StackRadar

flagsmith 0.1.5 Helm chart

one-acre-fundVerified publisher

Scored 14 Sept 2026

Flagsmith - a Feature flag and remote configuration solution

Version 0.1.5 4 years agoApp version not verified against the render 2Artifact Hub

flagsmith 0.1.5 deploys 6 container images: jwilder/dockerize, flagsmith/flagsmith-api, flagsmith/flagsmith-frontend, bitnami/postgresql and 1 more. Across the 5 measured, 449 findings0 critical, 14 high. The highest contribution is GHSA-phwq-j96m-2c2q in ejs 2.7.1, fixed in 3.1.7.

Radar Score

6,868014164271

449 findings over 5 of 6 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images
ImageTagVulnerabilitiesRadar Score
jwilder/dockerize0.6.100000
flagsmith/flagsmith-api×2v2.6.00352922,216
jwilder/dockerizelatest00554502
flagsmith/flagsmith-frontendv2.6.00874982,984
bitnami/postgresql14.4.0-debian-11-r23unmeasured
blacktop/httpielatest0333271,166

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

417 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGHSA-848j-6mx2-7j84elliptic@6.4.1no fix listed
LowGHSA-3496-9g83-7v6xsqlparse@0.4.10.6.0
LowPYSEC-2026-2275requests@2.19.12.33.0
LowDLA-3063-1systemd@232-25+deb9u12232-25+deb9u14
LowGHSA-2qvq-rjwj-gvw9handlebars@4.5.34.7.9
LowGHSA-g47c-3xmw-q6m2djangorestframework@3.12.13.17.2
LowDLA-3474-1systemd@241-7~deb10u7241-7~deb10u10
LowGO-2026-4976stdlib@go1.25.51.25.10
LowGO-2026-5856stdlib@go1.25.51.25.12
LowGO-2026-6355golang.org/x/crypto@v0.45.00.56.0
LowGO-2026-4980stdlib@go1.25.51.25.10
LowGO-2026-5039stdlib@go1.25.51.25.11
LowGHSA-6rw7-vpxm-498pqs@6.5.26.14.1
LowGO-2026-4946stdlib@go1.25.51.25.9
LowGHSA-qg36-9jxh-fj25django-ses@1.0.33.5.0
LowGO-2026-4603stdlib@go1.25.51.25.8
LowGHSA-v422-hmwv-36x6body-parser@1.18.21.20.6
LowGO-2026-6303golang.org/x/crypto@v0.45.00.55.0
LowGHSA-jp4c-xjxw-mgf9pip@18.126.1
LowGO-2026-6354golang.org/x/crypto@v0.45.00.56.0
LowGO-2026-4982stdlib@go1.25.51.25.10
LowGO-2026-6091stdlib@go1.25.51.25.13
LowGO-2026-4864stdlib@go1.25.51.25.9
LowGO-2026-4865stdlib@go1.25.51.25.9
LowGO-2026-4869stdlib@go1.25.51.25.9
LowGO-2026-4340stdlib@go1.25.51.24.12
LowDLA-3755-1tar@1.30+dfsg-61.30+dfsg-6+deb10u1
LowPYSEC-2026-177pyjwt@1.7.12.13.0
LowGHSA-6pc9-xqrg-wfqwhttpie@1.0.23.1.0
LowGHSA-v6h2-p8h4-qcjwbrace-expansion@1.1.111.1.12
LowGHSA-cfqr-cjx5-5jcmsqlparse@0.4.10.6.0
LowPYSEC-2026-175pyjwt@1.7.12.13.0
LowGO-2026-5025golang.org/x/net@v0.47.00.55.0
LowGO-2026-4970stdlib@go1.25.51.25.12
LowGO-2026-5027golang.org/x/net@v0.47.00.55.0
LowGO-2026-5029golang.org/x/net@v0.47.00.55.0
LowGO-2026-5030golang.org/x/net@v0.47.00.55.0
LowGHSA-58qw-9mgm-455vpip@18.126.1
LowGHSA-78xj-cgh5-2h22ip@1.1.51.1.9
LowGO-2026-4602stdlib@go1.25.51.25.8
LowGHSA-3h9f-r86x-qvjxdjango@2.2.175.2.16
LowGHSA-923m-gv2p-w5qpdjango@2.2.175.2.15
LowGHSA-8cjm-8mp7-r2xfdjango@2.2.175.2.15
LowGHSA-h7pc-vwp9-298gdjango@2.2.175.2.15
LowGO-2026-5024golang.org/x/sys@v0.38.00.44.0
LowALPINE-CVE-2020-26159oniguruma@6.9.1-r06.9.4-r1
LowDLA-2797-1tzdata@2021a-0+deb9u12021a-0+deb9u2
LowDLA-2948-1debian-archive-keyring@2017.5+deb9u12017.5+deb9u2
LowDLA-2963-1tzdata@2021a-0+deb9u12021a-0+deb9u3
LowDLA-3051-1tzdata@2021a-0+deb9u12021a-0+deb9u4

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.5latest4 years ago0141642716,868

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/one-acre-fund/flagsmith.svg)](https://charts.stackradar.io/charts/one-acre-fund/flagsmith)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.