bpjstk-service 1.0.0 Helm chart

Name: bpjstk-service Helm chart 1.0.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

openshift

Scored 14 Sept 2026

BPJSTK Multichannel Payment Gateway

Version 1.0.0deploys tag latest 0Artifact Hub

bpjstk-service 1.0.0 deploys 6 container images: andrianrf/bpjstk-simulator, andrianrf/iso-server, andrianrf/iso-client, andrianrf/bpjstk-service and 2 more. Across them, 1,730 findings — 55 critical, 130 high — 38 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.3.4.RELEASE, fixed in 2.5.12. Chart.yaml declares kubeVersion >=1.20.0; rendered for Kubernetes 1.20.0.

Radar Score

34,67155130646899

1,730 findings over 6 of 6 images measured

KEV ×38 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
andrianrf/bpjstk-simulator	latest	6125493	3,239
andrianrf/iso-server	latest	1720148185	7,310
andrianrf/iso-client	latest	81573105	4,066
andrianrf/bpjstk-service	latest	8146398	3,767
andrianrf/backoffice-be	latest	1318136194	6,645
andrianrf/backoffice	latest	351172224	9,644

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

871 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	RHSA-2026:38500	plexus-sec-dispatcher@2.0-4.module+el9.2.0+18047+4ad4bba4	0:2.0-28.module+el9.8.0+24092+eb9f67d0
Medium	RHSA-2026:38500	maven-resolver@1:1.7.3-5.module+el9.2.0+18047+4ad4bba4	1:1.9.22-6.module+el9.8.0+24092+eb9f67d0
Medium	RHSA-2026:38500	jakarta-annotations@1.3.5-14.module+el9.2.0+18047+4ad4bba4	0:1.3.5-38.module+el9.8.0+24092+eb9f67d0
Medium	RHSA-2026:38500	maven@1:3.8.5-4.module+el9.2.0+18047+4ad4bba4	1:3.9.9-13.module+el9.8.0+24092+eb9f67d0
Medium	RHSA-2026:38500	plexus-utils@3.3.0-10.module+el9.2.0+18047+4ad4bba4	0:3.5.1-17.module+el9.8.0+24375+95248a69.1
Medium	RHSA-2026:38500	httpcomponents-client@4.5.13-5.module+el9.2.0+18047+4ad4bba4	0:4.5.14-21.module+el9.8.0+24092+eb9f67d0
Medium	RHSA-2026:38500	httpcomponents-core@4.4.13-7.module+el9.2.0+18047+4ad4bba4	0:4.4.16-21.module+el9.8.0+24092+eb9f67d0
Medium	RHSA-2026:38500	atinject@1.0.5-4.module+el9.2.0+18047+4ad4bba4	0:1.0.5-14.module+el9.8.0+24092+eb9f67d0
Medium	RHSA-2026:38500	apache-commons-io@1:2.11.0-2.module+el9.2.0+18047+4ad4bba4	1:2.16.1-9.module+el9.8.0+24092+eb9f67d0
Medium	RHSA-2026:38500	apache-commons-codec@1.15-7.module+el9.2.0+18047+4ad4bba4	0:1.17.1-8.module+el9.8.0+24092+eb9f67d0
Medium	RHSA-2026:38500	google-guice@4.2.3-9.module+el9.2.0+18047+4ad4bba4	0:5.1.0-23.module+el9.8.0+24092+eb9f67d0
Medium	RHSA-2026:38500	apache-commons-cli@1.5.0-4.module+el9.2.0+18047+4ad4bba4	0:1.9.0-4.module+el9.8.0+24092+eb9f67d0
Medium	RHSA-2026:38500	slf4j@1.7.32-4.module+el9.2.0+18047+4ad4bba4	0:1.7.36-9.module+el9.8.0+24092+eb9f67d0
Medium	RHSA-2024:0454	python3.9@3.9.16-1.el9	0:3.9.16-1.el9_2.3
Medium	GHSA-mf92-479x-3373	spring-security-web@5.3.4.RELEASE	no fix listed
