StackRadar

bpjstk-service 1.0.0 Helm chart

openshift

Scored 15 Sept 2026

BPJSTK Multichannel Payment Gateway

Version 1.0.0deploys tag latest 0Artifact Hub

bpjstk-service 1.0.0 deploys 6 container images: andrianrf/bpjstk-simulator, andrianrf/iso-server, andrianrf/iso-client, andrianrf/bpjstk-service and 2 more. Across them, 1,734 findings52 critical, 133 high 38 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.3.4.RELEASE, fixed in 2.5.12. Chart.yaml declares kubeVersion >=1.20.0; rendered for Kubernetes 1.20.0.

Radar Score

34,72152133648901

1,734 findings over 6 of 6 images measured

KEV ×38 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images
ImageTagVulnerabilitiesRadar Score
andrianrf/bpjstk-simulatorlatest61254933,239
andrianrf/iso-serverlatest16211491867,335
andrianrf/iso-clientlatest815731054,066
andrianrf/bpjstk-servicelatest81463983,767
andrianrf/backoffice-belatest12191371956,671
andrianrf/backofficelatest2521722249,643

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

873 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowRHSA-2026:20602rsync@3.2.3-19.el90:3.2.3-19.el9_2.3
LowGHSA-42wg-hm62-jcwgtomcat-embed-core@9.0.389.0.106
LowRHSA-2026:62218libssh@0.9.6-14.el80:0.9.6-17.el8_10
LowGHSA-wjxj-5m7g-mg7qbcprov-jdk15on@1.51no fix listed
LowGHSA-9fw2-h3hf-293rspring-data-commons@2.3.4.RELEASEno fix listed
LowGHSA-v2xm-76pq-phcfclassgraph@4.8.834.8.112
LowGHSA-r5w3-xv2f-j59qspring-expression@5.2.9.RELEASEno fix listed
LowRHSA-2026:0216libpng@2:1.6.37-12.el92:1.6.37-12.el9_2.1
LowRHSA-2026:0238libpng@2:1.6.37-12.el92:1.6.37-12.el9_7.1
LowRHSA-2024:5535python3.9@3.9.16-1.el90:3.9.16-1.el9_2.5
LowRHSA-2026:0936glib2@2.68.4-6.el90:2.68.4-18.el9_7.1
LowGHSA-22wj-vf5f-wrvjh2@1.4.2002.2.220
LowGHSA-9hjg-9r4m-mvj7requests@2.20.02.32.4
LowRHSA-2025:13234python-requests@2.20.0-3.el8_80:2.20.0-6.el8_10
LowDSA-5650-1util-linux@2.36.1-8+deb11u12.36.1-8+deb11u2
LowRHSA-2024:0453rpm@4.16.1.3-22.el90:4.16.1.3-24.el9_2
LowRHSA-2024:0463rpm@4.16.1.3-22.el90:4.16.1.3-27.el9_3
LowRHSA-2025:7067krb5@1.20.1-8.el90:1.21.1-6.el9
LowGHSA-72m5-fvvv-55m6bcprov-jdk15on@1.511.61
LowRHSA-2026:39316cups@1:2.3.3op2-16.el91:2.3.3op2-39.el9_8
LowRHSA-2026:4772glibc@2.28-251.el8_10.20:2.28-251.el8_10.31
LowGHSA-2rmj-mq67-h97gspring-web@5.2.9.RELEASE5.3.38
LowRHSA-2026:16799krb5@1.18.2-29.el8_100:1.18.2-34.el8_10
LowRHSA-2026:19357krb5@1.20.1-8.el90:1.21.1-10.el9_8
LowRHSA-2026:24685krb5@1.20.1-8.el90:1.20.1-9.el9_2.6
LowGHSA-9m3c-qcxr-9x87tomcat-embed-core@9.0.389.0.116
LowDSA-5203-1gnutls28@3.7.1-5+deb11u13.7.1-5+deb11u2
LowDSA-5726-1krb5@1.18.3-6+deb11u11.18.3-6+deb11u5
LowGHSA-fjqm-246c-mwqgbcprov-jdk15on@1.511.56
LowDLA-3893-1expat@2.2.10-2+deb11u52.2.10-2+deb11u6
LowGHSA-hr8g-6v94-x4m9bcprov-jdk15on@1.51no fix listed
LowRHSA-2024:2512file@5.39-12.el90:5.39-16.el9
LowGHSA-775g-4xr8-78h8spring-expression@5.2.9.RELEASEno fix listed
LowRHSA-2026:6473python3@3.6.8-62.el8_100:3.6.8-75.el8_10
LowRHSA-2026:6766python3.9@3.9.16-1.el90:3.9.25-3.el9_7.2
LowGHSA-rfmp-97jj-h8m6spring-core@5.2.9.RELEASE5.2.18
LowGHSA-w3c8-7r8f-9jp8spring-webmvc@5.3.275.3.42
LowRHSA-2024:1879gnutls@3.7.6-20.el9_20:3.7.6-23.el9_3.4
LowRHSA-2024:2570gnutls@3.7.6-20.el9_20:3.8.3-4.el9_4
LowRHSA-2024:2889gnutls@3.7.6-20.el9_20:3.7.6-21.el9_2.3
LowRHSA-2026:39315libsolv@0.7.22-4.el90:0.7.24-6.el9_8
LowRHSA-2023:6707avahi@0.8-12.el90:0.8-15.el9
LowRHSA-2026:20597glibc@2.34-60.el90:2.34-270.el9_8
LowRHSA-2025:11805perl@0:1.28-422.el80:1.28-423.el8_10
LowRHSA-2026:8096perl-threads@1:2.21-2.el81:2.25-457.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:8096perl-URI@1.73-3.el80:1.76-5.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:8096perl-Unicode-Normalize@1.25-396.el80:1.27-458.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:8096perl-Carp@1.42-396.el80:1.50-439.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:8096perl-Time-Local@1:1.280-1.el82:1.300-4.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:8096perl-threads-shared@1.58-2.el80:1.61-457.module+el8.10.0+21354+3ad137bb

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.0latestlatest5213364890134,721

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/openshift/bpjstk-service.svg)](https://charts.stackradar.io/charts/openshift/bpjstk-service)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 15 Sept 2026 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.