StackRadar

pecan Helm chart

ncsaVerified publisher

Scored 14 Sept 2026

PEcAn is not itself an ecosystem model, and it can be used to with a variety of different ecosystem models; integrating a model involves writing a wrapper to convert inputs and outputs to and from the standards used by PEcAn. Currently, PEcAn supports multiple models.

Latest 0.6.2 4 years agoapp version 1.7.2 0Artifact Hub

pecan 0.6.2 deploys 15 container images: ncsa/checks, pecan/bety, pecan/docs, pecan/executor and 11 more. Across the 7 measured, 869 findings1 critical, 41 high 13 on CISA KEV. The highest contribution is ALPINE-CVE-2022-29155 in openldap 2.6.0-r0, fixed in 2.6.2-r0.

Radar Score

14,154141279548

869 findings over 7 of 15 images measured

KEV ×13 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

15 images
ImageTagVulnerabilitiesRadar Score
ncsa/checks×151.0.1011244742
pecan/bety5.4.10131122355,366
pecan/docs1.7.2011841940
pecan/executor1.7.2not yet scanned
pecan/model-biocro-0.951.7.2not yet scanned
pecan/model-ed2-2.2.01.7.2not yet scanned
pecan/model-maespa-git1.7.2not yet scanned
pecan/model-sipnet-r1361.7.2not yet scanned
pecan/model-sipnet-git1.7.2not yet scanned
pecan/monitor1.7.203581282,835
pecan/web1.7.20425821,696
bitnami/postgresql11.8.0-debian-10-r4unmeasured
bitnami/rabbitmq3.8.5-debian-10-r3unmeasured
pecan/data1.7.201035121,451
pecan/dblatest191961,124

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

606 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumDLA-3532-1openssh@1:7.9p1-10+deb10u21:7.9p1-10+deb10u3
MediumDSA-5523-1curl@7.74.0-1.3+b17.74.0-1.3+deb11u10
MediumDLA-3449-1openssl@1.1.1d-0+deb10u71.1.1n-0+deb10u5
MediumDSA-5417-1openssl@1.1.1k-1+deb11u11.1.1n-0+deb11u5
MediumDSA-5103-1openssl@1.1.1d-0+deb10u71.1.1d-0+deb10u8
MediumGHSA-fp4w-jxhp-m23pbundler@1.17.22.2.10
MediumDSA-5140-1openldap@2.4.47+dfsg-3+deb10u62.4.47+dfsg-3+deb10u7
MediumGHSA-r4mg-4433-c7g3activestorage@5.2.4.67.1.5.2
MediumDSA-4860-1openldap@2.4.47+dfsg-3+deb10u22.4.47+dfsg-3+deb10u6
MediumDSA-4875-1openssl@1.1.1d-0+deb10u31.1.1d-0+deb10u6
MediumDLA-3325-1openssl@1.1.1d-0+deb10u71.1.1n-0+deb10u4
MediumDSA-5343-1openssl@1.1.1k-1+deb11u11.1.1n-0+deb11u4
MediumDLA-3282-1git@1:2.20.1-2+deb10u31:2.20.1-2+deb10u7
MediumDSA-5332-1git@1:2.30.2-11:2.30.2-1+deb11u1
MediumDLA-3942-1openssl@1.1.1k-1+deb11u11.1.1n-0+deb11u6
MediumDLA-3942-2openssl@1.1.1k-1+deb11u11.1.1w-0+deb11u2
MediumALPINE-CVE-2022-1271xz@5.2.5-r05.2.5-r1
MediumALPINE-CVE-2022-4304openssl@1.1.1l-r01.1.1t-r0
MediumDLA-3844-1git@1:2.20.1-2+deb10u31:2.20.1-2+deb10u9
MediumDLA-3867-1git@1:2.30.2-11:2.30.2-1+deb11u3
MediumDSA-5111-1zlib@1:1.2.11.dfsg-11:1.2.11.dfsg-1+deb10u1
MediumDSA-4855-1openssl@1.1.1d-0+deb10u31.1.1d-0+deb10u5
MediumALPINE-CVE-2022-40304libxml2@2.9.12-r22.9.14-r2
MediumALPINE-CVE-2023-5869postgresql14@14.1-r514.10-r0
MediumGHSA-jphg-qwrw-7w9gjson@2.1.02.3.0
MediumGHSA-w749-p3v6-hccqactivestorage@5.2.4.65.2.6.3
MediumALPINE-CVE-2022-24407cyrus-sasl@2.1.27-r122.1.28-r0
MediumDSA-4851-1subversion@1.10.4-1+deb10u11.10.4-1+deb10u2
MediumALPINE-CVE-2022-23308libxml2@2.9.12-r22.9.13-r0
MediumALPINE-CVE-2022-28391busybox@1.33.1-r31.33.1-r7
MediumGHSA-j7qv-pgf6-hvh4jquery-ui-rails@6.0.17.0.0
MediumDLA-3575-1python2.7@2.7.16-2+deb10u12.7.16-2+deb10u3
MediumDSA-5085-1expat@2.2.6-2+deb10u12.2.6-2+deb10u3
MediumGHSA-3hhc-qp5v-9p2jactiverecord@5.2.4.65.2.8.1
MediumGHSA-v5h6-c2hv-hv3rstringio@0.0.23.0.1.1
MediumALPINE-CVE-2022-32205curl@7.79.1-r07.79.1-r2
MediumGHSA-8cr8-4vfw-mr7hrexml@3.1.9.13.2.5
MediumDLA-3085-1curl@7.64.0-4+deb10u27.64.0-4+deb10u3
MediumDSA-5197-1curl@7.74.0-1.3+b17.74.0-1.3+deb11u2
MediumALPINE-CVE-2023-0215openssl@1.1.1l-r01.1.1t-r0
MediumGHSA-wq4h-7r42-5hrrrack@2.2.32.2.3.1
MediumGHSA-xh29-r2w5-wx8mnokogiri@1.12.51.13.6
MediumDEBIAN-CVE-2021-2389mariadb-10.5@1:10.5.11-11:10.5.12-0+deb11u1
MediumALPINE-CVE-2023-0464openssl@1.1.1l-r01.1.1t-r1
MediumALPINE-CVE-2023-27534curl@7.79.1-r08.0.1-r0
MediumDLA-3432-1python2.7@2.7.16-2+deb10u12.7.16-2+deb10u2
MediumALPINE-CVE-2022-32208curl@7.79.1-r07.79.1-r2
MediumGHSA-crjr-9rc5-ghw8nokogiri@1.12.51.13.4
MediumDLA-3172-1libxml2@2.9.4+dfsg1-7+deb10u22.9.4+dfsg1-7+deb10u5
MediumDSA-5271-1libxml2@2.9.10+dfsg-6.72.9.10+dfsg-6.7+deb11u3

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.6.2latest4 years ago1.7.214127954814,154

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/ncsa/pecan.svg)](https://charts.stackradar.io/charts/ncsa/pecan)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.