2 measured, 278 findings — 7 critical, 26 high. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.7.0, fixed in 3.2.2.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
3 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| library/ | 9.6.11-alpine | 02135 | 493 |
| atlassian/ | 5.2.2 | 72481146 | 5,170 |
| bitnami/ | 11 | — | unmeasured |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
278 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-xx7v-hqxh-cjr9 | struts2-core | no fix listed |
| Medium | GHSA-2wrp-6fg6-hmc5 | spring-web | 5.3.34 |
| Medium | GHSA-j288-q9x7-2f5v | commons-lang3 | 3.18.0 |
| Medium | GHSA-j288-q9x7-2f5v | commons-lang | no fix listed |
| Medium | GHSA-v682-8vv8-vpwr | tomcat-websocket | 9.0.86 |
| Medium | GHSA-m2cm-222f-qw44 | mchange-commons-java | 0.4.0 |
| Medium | UBUNTU-CVE-2026-42009 | gnutls28 | 3.8.3-1.1ubuntu3.6+Fips1.2 |
| Medium | UBUNTU-CVE-2025-59375 | expat | no fix listed |
| Medium | UBUNTU-CVE-2026-33846 | gnutls28 | 3.8.3-1.1ubuntu3.6+Fips1.2 |
| Medium | GHSA-f3jh-qvm4-mg39 | spring-security-core | 5.7.12 |
| Medium | GHSA-qw69-rqj8-6qw8 | jetty-server | 9.4.51.v20230217 |
| Medium | GHSA-rmj7-2vxq-3g9f | jackson-databind | 2.18.8 |
| Medium | GHSA-2p5w-cvg5-gc5c | hibernate-core | no fix listed |
| Medium | GHSA-j3rv-43j4-c7qm | jackson-databind | 2.18.8 |
| Medium | GHSA-4p6w-m9wc-c9c9 | ant | 1.9.15 |
| Medium | GHSA-h46c-h94j-95f3 | jackson-core | 2.15.0 |
| Medium | ALPINE-CVE-2019-12904 | libgcrypt | 1.8.4-r1 |
| Medium | GHSA-r936-gwx5-v52f | spring-webmvc | no fix listed |
| Medium | GHSA-q5r4-cfpx-h6fh | ant | 1.9.16 |
| Medium | UBUNTU-CVE-2026-5260 | gnutls28 | 3.8.3-1.1ubuntu3.6+Fips1.2 |
| Medium | GHSA-5476-xc4j-rqcv | c3p0 | 0.12.0 |
| Medium | UBUNTU-CVE-2026-42010 | gnutls28 | 3.8.3-1.1ubuntu3.6+Fips1.2 |
| Medium | GHSA-mf92-479x-3373 | spring-security-web | no fix listed |
| Medium | UBUNTU-CVE-2026-11940 | python3.12 | no fix listed |
| Medium | GHSA-264p-99wq-f4j6 | ion-java | no fix listed |
| Medium | GHSA-gvpg-vgmx-xg6w | nimbus-jose-jwt | 9.37.2 |
| Medium | UBUNTU-CVE-2026-33845 | gnutls28 | 3.8.3-1.1ubuntu3.6+Fips1.2 |
| Low | GHSA-rg58-xhh7-mqjw | struts2-core | 6.8.0 |
| Low | GHSA-3pxv-7cmr-fjr4 | log4j-core | 2.25.4 |
| Low | UBUNTU-CVE-2026-82209 | curl | no fix listed |
| Low | UBUNTU-CVE-2024-10524 | wget | no fix listed |
| Low | GHSA-7v6m-28jr-rg84 | hibernate-validator | 6.2.0.CR1 |
| Low | UBUNTU-CVE-2026-7210 | python3.12 | no fix listed |
| Low | UBUNTU-CVE-2026-15308 | python3.12 | 3.12.3-1ubuntu0.17 |
| Low | UBUNTU-CVE-2026-13608 | curl | no fix listed |
| Low | GHSA-3wrr-7qpf-2prh | jackson-databind | 2.14.0 |
| Low | UBUNTU-CVE-2021-31879 | wget | no fix listed |
| Low | GHSA-q2x7-8rv6-6q7h | jinja2 | 3.1.5 |
| Low | UBUNTU-CVE-2026-66046 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-11972 | python3.12 | no fix listed |
| Low | UBUNTU-CVE-2026-80230 | curl | no fix listed |
| Low | GHSA-mg83-c7gq-rv5c | spring-security-crypto | 5.8.18 |
| Low | UBUNTU-CVE-2026-42013 | gnutls28 | 3.8.3-1.1ubuntu3.6+Fips1.2 |
| Low | UBUNTU-CVE-2024-2236 | libgcrypt20 | no fix listed |
| Low | GHSA-563x-q5rq-57qp | tomcat-coyote | 9.0.116 |
| Low | GHSA-gmj6-6f8f-6699 | jinja2 | 3.1.5 |
| Low | UBUNTU-CVE-2026-86145 | pcre2 | no fix listed |
| Low | GHSA-qv9r-c865-cp47 | log4j-api | 2.25.5 |
| Low | GHSA-jmp9-x22r-554x | spring-core | no fix listed |
| Low | ALPINE-CVE-2019-1563 | openssl | 1.1.1d-r0 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/mox/crowd)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.