StackRadar

bpjstk-service 1.0.0 Helm chart

openshift

Scored 15 Sept 2026

BPJSTK Multichannel Payment Gateway

Version 1.0.0deploys tag latest 0Artifact Hub

bpjstk-service 1.0.0 deploys 6 container images: andrianrf/bpjstk-simulator, andrianrf/iso-server, andrianrf/iso-client, andrianrf/bpjstk-service and 2 more. Across them, 1,734 findings52 critical, 133 high 38 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.3.4.RELEASE, fixed in 2.5.12. Chart.yaml declares kubeVersion >=1.20.0; rendered for Kubernetes 1.20.0.

Radar Score

34,72152133648901

1,734 findings over 6 of 6 images measured

KEV ×38 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images
ImageTagVulnerabilitiesRadar Score
andrianrf/bpjstk-simulatorlatest61254933,239
andrianrf/iso-serverlatest16211491867,335
andrianrf/iso-clientlatest815731054,066
andrianrf/bpjstk-servicelatest81463983,767
andrianrf/backoffice-belatest12191371956,671
andrianrf/backofficelatest2521722249,643

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

873 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowRHSA-2026:61248libxml2@2.9.7-18.el8_10.10:2.9.7-21.el8_10.7
LowGHSA-659m-px2c-25wjspring-core@5.2.9.RELEASEno fix listed
LowGHSA-ggg2-9786-hwc8spring-boot-autoconfigure@2.7.12no fix listed
LowRHSA-2026:66403coreutils@8.32-34.el90:8.32-41.el9_8.1
LowGHSA-4wp7-92pw-q264spring-context@5.2.9.RELEASEno fix listed
LowRHSA-2025:12748glibc@2.34-60.el90:2.34-168.el9_6.23
LowGHSA-vxf7-qj7q-83fhspring-security-core@5.7.8no fix listed
LowGHSA-h3qp-gqrc-q736spring-webmvc@5.2.9.RELEASEno fix listed
LowDLA-4437-1gnupg2@2.2.27-2+deb11u22.2.27-2+deb11u3
LowGHSA-9f52-rjqv-25qvspring-expression@5.2.9.RELEASEno fix listed
LowRHSA-2026:22730vim@2:8.0.1763-19.el8_6.42:8.0.1763-23.el8_10
LowGHSA-wg35-8jpf-2xv3spring-webmvc@5.2.9.RELEASEno fix listed
LowDLA-3972-1tzdata@2021a-1+deb11u42024b-0+deb11u1
LowDLA-4016-1ucf@3.00433.0043+deb11u2
LowDLA-4085-1tzdata@2021a-1+deb11u42025a-0+deb11u1
LowDLA-4105-1tzdata@2021a-1+deb11u42025b-0+deb11u1
LowDLA-4403-1tzdata@2021a-1+deb11u42025b-0+deb11u2
LowDLA-4485-1ca-certificates@2021011920230311+deb12u1~deb11u1
LowRHSA-2026:39317libxml2@2.9.13-3.el9_10:2.9.13-14.el9_8.2
LowGHSA-p47f-322f-whfhlogback-core@1.2.31.5.33
LowGHSA-6v67-2wr5-gvf4logback-core@1.2.31.3.15
LowGHSA-6hcq-hmm3-jj3cspring-webmvc@5.3.27no fix listed
LowGHSA-qqpg-mvqg-649vlogback-core@1.2.31.5.25

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.0latestlatest5213364890134,721

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/openshift/bpjstk-service.svg)](https://charts.stackradar.io/charts/openshift/bpjstk-service)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 15 Sept 2026 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.