pecan Helm chart

Name: pecan Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

ncsa

Scored 14 Sept 2026

PEcAn is not itself an ecosystem model, and it can be used to with a variety of different ecosystem models; integrating a model involves writing a wrapper to convert inputs and outputs to and from the standards used by PEcAn. Currently, PEcAn supports multiple models.

Latest 0.6.2 4 years agoapp version 1.7.2 0Artifact Hub

pecan 0.6.2 deploys 15 container images: ncsa/checks, pecan/bety, pecan/docs, pecan/executor and 11 more. Across the 7 measured, 869 findings — 1 critical, 41 high — 13 on CISA KEV. The highest contribution is ALPINE-CVE-2022-29155 in openldap 2.6.0-r0, fixed in 2.6.2-r0.

Radar Score

14,154141279548

869 findings over 7 of 15 images measured

KEV ×13 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

15 images

Image	Tag	Vulnerabilities	Radar Score
ncsa/checks×15	1.0.1	011244	742
pecan/bety	5.4.1	013112235	5,366
pecan/docs	1.7.2	011841	940
pecan/executor	1.7.2	—	not yet scanned
pecan/model-biocro-0.95	1.7.2	—	not yet scanned
pecan/model-ed2-2.2.0	1.7.2	—	not yet scanned
pecan/model-maespa-git	1.7.2	—	not yet scanned
pecan/model-sipnet-r136	1.7.2	—	not yet scanned
pecan/model-sipnet-git	1.7.2	—	not yet scanned
pecan/monitor	1.7.2	0358128	2,835
pecan/web	1.7.2	042582	1,696
bitnami/postgresql	11.8.0-debian-10-r4	—	unmeasured
bitnami/rabbitmq	3.8.5-debian-10-r3	—	unmeasured
pecan/data	1.7.2	0103512	1,451
pecan/db	latest	19196	1,124

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

606 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	ALPINE-CVE-2022-29155	openldap@2.6.0-r0	2.6.2-r0
High	ALPINE-CVE-2022-0778	libretls@3.3.3p1-r2	3.3.3p1-r3
High	ALPINE-CVE-2022-0778	openssl@1.1.1l-r0	1.1.1n-r0
High	ALPINE-CVE-2023-0286	openssl@1.1.1l-r0	1.1.1t-r0
High	GHSA-xr9x-r78c-5hrm	activestorage@5.2.4.6	7.2.3.2
High	ALPINE-CVE-2018-25032	zlib@1.2.11-r3	1.2.12-r0
High	GHSA-jc36-42cf-vqwj	nokogiri@1.12.5	1.13.4
High	ALPINE-CVE-2023-2650	openssl@1.1.1l-r7	1.1.1u-r0
High	ALPINE-CVE-2022-37434	zlib@1.2.11-r3	1.2.12-r2
High	GHSA-59gp-qqm7-cw4j	nokogiri@1.12.5	1.13.2
High	GHSA-gpqq-952q-5327	jquery-ui-rails@6.0.1	7.0.0
High	ALPINE-CVE-2022-1552	postgresql@13.4-r0	13.7-r0
High	ALPINE-CVE-2022-1552	postgresql14@14.1-r5	14.3-r0
High	DEBIAN-CVE-2022-1552	postgresql-13@13.4-0+deb11u1	13.7-0+deb11u1
High	GHSA-9gj3-hwp5-pmwc	jquery-ui-rails@6.0.1	7.0.0
High	ALPINE-CVE-2022-40303	libxml2@2.9.12-r2	2.9.14-r2
High	ALPINE-CVE-2022-32206	curl@7.79.1-r0	7.79.1-r2
High	ALPINE-CVE-2022-4450	openssl@1.1.1l-r0	1.1.1t-r0
High	GHSA-jvgm-pfqv-887x	bundler@1.17.2	2.0.0
High	ALPINE-CVE-2022-43551	curl@7.79.1-r0	7.79.1-r4
High	ALPINE-CVE-2022-32207	curl@7.79.1-r0	7.79.1-r2
High	GHSA-pg8v-g4xq-hww9	rails-html-sanitizer@1.4.2	1.4.3
High	DLA-3570-1KEV	libwebp@0.6.1-2	0.6.1-2+deb10u3
High	DLA-3621-1KEV	nghttp2@1.36.0-2+deb10u1	1.36.0-2+deb10u2
High	DLA-4104-1KEV	freetype@2.10.4+dfsg-1	2.10.4+dfsg-1+deb11u2
High	DLA-4323-1KEV	git@1:2.30.2-1	1:2.30.2-1+deb11u5
High	DSA-4777-1KEV	freetype@2.9.1-3+deb10u1	2.9.1-3+deb10u2
High	DSA-5514-1KEV	glibc@2.31-13+deb11u2	2.31-13+deb11u7
High	DSA-5570-1KEV	nghttp2@1.43.0-1	1.43.0-1+deb11u1
High	DSA-5729-1KEV	apache2@2.4.51-1~deb11u1	2.4.61-1~deb11u1
Medium	DLA-3736-1	unbound@1.9.0-2+deb10u2	1.9.0-2+deb10u4
Medium	DLA-3859-1	systemd@247.3-6	247.3-7+deb11u6
Medium	DSA-5035-1	apache2@2.4.51-1~deb11u1	2.4.52-1~deb11u2
Medium	DSA-5169-1	openssl@1.1.1d-0+deb10u7	1.1.1n-0+deb10u3
Medium	DLA-3694-1	openssh@1:7.9p1-10+deb10u2	1:7.9p1-10+deb10u4
Medium	DSA-5586-1	openssh@1:8.4p1-5	1:8.4p1-5+deb11u3
Medium	DSA-5662-1	apache2@2.4.51-1~deb11u1	2.4.59-1~deb11u1
Medium	DLA-4052-1	postgresql-13@13.4-0+deb11u1	13.19-0+deb11u1
Medium	DLA-3357-1	imagemagick@8:6.9.10.23+dfsg-2.1+deb10u1	8:6.9.10.23+dfsg-2.1+deb10u2
Medium	DSA-5347-1	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u1
Medium	DLA-3145-1	git@1:2.20.1-2+deb10u3	1:2.20.1-2+deb10u4
Medium	DLA-3807-1	glibc@2.28-10	2.28-10+deb10u3
Medium	DSA-4963-1	openssl@1.1.1d-0+deb10u3	1.1.1d-0+deb10u7
Medium	DLA-3886-1	nodejs@12.22.5~dfsg-2~11u1	12.22.12~dfsg-1~deb11u5
Medium	DLA-3804-1	nghttp2@1.36.0-2+deb10u1	1.36.0-2+deb10u3
Medium	DSA-5376-1	apache2@2.4.51-1~deb11u1	2.4.56-1~deb11u1
Medium	DSA-4845-1	openldap@2.4.47+dfsg-3+deb10u2	2.4.47+dfsg-3+deb10u5
Medium	DSA-5139-1	openssl@1.1.1d-0+deb10u7	1.1.1n-0+deb10u2
Medium	DSA-5326-1	nodejs@12.22.5~dfsg-2~11u1	12.22.12~dfsg-1~deb11u3
Medium	GHSA-22f2-v57c-j9cx	rack@2.2.3	2.2.8.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.6.2latest	4 years ago	1.7.2	141279548	14,154

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/ncsa/pecan.svg)](https://charts.stackradar.io/charts/ncsa/pecan)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.