StackRadar

nacos 1.0.3 Helm chart

nacos-yunyeVerified publisher

Scored 14 Sept 2026

A Helm chart for Kubernetes

Version 1.0.3 1 year agoapp version 3.0.1 0Artifact Hub

nacos 1.0.3 deploys 1 container image: nacos/nacos-server. Across them, 131 findings — 1 critical, 4 high. The highest contribution is GHSA-3p2h-wqq4-wf4h in tomcat-embed-core 10.1.39, fixed in 10.1.40.

Radar Score

1,783143789

131 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
nacos/nacos-serverv3.0.11437891,783

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

131 distinct across the version’s images
SeverityAdvisoryPackageFixed in
CriticalGHSA-3p2h-wqq4-wf4htomcat-embed-core@10.1.3910.1.40
HighALPINE-CVE-2025-15467openssl@3.3.3-r03.3.6-r0
HighGHSA-wmwf-9ccg-fff5tomcat-embed-core@10.1.3910.1.45
HighGHSA-h3gc-qfqq-6h8ftomcat-embed-core@10.1.3910.1.42
HighGHSA-vfww-5hm6-hx2jtomcat-embed-core@10.1.3910.1.45
MediumGHSA-gqp3-2cvr-x8m3tomcat-embed-core@10.1.3910.1.44
MediumGHSA-r29c-68gh-xp6xtomcat-embed-core@10.1.3910.1.55
MediumGHSA-ff77-26x5-69crtomcat-embed-core@10.1.3910.1.40
MediumGHSA-h6fc-48rj-7qqhtomcat-embed-core@10.1.3910.1.55
MediumGHSA-wc4r-xq3c-5cf3tomcat-embed-core@10.1.3910.1.42
MediumGHSA-wr62-c79q-cv37tomcat-embed-core@10.1.3910.1.43
MediumGHSA-5m62-pw8w-7w9ftomcat-embed-core@10.1.3910.1.55
MediumGHSA-25xr-qj8w-c4vftomcat-embed-core@10.1.3910.1.43
MediumGHSA-h2fw-rfh5-95r3tomcat-embed-core@10.1.3910.1.41
MediumGHSA-9xv2-5v5q-p794tomcat-embed-core@10.1.3910.1.58
MediumALPINE-CVE-2025-9230openssl@3.3.3-r03.3.5-r0
MediumGHSA-c459-2m73-67hjhessian@3.3.63.5.5
MediumGHSA-j288-q9x7-2f5vcommons-lang3@3.17.03.18.0
MediumGHSA-j288-q9x7-2f5vcommons-lang@2.6no fix listed
MediumALPINE-CVE-2025-9231openssl@3.3.3-r03.3.5-r0
MediumALPINE-CVE-2026-25646libpng@1.6.47-r01.6.55-r0
MediumALPINE-CVE-2026-2100p11-kit@0.25.5-r20.26.2-r0
MediumALPINE-CVE-2025-13151libtasn1@4.20.0-r04.21.0-r0
MediumGHSA-h3x4-894j-xpx5tomcat-embed-core@10.1.3910.1.58
MediumGHSA-rmj7-2vxq-3g9fjackson-databind@2.18.32.18.8
MediumGHSA-9pp5-9c7g-4r83spring-security-core@6.4.46.4.6
MediumGHSA-j3rv-43j4-c7qmjackson-databind@2.18.32.18.8
MediumGHSA-gcx9-497g-6cp6tomcat-embed-core@10.1.3910.1.58
MediumALPINE-CVE-2026-33416libpng@1.6.47-r01.6.56-r0
MediumALPINE-CVE-2026-31790openssl@3.3.3-r03.3.7-r0
MediumGHSA-r936-gwx5-v52fspring-webmvc@6.2.56.2.10
MediumALPINE-CVE-2025-9232openssl@3.3.3-r03.3.5-r0
MediumGHSA-73m2-qfq3-56cxhttpclient5@5.4.25.4.3
MediumALPINE-CVE-2026-28388openssl@3.3.3-r03.3.7-r0
MediumALPINE-CVE-2025-69421openssl@3.3.3-r03.3.6-r0
MediumGHSA-hf6x-8p5f-cgmfhttpcore5@5.3.35.4.3
MediumGHSA-v3jc-474w-2wm6httpcore5-h2@5.3.35.4.3
MediumGHSA-mf92-479x-3373spring-security-web@6.4.4no fix listed
MediumALPINE-CVE-2026-28387openssl@3.3.3-r03.3.7-r0
MediumGHSA-gx5v-xp9w-j4cgtomcat-embed-core@10.1.3910.1.55
MediumALPINE-CVE-2026-28389openssl@3.3.3-r03.3.7-r0
MediumALPINE-CVE-2026-28390openssl@3.3.3-r03.3.7-r0
LowALPINE-CVE-2025-69420openssl@3.3.3-r03.3.6-r0
LowGHSA-g3pr-3p32-fp23micrometer-core@1.12.8no fix listed
LowALPINE-CVE-2026-27135nghttp2@1.64.0-r01.68.1
LowALPINE-CVE-2026-33636libpng@1.6.47-r01.6.56-r0
LowGHSA-574f-3g2m-x479bcprov-jdk18on@1.791.80.2
LowGHSA-fv25-8xcx-gqjctomcat-embed-core@10.1.3910.1.55
LowALPINE-CVE-2026-31789openssl@3.3.3-r03.3.7-r0
LowALPINE-CVE-2025-69419openssl@3.3.3-r03.3.6-r0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.3latest1 year ago3.0.11437891,783

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/nacos-yunye/nacos.svg)](https://charts.stackradar.io/charts/nacos-yunye/nacos)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.