bpjstk-service 1.0.0 Helm chart

Name: bpjstk-service Helm chart 1.0.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

openshift

Scored 15 Sept 2026

BPJSTK Multichannel Payment Gateway

Version 1.0.0deploys tag latest 0Artifact Hub

bpjstk-service 1.0.0 deploys 6 container images: andrianrf/bpjstk-simulator, andrianrf/iso-server, andrianrf/iso-client, andrianrf/bpjstk-service and 2 more. Across them, 1,734 findings — 52 critical, 133 high — 38 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.3.4.RELEASE, fixed in 2.5.12. Chart.yaml declares kubeVersion >=1.20.0; rendered for Kubernetes 1.20.0.

Radar Score

34,72152133648901

1,734 findings over 6 of 6 images measured

KEV ×38 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
andrianrf/bpjstk-simulator	latest	6125493	3,239
andrianrf/iso-server	latest	1621149186	7,335
andrianrf/iso-client	latest	81573105	4,066
andrianrf/bpjstk-service	latest	8146398	3,767
andrianrf/backoffice-be	latest	1219137195	6,671
andrianrf/backoffice	latest	252172224	9,643

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

873 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	RHSA-2026:67142	acl@2.3.1-3.el9	0:2.4.0-0.el9_2.1
Low	RHSA-2024:4779	python3.9@3.9.16-1.el9	0:3.9.18-3.el9_4.3
Low	RHSA-2025:1350	libxml2@2.9.13-3.el9_1	0:2.9.13-6.el9_5.1
Low	RHSA-2025:21977	libssh@0.9.6-14.el8	0:0.9.6-16.el8_10
Low	RHSA-2025:9877	glibc@2.34-60.el9	0:2.34-168.el9_6.20
Low	GHSA-wxpp-56q6-5pcg	spring-expression@5.2.9.RELEASE	no fix listed
Low	RHSA-2025:17715	vim@2:8.0.1763-19.el8_6.4	2:8.0.1763-21.el8_10
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.11.2	2.18.9
Low	GHSA-6p4f-wcwh-5vvm	spring-webmvc@5.2.9.RELEASE	no fix listed
Low	DLA-4259-1	systemd@247.3-7	247.3-7+deb11u7
Low	RHSA-2026:61581	tar@2:1.34-6.el9_1	2:1.34-13.el9_8
Low	GHSA-qccp-gfcp-xxvc	urllib3@1.24.2	2.7.0
Low	GHSA-x2r2-rvhq-2mqv	spring-security-web@5.3.4.RELEASE	no fix listed
Low	GHSA-wwpq-f5c3-7hvx	spring-boot@2.3.4.RELEASE	no fix listed
Low	DLA-3875-1	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u6
Low	GHSA-9cmq-m9j5-mvww	spring-expression@5.2.9.RELEASE	5.3.39
Low	RHSA-2026:18693	python3.9@3.9.16-1.el9	0:3.9.25-5.el9_8
Low	RHSA-2026:1913	util-linux@2.37.4-11.el9_2	0:2.37.4-21.el9_7
Low	DLA-4492-1	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u9
Low	GHSA-293q-567p-wmwq	spring-security-web@5.3.4.RELEASE	no fix listed
Low	GHSA-q3v6-hm2v-pw99	spring-security-core@5.3.4.RELEASE	5.7.14
Low	RHSA-2024:6464	glib2@2.68.4-6.el9	0:2.68.4-14.el9_4.1
Low	GHSA-7g45-4rm6-3mm3	guava@31.0.1-jre	32.0.0-android
Low	GHSA-g4mx-q9vg-27p4	urllib3@1.24.2	1.26.18
Low	GHSA-25qh-j22f-pwp8	logback-core@1.2.3	1.3.16
Low	RHSA-2026:54662	nghttp2@1.43.0-5.el9	0:1.43.0-6.el9_8.2
Low	DLA-4176-1	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u3
Low	DLA-3930-1	libsepol@3.1-1	3.1-1+deb11u1
Low	RHSA-2025:22162	libxml2@2.9.13-3.el9_1	0:2.9.13-3.el9_2.10
Low	RHSA-2026:60226	attr@2.5.1-3.el9	0:2.6.0-1.el9_8
Low	DLA-4181-1	glibc@2.31-13+deb11u3	2.31-13+deb11u13
Low	RHSA-2026:56131	pam@1.3.1-34.el8_10	0:1.3.1-40.el8_10
Low	RHSA-2026:49667	p11-kit@0.24.1-2.el9	0:0.26.4-1.el9_8
Low	GHSA-5mg8-w23w-74h3	guava@31.0.1-jre	32.0.0-android
Low	DLA-4065-1	krb5@1.18.3-6+deb11u1	1.18.3-6+deb11u6
Low	GHSA-957g-f97v-vppc	spring-webmvc@5.2.9.RELEASE	no fix listed
Low	PYSEC-2026-2275	requests@2.20.0	2.33.0
Low	DLA-4306-1	pam@1.4.0-9+deb11u1	1.4.0-9+deb11u2
Low	GHSA-cjpg-rgq5-fr37	spring-webmvc@5.2.9.RELEASE	no fix listed
Low	DLA-4130-1	shadow@1:4.8.1-1	1:4.8.1-1+deb11u1
Low	DLA-4396-1	libpng1.6@1.6.37-3	1.6.37-3+deb11u1
Low	RHSA-2023:6632	shadow-utils@2:4.9-6.el9	2:4.9-8.el9
Low	RHSA-2026:6390	rsync@3.2.3-19.el9	0:3.2.5-3.el9_7.2
Low	GHSA-wf8f-6423-gfxg	jackson-core@2.11.2	2.13.0
Low	RHSA-2026:28911	coreutils@8.32-34.el9	0:8.32-41.el9_8
Low	RHSA-2025:9431	libarchive@3.5.3-4.el9	0:3.5.3-5.el9_6
Low	DLA-4143-1	glibc@2.31-13+deb11u3	2.31-13+deb11u12
Low	DLA-4195-1	krb5@1.18.3-6+deb11u1	1.18.3-6+deb11u7
Low	RHSA-2025:20559	shadow-utils@2:4.9-6.el9	2:4.9-15.el9
Low	GHSA-9m89-8frq-c98c	tomcat-embed-core@9.0.38	9.0.118

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.0latest	—	latest	52133648901	34,721

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/openshift/bpjstk-service.svg)](https://charts.stackradar.io/charts/openshift/bpjstk-service)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.