StackRadar

bpjstk-service Helm chart

openshift

Scored 14 Sept 2026

BPJSTK Multichannel Payment Gateway

Latest 1.0.0deploys tag latest 0Artifact Hub

bpjstk-service 1.0.0 deploys 6 container images: andrianrf/bpjstk-simulator, andrianrf/iso-server, andrianrf/iso-client, andrianrf/bpjstk-service and 2 more. Across them, 1,730 findings55 critical, 130 high 38 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.3.4.RELEASE, fixed in 2.5.12. Chart.yaml declares kubeVersion >=1.20.0; rendered for Kubernetes 1.20.0.

Radar Score

34,67155130646899

1,730 findings over 6 of 6 images measured

KEV ×38 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images
ImageTagVulnerabilitiesRadar Score
andrianrf/bpjstk-simulatorlatest61254933,239
andrianrf/iso-serverlatest17201481857,310
andrianrf/iso-clientlatest815731054,066
andrianrf/bpjstk-servicelatest81463983,767
andrianrf/backoffice-belatest13181361946,645
andrianrf/backofficelatest3511722249,644

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

436 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGHSA-5mp6-jrq3-r938tomcat-embed-core@9.0.389.0.118
LowRHSA-2025:22175expat@2.5.0-1.el90:2.5.0-5.el9_7.1
LowRHSA-2026:28553vim@2:8.0.1763-19.el8_6.42:8.0.1763-24.el8_10
LowRHSA-2026:2128python3@3.6.8-62.el8_100:3.6.8-73.el8_10
LowRHSA-2026:4168python3.9@3.9.16-1.el90:3.9.25-3.el9_7.1
LowRHSA-2026:5225python3.9@3.9.16-1.el90:3.9.16-1.el9_2.12
LowGHSA-jmp9-x22r-554xspring-core@5.3.27no fix listed
LowGHSA-rv64-5gf8-9qq8tomcat-embed-core@9.0.759.0.116
LowRHSA-2026:23230expat@2.5.0-1.el90:2.5.0-6.el9_8.1
LowRHSA-2025:7076gnutls@3.7.6-20.el9_20:3.8.3-6.el9
LowRHSA-2025:8655glibc@2.34-60.el90:2.34-168.el9_6.19
LowRHSA-2024:9371python3.9@3.9.16-1.el90:3.9.19-8.el9
LowRHSA-2026:48225perl-Socket@4:2.027-3.el84:2.031-1.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-Encode@4:2.97-3.el84:3.08-461.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-parent@1:0.237-1.el81:0.238-457.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-Scalar-List-Utils@3:1.49-2.el84:1.55-457.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-Time-Local@1:1.280-1.el82:1.300-4.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-URI@1.73-3.el80:1.76-5.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-File-Temp@0.230.600-1.el81:0.231.100-1.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-threads-shared@1.58-2.el80:1.61-457.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-Storable@1:3.11-3.el81:3.21-457.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-Pod-Usage@4:1.69-395.el84:2.01-1.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-Term-ANSIColor@4.06-396.el80:5.01-458.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-PathTools@3.74-1.el80:3.78-439.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-Digest@1.17-395.el80:1.20-1.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-Getopt-Long@1:2.50-4.el81:2.52-1.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-Pod-Simple@1:3.35-395.el81:3.42-1.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-constant@1.33-396.el80:1.33-1001.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-Carp@1.42-396.el80:1.50-439.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-Pod-Perldoc@3.28-396.el80:3.28.01-443.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-Term-Cap@1.17-395.el80:1.17-396.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-libnet@3.11-3.el80:3.13-1.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-Text-ParseWords@3.30-395.el80:3.30-396.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-Data-Dumper@2.167-399.el80:2.174-440.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-Digest-MD5@2.55-396.el80:2.58-1.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-threads@1:2.21-2.el81:2.25-457.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-IO-Socket-IP@0.39-5.el80:0.41-2.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-Unicode-Normalize@1.25-396.el80:1.27-458.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-MIME-Base64@3.15-396.el80:3.15-1001.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-Exporter@5.72-396.el80:5.74-458.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-Text-Tabs+Wrap@2013.0523-395.el80:2013.0523-396.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-File-Path@2.15-2.el80:2.16-439.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-podlators@4.11-1.el81:4.14-457.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl-Pod-Escapes@1:1.07-395.el81:1.07-396.module+el8.10.0+21354+3ad137bb
LowRHSA-2026:48225perl@0:1.28-422.el80:1.30-474.module+el8.10.0+24099+8aa2f756
LowRHSA-2026:48225perl-HTTP-Tiny@0.074-3.el80:0.078-1.module+el8.10.0+21354+3ad137bb
LowGHSA-x4m4-345f-5h5gtomcat-embed-core@9.0.389.0.117
LowGHSA-gfwj-fwqj-fp3vspring-web@5.2.9.RELEASE5.2.15
LowGHSA-v435-xc8x-wvr9bcprov-jdk15on@1.511.78
LowGHSA-jjfh-589g-3hjxspring-boot-actuator@2.3.4.RELEASE2.7.18

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.0latestlatest5513064689934,671

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/openshift/bpjstk-service.svg)](https://charts.stackradar.io/charts/openshift/bpjstk-service)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.