StackRadar

pecan Helm chart

ncsaVerified publisher

Scored 14 Sept 2026

PEcAn is not itself an ecosystem model, and it can be used to with a variety of different ecosystem models; integrating a model involves writing a wrapper to convert inputs and outputs to and from the standards used by PEcAn. Currently, PEcAn supports multiple models.

Latest 0.6.2 4 years agoapp version 1.7.2 0Artifact Hub

pecan 0.6.2 deploys 15 container images: ncsa/checks, pecan/bety, pecan/docs, pecan/executor and 11 more. Across the 7 measured, 869 findings1 critical, 41 high 13 on CISA KEV. The highest contribution is ALPINE-CVE-2022-29155 in openldap 2.6.0-r0, fixed in 2.6.2-r0.

Radar Score

14,154141279548

869 findings over 7 of 15 images measured

KEV ×13 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

15 images
ImageTagVulnerabilitiesRadar Score
ncsa/checks×151.0.1011244742
pecan/bety5.4.10131122355,366
pecan/docs1.7.2011841940
pecan/executor1.7.2not yet scanned
pecan/model-biocro-0.951.7.2not yet scanned
pecan/model-ed2-2.2.01.7.2not yet scanned
pecan/model-maespa-git1.7.2not yet scanned
pecan/model-sipnet-r1361.7.2not yet scanned
pecan/model-sipnet-git1.7.2not yet scanned
pecan/monitor1.7.203581282,835
pecan/web1.7.20425821,696
bitnami/postgresql11.8.0-debian-10-r4unmeasured
bitnami/rabbitmq3.8.5-debian-10-r3unmeasured
pecan/data1.7.201035121,451
pecan/dblatest191961,124

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

366 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowDLA-4497-1imagemagick@8:6.9.11.60+dfsg-1.38:6.9.11.60+dfsg-1.3+deb11u10
LowGHSA-qv7j-4883-hwh7rack@2.2.32.2.23
LowDLA-4492-1gnutls28@3.7.1-53.7.1-5+deb11u9
LowGHSA-6f62-3596-g6w7webrick@1.4.41.8.2
LowGHSA-gx8x-g87m-h5q6nokogiri@1.12.51.13.4
LowGHSA-v6gp-9mmm-c6p5nokogiri@1.12.51.13.4
LowDEBIAN-CVE-2022-38791mariadb-10.5@1:10.5.11-11:10.5.18-0+deb11u1
LowDSA-5055-1util-linux@2.36.1-82.36.1-8+deb11u1
LowDLA-3602-1libx11@2:1.6.7-12:1.6.7-1+deb10u4
LowDSA-5517-1libx11@2:1.7.2-12:1.7.2-1+deb11u2
LowDLA-4429-1imagemagick@8:6.9.11.60+dfsg-1.38:6.9.11.60+dfsg-1.3+deb11u8
LowGHSA-g4mx-q9vg-27p4urllib3@1.24.31.26.18
LowDLA-4146-1libxml2@2.9.10+dfsg-6.72.9.10+dfsg-6.7+deb11u7
LowDLA-4176-1openssl@1.1.1k-1+deb11u11.1.1w-0+deb11u3
LowDLA-4448-1imagemagick@8:6.9.11.60+dfsg-1.38:6.9.11.60+dfsg-1.3+deb11u9
LowDLA-3930-1libsepol@3.1-13.1-1+deb11u1
LowGHSA-vgpv-f759-9wx3rack@2.2.32.2.23
LowDEBIAN-CVE-2022-31623mariadb-10.5@1:10.5.11-11:10.5.15-0+deb11u1
LowDEBIAN-CVE-2022-31622mariadb-10.5@1:10.5.11-11:10.5.15-0+deb11u1
LowGHSA-wx95-c6cv-8532nokogiri@1.12.51.19.1
LowDEBIAN-CVE-2022-31621mariadb-10.5@1:10.5.11-11:10.5.15-0+deb11u1
LowDLA-3110-1glib2.0@2.58.3-2+deb10u22.58.3-2+deb10u4
LowGHSA-7mqq-6cf9-v2qprack@2.2.32.2.23
LowDLA-4181-1glibc@2.31-13+deb11u22.31-13+deb11u13
LowDLA-4139-1imagemagick@8:6.9.11.60+dfsg-1.38:6.9.11.60+dfsg-1.3+deb11u5
LowGHSA-whrj-4476-wvmprack@2.2.32.2.22
LowDEBIAN-CVE-2022-31624mariadb-10.5@1:10.5.11-11:10.5.15-0+deb11u1
LowDLA-4065-1krb5@1.18.3-6+deb11u11.18.3-6+deb11u6
LowDLA-4094-1mercurial@5.6.1-45.6.1-4+deb11u1
LowALPINE-CVE-2022-41862postgresql14@14.1-r514.7-r0
LowALPINE-CVE-2022-41862postgresql@13.4-r013.10-r0
LowPYSEC-2026-2275requests@2.21.02.33.0
LowDSA-5395-1nodejs@12.22.5~dfsg-2~11u112.22.12~dfsg-1~deb11u4
LowDLA-4128-1glib2.0@2.66.8-12.66.8-1+deb11u6
LowDLA-4306-1pam@1.4.0-9+deb11u11.4.0-9+deb11u2
LowDLA-4154-1mariadb-10.5@1:10.5.11-11:10.5.28-0+deb11u2
LowGHSA-q4qf-9j86-f5mhrack@2.2.32.2.23
LowDLA-3297-1tiff@4.1.0+git191117-2~deb10u14.1.0+git191117-2~deb10u6
LowDSA-4850-1libzstd@1.3.8+dfsg-31.3.8+dfsg-3+deb10u1
LowGHSA-xxx9-3xcr-gjj3nokogiri@1.12.51.13.4
LowDLA-3333-1tiff@4.1.0+git191117-2~deb10u14.1.0+git191117-2~deb10u7
LowDLA-4130-1shadow@1:4.8.1-11:4.8.1-1+deb11u1
LowDSA-5361-1tiff@4.2.0-14.2.0-1+deb11u4
LowDLA-4217-1icu@67.1-767.1-7+deb11u1
LowDLA-3891-1mariadb-10.5@1:10.5.11-11:10.5.26-0+deb11u2
LowDLA-3474-1systemd@241-7~deb10u8241-7~deb10u10
LowDLA-4396-1libpng1.6@1.6.37-31.6.37-3+deb11u1
LowDLA-4491-1glib2.0@2.66.8-12.66.8-1+deb11u8
LowGHSA-wv3x-4vxv-whppconcurrent-ruby@1.1.91.3.7
LowDLA-4152-1nodejs@12.22.5~dfsg-2~11u112.22.12~dfsg-1~deb11u7

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.6.2latest4 years ago1.7.214127954814,154

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/ncsa/pecan.svg)](https://charts.stackradar.io/charts/ncsa/pecan)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.