Medium	RHSA-2025:16116	gnutls@3.7.6-20.el9_2	0:3.8.3-6.el9_6.2
Medium	RHSA-2025:17361	gnutls@3.7.6-20.el9_2	0:3.7.6-21.el9_2.4
Medium	RHSA-2025:17415	gnutls@3.6.16-8.el8_9.3	0:3.6.16-8.el8_10.4
Medium	RHSA-2022:8492	python-pysocks@1.6.8-3.el8	0:1.7.1-4.module+el8.4.0+9822+20bf1249
Medium	RHSA-2022:8492	python-urllib3@1.24.2-8.el8_10	0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
Medium	RHSA-2022:8492	python-requests@2.20.0-3.el8_8	0:2.25.0-2.module+el8.4.0+9822+20bf1249
Medium	RHSA-2022:8492	python-chardet@3.0.4-7.el8	0:3.0.4-19.module+el8.4.0+9822+20bf1249
Medium	RHSA-2022:8492	python-ply@3.9-9.el8	0:3.11-10.module+el8.4.0+9822+20bf1249
Medium	RHSA-2022:8492	python-idna@2.5-7.el8_10	0:2.10-3.module+el8.4.0+9822+20bf1249
Medium	GHSA-gx5v-xp9w-j4cg	tomcat-embed-core@9.0.38	9.0.118
Medium	GHSA-pqr6-cmr2-h8hf	snappy-java@1.1.8.4	1.1.10.1
Medium	GHSA-wx54-3278-m5g4	spring-security-core@5.3.4.RELEASE	5.5.7
Medium	RHSA-2025:4791	python-pysocks@1.6.8-3.el8	0:1.7.1-4.module+el8.9.0+19644+d68f775d
Medium	RHSA-2025:4791	python-idna@2.5-7.el8_10	0:2.10-4.module+el8.10.0+21815+bb024982
Medium	RHSA-2025:4791	python-requests@2.20.0-3.el8_8	0:2.25.0-3.module+el8.9.0+19644+d68f775d
Medium	RHSA-2025:4791	python-urllib3@1.24.2-8.el8_10	0:1.25.10-5.module+el8.10.0+20443+f0a692fe
Medium	RHSA-2025:4791	python-ply@3.9-9.el8	0:3.11-10.module+el8.9.0+19644+d68f775d
Medium	RHSA-2025:4791	python-chardet@3.0.4-7.el8	0:3.0.4-19.module+el8.9.0+19644+d68f775d
Medium	GHSA-2x2g-32r7-p4x8	kafka-clients@3.1.2	3.7.1
Medium	RHSA-2026:22312	openssl@1:3.0.7-6.el9_2	1:3.5.5-3.el9_8
Low	RHSA-2026:1478	python3.9@3.9.16-1.el9	0:3.9.25-3.el9_7
Low	RHSA-2026:1631	python3@3.6.8-62.el8_10	0:3.6.8-72.el8_10
Low	RHSA-2023:4569	dbus@1:1.12.20-7.el9_1	1:1.12.20-7.el9_2.1
Low	GHSA-g3pr-3p32-fp23	micrometer-core@1.5.5	no fix listed
Low	RHSA-2026:3405	libpng@2:1.6.37-12.el9	2:1.6.37-12.el9_7.2
Low	RHSA-2026:3575	libpng@2:1.6.37-12.el9	2:1.6.37-12.el9_2.2
Low	RHSA-2026:2786	glibc@2.34-60.el9	0:2.34-231.el9_7.10
Low	RHSA-2026:54654	bind@32:9.11.36-14.el8_10	32:9.11.36-16.el8_10.14
Low	RHSA-2026:7668	nghttp2@1.43.0-5.el9	0:1.43.0-6.el9_7.1
Low	RHSA-2026:14791	libpng@2:1.6.37-12.el9	2:1.6.37-12.el9_7.3
Low	GHSA-vmq6-5m68-f53m	logback-core@1.2.3	1.2.13
Low	GHSA-vmq6-5m68-f53m	logback-classic@1.2.3	1.2.13
Low	GHSA-g8pj-r55q-5c2v	tomcat-embed-core@9.0.38	9.0.81
Low	GHSA-v6w3-2prq-h95f	jakarta.el@3.0.3	3.0.4
Low	RHSA-2024:10379	pam@1.3.1-34.el8_10	0:1.3.1-36.el8_10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.0latest	—	latest	55130646899	34,671

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/openshift/bpjstk-service.svg)](https://charts.stackradar.io/charts/openshift/bpjstk-service)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.