clowder2 1.9.7 Helm chart

Name: clowder2 Helm chart 1.9.7: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

ncsa

Scored 14 Sept 2026

Open Source Data Management for Long Tail Data. Clowder is a customizable and scalable data management framework to support any data format and multiple research domains.

Version 1.9.7 9 months agoapp version 2.0.0-beta.4 1Artifact Hub

clowder2 1.9.7 deploys 12 container images: bitnamilegacy/minio, bitnamilegacy/mongodb, clowder/clowder2-backend, clowder/clowder2-frontend and 8 more. Across them, 3,298 findings — 14 critical, 33 high — 12 on CISA KEV. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.7.0, fixed in 3.2.2.

Radar Score

37,37314334692,779

3,298 findings over 12 of 12 images measured

KEV ×12 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

12 images

Image	Tag	Vulnerabilities	Radar Score
bitnamilegacy/minio	2023.12.23	0226180	2,291
bitnamilegacy/mongodb	5.0.10	1631206	2,886
clowder/clowder2-backend	2.0.0-beta.4	0246243	3,250
clowder/clowder2-frontend	2.0.0-beta.4	012074	1,091
clowder/clowder2-heartbeat	2.0.0-beta.4	0246243	3,250
clowder/clowder2-messages	2.0.0-beta.4	0246243	3,250
bitnamilegacy/os-shell×4	12-debian-12-r16	3662308	4,456
bitnamilegacy/elasticsearch×8	8.12.2	7695538	7,598
bitnamilegacy/postgresql	15.5.0	2025125	1,897
library/busybox	1.28	0000	0
bitnamilegacy/keycloak	20.0.5	1357454	5,465
bitnamilegacy/rabbitmq	3.10.8	0315165	1,939

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,463 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2022-0525	stdlib@go1.18.2	1.17.12
Low	BIT-elasticsearch-2024-23444	Elasticsearch@8.12.2-0	7.17.23
Low	BIT-elasticsearch-2024-23444	elasticsearch@8.12.2-0	7.17.23
Low	DEBIAN-CVE-2021-4214	libpng1.6@1.6.39-2	no fix listed
Low	GO-2022-0520	stdlib@go1.18.2	1.17.12
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.1-4	no fix listed
Low	ALPINE-CVE-2025-66199	openssl@3.5.4-r0	3.5.5-r0
Low	GHSA-3pjw-73gf-8qr5	jackson-databind@2.15.0	2.18.8
Low	DEBIAN-CVE-2025-0395	glibc@2.36-9+deb12u4	2.36-9+deb12u10
Low	DEBIAN-CVE-2023-4039	gcc-12@12.2.0-14	12.2.0-14+deb12u1
Low	DSA-5678-1	glibc@2.31-13+deb11u7	2.31-13+deb11u10
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.17.0	0.45.0
Low	DLA-4267-1	gnutls28@3.7.1-5+deb11u3	3.7.1-5+deb11u8
Low	DSA-5962-1	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u5
Low	GHSA-2c2j-9gv5-cj73	starlette@0.26.1	0.47.2
Low	BIT-elasticsearch-2026-72636	elasticsearch@8.12.2-0	8.19.20
Low	BIT-elasticsearch-2026-72636	Elasticsearch@8.12.2-0	8.19.20
Low	DSA-5486-1	json-c@0.15-2	0.15-2+deb11u1
Low	DEBIAN-CVE-2025-4598	systemd@252.22-1~deb12u1	252.38-1~deb12u1
Low	GHSA-m6qj-3mpp-57v8	keycloak-services@20.0.5	26.6.3
Low	BIT-elasticsearch-2026-72638	Elasticsearch@8.12.2-0	8.19.20
Low	BIT-elasticsearch-2026-72638	elasticsearch@8.12.2-0	8.19.20
Low	BIT-elasticsearch-2026-72645	elasticsearch@8.12.2-0	8.19.20
Low	BIT-elasticsearch-2026-72645	Elasticsearch@8.12.2-0	8.19.20
Low	BIT-elasticsearch-2026-72647	elasticsearch@8.12.2-0	8.19.20
Low	BIT-elasticsearch-2026-72647	Elasticsearch@8.12.2-0	8.19.20
Low	BIT-elasticsearch-2026-72656	elasticsearch@8.12.2-0	8.17.10
Low	BIT-elasticsearch-2026-72656	Elasticsearch@8.12.2-0	8.17.10
Low	BIT-elasticsearch-2026-72684	Elasticsearch@8.12.2-0	8.19.21
Low	BIT-elasticsearch-2026-72684	elasticsearch@8.12.2-0	8.19.21
Low	BIT-elasticsearch-2026-72687	Elasticsearch@8.12.2-0	8.19.20
Low	BIT-elasticsearch-2026-72687	elasticsearch@8.12.2-0	8.19.20
Low	GHSA-4q2v-9p7v-3v22	reactor-netty-http@1.0.39	1.2.8
Low	GHSA-f3fp-gc8g-vw66	github.com/opencontainers/runc@v1.1.0	1.1.2
Low	GHSA-xmv7-r254-6q78	netty-resolver-dns@4.1.86.Final	4.1.135.Final
Low	GHSA-2935-2wfm-hhpv	keycloak-services@20.0.5	no fix listed
Low	PYSEC-2026-3721	pip@23.0.1	26.2
Low	GHSA-69f9-5gxw-wvc2	aiohttp@3.11.10	3.13.3
Low	GO-2023-2375	stdlib@go1.18.2	1.20.0
Low	DEBIAN-CVE-2025-15079	curl@7.88.1-10+deb12u5	no fix listed
Low	GHSA-vvgc-356p-c3xw	golang.org/x/net@v0.19.0	0.38.0
Low	GO-2023-1569	stdlib@go1.18.2	1.19.6
Low	DLA-4309-1	libxslt@1.1.34-4+deb11u1	1.1.34-4+deb11u3
Low	GHSA-mq26-g339-26xf	pip@23.0.1	23.3
Low	GHSA-8c25-4j27-2rv3	mistune@3.0.2	3.3.0
Low	BIT-java-2026-60147	java@17.0.6-10-4	1.8.0
Low	BIT-java-2026-60147	Java@17.0.10-13-2	1.8.0
Low	GHSA-8mpj-m6qm-5qr8	mistune@3.0.2	3.3.0
Low	GHSA-cpwx-vrp4-4pq7	jinja2@3.1.4	3.1.6
Low	GHSA-9548-qrrj-x5pj	aiohttp@3.11.10	3.12.14

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.9.7latest	9 months ago	2.0.0-beta.4	14334692,779	37,373

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/ncsa/clowder2.svg)](https://charts.stackradar.io/charts/ncsa/clowder2)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.