clowder2 1.9.7 Helm chart

Name: clowder2 Helm chart 1.9.7: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

ncsa

Scored 15 Sept 2026

Open Source Data Management for Long Tail Data. Clowder is a customizable and scalable data management framework to support any data format and multiple research domains.

Version 1.9.7 9 months agoapp version 2.0.0-beta.4 1Artifact Hub

clowder2 1.9.7 deploys 12 container images: bitnamilegacy/minio, bitnamilegacy/mongodb, clowder/clowder2-backend, clowder/clowder2-frontend and 8 more. Across them, 3,295 findings — 14 critical, 33 high — 12 on CISA KEV. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.7.0, fixed in 3.2.2.

Radar Score

37,44114334772,768

3,295 findings over 12 of 12 images measured

KEV ×12 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
bitnamilegacy/minio	2023.12.23	0226180	2,291
bitnamilegacy/mongodb	5.0.10	1631206	2,886
clowder/clowder2-backend	2.0.0-beta.4	0246242	3,257
clowder/clowder2-frontend	2.0.0-beta.4	012074	1,092
clowder/clowder2-heartbeat	2.0.0-beta.4	0246242	3,257
clowder/clowder2-messages	2.0.0-beta.4	0246242	3,257
bitnamilegacy/os-shell×4	12-debian-12-r16	3663307	4,478
bitnamilegacy/elasticsearch×8	8.12.2	76100533	7,621
bitnamilegacy/postgresql	15.5.0	2025125	1,897
library/busybox	1.28	0000	0
bitnamilegacy/keycloak	20.0.5	1359452	5,466
bitnamilegacy/rabbitmq	3.10.8	0315165	1,939

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

1,208 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	BIT-elasticsearch-2026-78607	elasticsearch@8.12.2-0	8.19.19
Low	GHSA-pvcr-v8j8-j5q3	github.com/lestrrat-go/jwx@v1.2.27	1.2.28
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.60.1	1.82.1
Low	GHSA-38f8-5428-x5cv	netty-codec-http@4.1.86.Final	4.1.133.Final
Low	BIT-mongodb-2024-3374	mongodb@5.0.10-0	5.0.26
Low	GHSA-xq3w-v528-46rv	netty-common@4.1.86.Final	4.1.115.Final
Low	DEBIAN-CVE-2026-3783	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2026-4873	curl@7.88.1-10+deb12u5	no fix listed
Low	DSA-6189-1	libpng1.6@1.6.39-2	1.6.39-2+deb12u4
Low	GHSA-5xm9-x7x4-4j5x	elasticsearch@8.12.2	8.15.1
Low	GHSA-8c42-7qj2-3j46	netty-codec-http@4.1.86.Final	4.1.137.Final
Low	GO-2024-2609	stdlib@go1.20.13	1.21.8
Low	ALPINE-CVE-2026-34743	xz@5.8.1-r0	5.8.3-r0
Low	DEBIAN-CVE-2026-34743	xz-utils@5.4.1-1	5.4.1-1+deb12u1
Low	GO-2024-3107	stdlib@go1.20.13	1.22.7
Low	BIT-java-2023-22045	java@17.0.6-10-4	1.8.0
Low	GHSA-5jfq-x6xp-7rw2	keycloak-services@20.0.5	26.2.2
Low	BIT-java-2023-22041	java@17.0.6-10-4	1.8.0
Low	DEBIAN-CVE-2026-5704	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	GO-2023-1751	stdlib@go1.18.2	1.19.9
Low	GO-2023-1753	stdlib@go1.18.2	1.19.9
Low	BIT-elasticsearch-2026-63136	Elasticsearch@8.12.2-0	8.19.15
Low	BIT-elasticsearch-2026-63136	elasticsearch@8.12.2-0	8.19.15
Low	BIT-elasticsearch-2026-63140	Elasticsearch@8.12.2-0	8.19.19
Low	BIT-elasticsearch-2026-63140	elasticsearch@8.12.2-0	8.19.19
Low	BIT-elasticsearch-2026-63144	Elasticsearch@8.12.2-0	8.19.19
Low	BIT-elasticsearch-2026-63144	elasticsearch@8.12.2-0	8.19.19
Low	BIT-elasticsearch-2026-63263	Elasticsearch@8.12.2-0	8.19.19
Low	BIT-elasticsearch-2026-63263	elasticsearch@8.12.2-0	8.19.19
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.13.4	2.18.8
Low	BIT-java-2024-21068	Java@17.0.10-13-2	1.8.0
Low	BIT-java-2024-21068	java@17.0.6-10-4	1.8.0
Low	GHSA-pq67-6m6q-mj2v	urllib3@1.26.20	2.5.0
Low	GHSA-389x-839f-4rhx	netty-common@4.1.86.Final	4.1.118.Final
Low	DEBIAN-CVE-2026-3184	util-linux@2.38.1-5+deb12u3	no fix listed
Low	GHSA-gvgg-2r3r-53x7	keycloak-services@20.0.5	26.0.10
Low	BIT-elasticsearch-2026-56144	elasticsearch@8.12.2-0	8.19.18
Low	BIT-elasticsearch-2026-56144	Elasticsearch@8.12.2-0	8.19.18
Low	BIT-java-2023-22036	java@17.0.6-10-4	11.0.20
Low	GHSA-cp6g-7hqx-qxhp	go.mongodb.org/mongo-driver@v1.13.1	1.17.7
Low	BIT-java-2024-21138	Java@17.0.10-13-2	1.8.0
Low	BIT-java-2024-21138	java@17.0.6-10-4	1.8.0
Low	DEBIAN-CVE-2026-58055	nghttp2@1.52.0-1+deb12u1	no fix listed
Low	BIT-java-2026-21933	java@17.0.6-10-4	1.8.0
Low	BIT-java-2026-21933	Java@17.0.10-13-2	1.8.0
Low	DEBIAN-CVE-2026-7010	perl@5.36.0-7+deb12u3	no fix listed
Low	GHSA-4mp9-239f-g9hg	netty-codec-http@4.1.86.Final	4.1.136.Final
Low	DEBIAN-CVE-2026-19487	perl@5.36.0-7+deb12u3	no fix listed
Low	ALPINE-CVE-2026-22801	libpng@1.6.47-r0	1.6.54-r0
Low	DEBIAN-CVE-2026-22801	libpng1.6@1.6.39-2	1.6.39-2+deb12u2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.9.7latest	9 months ago	2.0.0-beta.4	14334772,768	37,441

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/ncsa/clowder2.svg)](https://charts.stackradar.io/charts/ncsa/clowder2)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.