clowder2 1.9.7 Helm chart

Name: clowder2 Helm chart 1.9.7: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

ncsa

Scored 15 Sept 2026

Open Source Data Management for Long Tail Data. Clowder is a customizable and scalable data management framework to support any data format and multiple research domains.

Version 1.9.7 9 months agoapp version 2.0.0-beta.4 1Artifact Hub

clowder2 1.9.7 deploys 12 container images: bitnamilegacy/minio, bitnamilegacy/mongodb, clowder/clowder2-backend, clowder/clowder2-frontend and 8 more. Across them, 3,295 findings — 14 critical, 33 high — 12 on CISA KEV. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.7.0, fixed in 3.2.2.

Radar Score

37,44114334772,768

3,295 findings over 12 of 12 images measured

KEV ×12 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
bitnamilegacy/minio	2023.12.23	0226180	2,291
bitnamilegacy/mongodb	5.0.10	1631206	2,886
clowder/clowder2-backend	2.0.0-beta.4	0246242	3,257
clowder/clowder2-frontend	2.0.0-beta.4	012074	1,092
clowder/clowder2-heartbeat	2.0.0-beta.4	0246242	3,257
clowder/clowder2-messages	2.0.0-beta.4	0246242	3,257
bitnamilegacy/os-shell×4	12-debian-12-r16	3663307	4,478
bitnamilegacy/elasticsearch×8	8.12.2	76100533	7,621
bitnamilegacy/postgresql	15.5.0	2025125	1,897
library/busybox	1.28	0000	0
bitnamilegacy/keycloak	20.0.5	1359452	5,466
bitnamilegacy/rabbitmq	3.10.8	0315165	1,939

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

1,208 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2023-1621	stdlib@go1.18.2	1.19.7
Low	GHSA-mj87-hwqh-73pj	python-multipart@0.0.6	0.0.26
Low	GO-2026-4981	stdlib@go1.20.13	1.25.10
Low	DEBIAN-CVE-2023-31439	systemd@252.39-1~deb12u1	no fix listed
Low	GO-2025-3563	stdlib@go1.20.13	1.23.8
Low	GHSA-v87v-83h2-53w7	mistune@3.0.2	3.2.1
Low	PYSEC-2026-2206	mistune@3.0.2	3.2.1
Low	PYSEC-2026-2208	mistune@3.0.2	3.2.1
Low	PYSEC-2026-2209	mistune@3.0.2	3.2.1
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.13.4.2	2.18.9
Low	BIT-java-2024-21208	Java@17.0.10-13-2	1.8.0
Low	BIT-java-2024-21208	java@17.0.6-10-4	1.8.0
Low	BIT-postgresql-2024-10978	postgresql@15.5.0-42	12.21.0
Low	BIT-postgresql-2024-10978	PostgreSQL@15.5.0-42	12.21.0
Low	GO-2026-4977	stdlib@go1.20.13	1.25.10
Low	GO-2024-2610	stdlib@go1.20.13	1.21.8
Low	ALPINE-CVE-2026-76957	expat@2.7.3-r0	2.8.4-r0
Low	DEBIAN-CVE-2023-31437	systemd@252.39-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2025-68973	gnupg2@2.2.40-1.1+deb12u1	2.2.40-1.1+deb12u2
Low	GO-2026-4986	stdlib@go1.20.13	1.25.10
Low	GHSA-966j-vmvw-g2g9	aiohttp@3.11.10	3.13.4
Low	GO-2026-4918	golang.org/x/net@v0.19.0	0.53.0
Low	GO-2026-4918	stdlib@go1.20.13	1.25.10
Low	BIT-keycloak-2026-18572	keycloak@20.0.5-6	26.7.3
Low	GO-2026-4337	stdlib@go1.20.13	1.24.13
Low	DEBIAN-CVE-2026-4438	glibc@2.36-9+deb12u13	2.36-9+deb12u14
Low	GHSA-mfg7-5gfp-c4w3	netty-codec-dns@4.1.86.Final	4.1.136.Final
Low	GHSA-w853-jp5j-5j7f	filelock@3.16.1	3.20.1
Low	GHSA-g4gc-rh26-m3p5	keycloak-core@20.0.5	24.0.7
Low	GHSA-fqjh-8322-vgrv	keycloak-services@20.0.5	no fix listed
Low	GHSA-qccp-gfcp-xxvc	urllib3@1.26.20	2.7.0
Low	DEBIAN-CVE-2024-28835	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u3
Low	DEBIAN-CVE-2023-31438	systemd@252.39-1~deb12u1	no fix listed
Low	BIT-rabbitmq-2025-30219	rabbitmq@3.10.8-1	4.0.3
Low	BIT-keycloak-2026-16093	keycloak@20.0.5-6	26.7.3
Low	BIT-keycloak-2026-16108	keycloak@20.0.5-6	26.7.3
Low	DEBIAN-CVE-2026-56109	alsa-lib@1.2.8-1+b1	no fix listed
Low	GHSA-fm6w-rrp3-2x4w	keycloak-services@20.0.5	26.2.13
Low	BIT-keycloak-2026-37978	keycloak@20.0.5-6	26.4.12
Low	GHSA-rrv7-3mqf-hxfr	keycloak-services@20.0.5	26.6.2
Low	GO-2026-4601	stdlib@go1.20.13	1.25.8
Low	DLA-3875-1	gnutls28@3.7.1-5+deb11u3	3.7.1-5+deb11u6
Low	BIT-java-2024-21012	java@17.0.6-10-4	11.0.23
Low	BIT-java-2024-21012	Java@17.0.10-13-2	11.0.23
Low	BIT-java-2025-30754	java@17.0.6-10-4	1.8.0
Low	BIT-java-2025-30754	Java@17.0.10-13-2	1.8.0
Low	ALPINE-CVE-2026-56403	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56404	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56405	expat@2.7.3-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56408	expat@2.7.3-r0	2.8.2-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.9.7latest	9 months ago	2.0.0-beta.4	14334772,768	37,441

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/ncsa/clowder2.svg)](https://charts.stackradar.io/charts/ncsa/clowder2)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.