StackRadar

pecan Helm chart

ncsaVerified publisher

Scored 14 Sept 2026

PEcAn is not itself an ecosystem model, and it can be used to with a variety of different ecosystem models; integrating a model involves writing a wrapper to convert inputs and outputs to and from the standards used by PEcAn. Currently, PEcAn supports multiple models.

Latest 0.6.2 4 years agoapp version 1.7.2 0Artifact Hub

pecan 0.6.2 deploys 15 container images: ncsa/checks, pecan/bety, pecan/docs, pecan/executor and 11 more. Across the 7 measured, 869 findings1 critical, 41 high 13 on CISA KEV. The highest contribution is ALPINE-CVE-2022-29155 in openldap 2.6.0-r0, fixed in 2.6.2-r0.

Radar Score

14,154141279548

869 findings over 7 of 15 images measured

KEV ×13 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

15 images
ImageTagVulnerabilitiesRadar Score
ncsa/checks×151.0.1011244742
pecan/bety5.4.10131122355,366
pecan/docs1.7.2011841940
pecan/executor1.7.2not yet scanned
pecan/model-biocro-0.951.7.2not yet scanned
pecan/model-ed2-2.2.01.7.2not yet scanned
pecan/model-maespa-git1.7.2not yet scanned
pecan/model-sipnet-r1361.7.2not yet scanned
pecan/model-sipnet-git1.7.2not yet scanned
pecan/monitor1.7.203581282,835
pecan/web1.7.20425821,696
bitnami/postgresql11.8.0-debian-10-r4unmeasured
bitnami/rabbitmq3.8.5-debian-10-r3unmeasured
pecan/data1.7.201035121,451
pecan/dblatest191961,124

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

606 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowDLA-4429-1imagemagick@8:6.9.11.60+dfsg-1.38:6.9.11.60+dfsg-1.3+deb11u8
LowGHSA-g4mx-q9vg-27p4urllib3@1.24.31.26.18
LowDLA-4146-1libxml2@2.9.10+dfsg-6.72.9.10+dfsg-6.7+deb11u7
LowDLA-4176-1openssl@1.1.1k-1+deb11u11.1.1w-0+deb11u3
LowDLA-4448-1imagemagick@8:6.9.11.60+dfsg-1.38:6.9.11.60+dfsg-1.3+deb11u9
LowDLA-3930-1libsepol@3.1-13.1-1+deb11u1
LowGHSA-vgpv-f759-9wx3rack@2.2.32.2.23
LowDEBIAN-CVE-2022-31623mariadb-10.5@1:10.5.11-11:10.5.15-0+deb11u1
LowDEBIAN-CVE-2022-31622mariadb-10.5@1:10.5.11-11:10.5.15-0+deb11u1
LowGHSA-wx95-c6cv-8532nokogiri@1.12.51.19.1
LowDEBIAN-CVE-2022-31621mariadb-10.5@1:10.5.11-11:10.5.15-0+deb11u1
LowDLA-3110-1glib2.0@2.58.3-2+deb10u22.58.3-2+deb10u4
LowGHSA-7mqq-6cf9-v2qprack@2.2.32.2.23
LowDLA-4181-1glibc@2.31-13+deb11u22.31-13+deb11u13
LowDLA-4139-1imagemagick@8:6.9.11.60+dfsg-1.38:6.9.11.60+dfsg-1.3+deb11u5
LowGHSA-whrj-4476-wvmprack@2.2.32.2.22
LowDEBIAN-CVE-2022-31624mariadb-10.5@1:10.5.11-11:10.5.15-0+deb11u1
LowDLA-4065-1krb5@1.18.3-6+deb11u11.18.3-6+deb11u6
LowDLA-4094-1mercurial@5.6.1-45.6.1-4+deb11u1
LowALPINE-CVE-2022-41862postgresql@13.4-r013.10-r0
LowALPINE-CVE-2022-41862postgresql14@14.1-r514.7-r0
LowPYSEC-2026-2275requests@2.21.02.33.0
LowDSA-5395-1nodejs@12.22.5~dfsg-2~11u112.22.12~dfsg-1~deb11u4
LowDLA-4128-1glib2.0@2.66.8-12.66.8-1+deb11u6
LowDLA-4306-1pam@1.4.0-9+deb11u11.4.0-9+deb11u2
LowDLA-4154-1mariadb-10.5@1:10.5.11-11:10.5.28-0+deb11u2
LowGHSA-q4qf-9j86-f5mhrack@2.2.32.2.23
LowDLA-3297-1tiff@4.1.0+git191117-2~deb10u14.1.0+git191117-2~deb10u6
LowDSA-4850-1libzstd@1.3.8+dfsg-31.3.8+dfsg-3+deb10u1
LowGHSA-xxx9-3xcr-gjj3nokogiri@1.12.51.13.4
LowDLA-3333-1tiff@4.1.0+git191117-2~deb10u14.1.0+git191117-2~deb10u7
LowDLA-4130-1shadow@1:4.8.1-11:4.8.1-1+deb11u1
LowDSA-5361-1tiff@4.2.0-14.2.0-1+deb11u4
LowDLA-4217-1icu@67.1-767.1-7+deb11u1
LowDLA-3891-1mariadb-10.5@1:10.5.11-11:10.5.26-0+deb11u2
LowDLA-3474-1systemd@241-7~deb10u8241-7~deb10u10
LowDLA-4396-1libpng1.6@1.6.37-31.6.37-3+deb11u1
LowDLA-4491-1glib2.0@2.66.8-12.66.8-1+deb11u8
LowGHSA-wv3x-4vxv-whppconcurrent-ruby@1.1.91.3.7
LowDLA-4152-1nodejs@12.22.5~dfsg-2~11u112.22.12~dfsg-1~deb11u7
LowDSA-4808-1apt@1.8.2.11.8.2.2
LowDLA-4143-1glibc@2.31-13+deb11u22.31-13+deb11u12
LowDLA-4089-1libxslt@1.1.34-41.1.34-4+deb11u2
LowDSA-4859-1libzstd@1.3.8+dfsg-31.3.8+dfsg-3+deb10u2
LowDLA-4195-1krb5@1.18.3-6+deb11u11.18.3-6+deb11u7
LowDLA-4420-1postgresql-13@13.4-0+deb11u113.23-0+deb11u1
LowDLA-3771-1python2.7@2.7.16-2+deb10u12.7.16-2+deb10u4
LowDLA-3772-1python3.7@3.7.3-2+deb10u23.7.3-2+deb10u7
LowGHSA-4g8v-vg43-wpgfactionpack@5.2.4.66.1.7.4
LowGHSA-jp4c-xjxw-mgf9pip@20.2.326.1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.6.2latest4 years ago1.7.214127954814,154

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/ncsa/pecan.svg)](https://charts.stackradar.io/charts/ncsa/pecan)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.