StackRadar

crowd Helm chart

moxVerified publisher

Scored 14 Sept 2026

Centralized identity management

Latest 2.4.3 2 years agoapp version 5.2.2 0Artifact Hub

crowd 2.4.3 deploys 3 container images: library/postgres, atlassian/crowd and bitnami/postgresql. Across the 2 measured, 278 findings7 critical, 26 high. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.7.0, fixed in 3.2.2.

Radar Score

5,66372694151

278 findings over 2 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
library/postgres9.6.11-alpine02135493
atlassian/crowd5.2.2724811465,170
bitnami/postgresql11unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

278 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowUBUNTU-CVE-2026-18374glibc@2.39-0ubuntu8.8no fix listed
LowUBUNTU-CVE-2026-19499glibc@2.39-0ubuntu8.82.39-0ubuntu8.9
LowUBUNTU-CVE-2026-19542glibc@2.39-0ubuntu8.82.39-0ubuntu8.9
LowUBUNTU-CVE-2026-77117glibc@2.39-0ubuntu8.82.39-0ubuntu8.9
LowUBUNTU-CVE-2026-80489glibc@2.39-0ubuntu8.82.39-0ubuntu8.9
LowGHSA-659m-px2c-25wjspring-core@5.3.30no fix listed
LowUBUNTU-CVE-2026-32777expat@2.6.1-2ubuntu0.4no fix listed
LowUBUNTU-CVE-2026-39113sqlite3@3.45.1-1ubuntu2.7no fix listed
LowUBUNTU-CVE-2026-76957expat@2.6.1-2ubuntu0.4no fix listed
LowGHSA-4wp7-92pw-q264spring-context@5.3.30no fix listed
LowUBUNTU-CVE-2026-18508tar@1.35+dfsg-3ubuntu0.4no fix listed
LowUBUNTU-CVE-2026-41990libgcrypt20@1.10.3-2ubuntu0.21.12.0-2ubuntu0.1~Fips1~rc11
LowUBUNTU-CVE-2026-45186expat@2.6.1-2ubuntu0.4no fix listed
LowGHSA-h3qp-gqrc-q736spring-webmvc@5.3.30no fix listed
LowUBUNTU-CVE-2022-3219gnupg2@2.4.4-2ubuntu17.6no fix listed
LowUBUNTU-CVE-2026-32776expat@2.6.1-2ubuntu0.4no fix listed
LowUBUNTU-CVE-2026-41080expat@2.6.1-2ubuntu0.4no fix listed
LowGHSA-9f52-rjqv-25qvspring-expression@5.3.30no fix listed
LowGHSA-wg35-8jpf-2xv3spring-webmvc@5.3.30no fix listed
LowUBUNTU-CVE-2026-18477tar@1.35+dfsg-3ubuntu0.4no fix listed
LowUBUNTU-CVE-2025-66382expat@2.6.1-2ubuntu0.4no fix listed
LowUBUNTU-CVE-2026-40228systemd@255.4-1ubuntu8.17no fix listed
LowUBUNTU-CVE-2026-32778expat@2.6.1-2ubuntu0.4no fix listed
LowUBUNTU-CVE-2026-15310python3.12@3.12.3-1ubuntu0.16no fix listed
LowUBUNTU-CVE-2026-6879python3.12@3.12.3-1ubuntu0.16no fix listed
LowGHSA-6hcq-hmm3-jj3cspring-webmvc@5.3.30no fix listed
LowUBUNTU-CVE-2026-18503python3.12@3.12.3-1ubuntu0.16no fix listed
LowUBUNTU-CVE-2026-6368glibc@2.39-0ubuntu8.82.39-0ubuntu8.9

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
2.4.3latest2 years ago5.2.2726941515,663

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/mox/crowd.svg)](https://charts.stackradar.io/charts/mox/crowd)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.