bpjstk-service Helm chart

Name: bpjstk-service Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

openshift

Scored 14 Sept 2026

BPJSTK Multichannel Payment Gateway

Latest 1.0.0deploys tag latest 0Artifact Hub

bpjstk-service 1.0.0 deploys 6 container images: andrianrf/bpjstk-simulator, andrianrf/iso-server, andrianrf/iso-client, andrianrf/bpjstk-service and 2 more. Across them, 1,730 findings — 55 critical, 130 high — 38 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.3.4.RELEASE, fixed in 2.5.12. Chart.yaml declares kubeVersion >=1.20.0; rendered for Kubernetes 1.20.0.

Radar Score

34,67155130646899

1,730 findings over 6 of 6 images measured

KEV ×38 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
andrianrf/bpjstk-simulator	latest	6125493	3,239
andrianrf/iso-server	latest	1720148185	7,310
andrianrf/iso-client	latest	81573105	4,066
andrianrf/bpjstk-service	latest	8146398	3,767
andrianrf/backoffice-be	latest	1318136194	6,645
andrianrf/backoffice	latest	351172224	9,644

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

871 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	RHSA-2026:30851	perl-threads-shared@1.58-2.el8	0:1.61-457.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:30851	perl-Unicode-Normalize@1.25-396.el8	0:1.27-458.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:30851	perl-URI@1.73-3.el8	0:1.76-5.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:28253	libtasn1@4.16.0-8.el9_1	0:4.16.0-10.el9_8
Low	GHSA-fv25-8xcx-gqjc	tomcat-embed-core@9.0.38	9.0.118
Low	RHSA-2026:42089	glib2@2.68.4-6.el9	0:2.68.4-19.el9_8.2
Low	RHSA-2026:66348	vim@2:8.0.1763-19.el8_6.4	2:8.0.1763-31.el8_10.7
Low	RHSA-2024:9404	libgcrypt@1.10.0-10.el9_2	0:1.10.0-11.el9
Low	RHSA-2026:3042	openssl@1:1.1.1k-12.el8_9	1:1.1.1k-15.el8_6
Low	GHSA-23hv-mwm6-g8jf	tomcat-embed-core@9.0.38	9.0.106
Low	RHSA-2026:15953	glib2@2.56.4-162.el8	0:2.56.4-169.el8_10
Low	RHSA-2026:15971	glib2@2.68.4-6.el9	0:2.68.4-18.el9_7.2
Low	RHSA-2026:19361	glib2@2.68.4-6.el9	0:2.68.4-19.el9_8.1
Low	RHSA-2026:19460	glib2@2.68.4-6.el9	0:2.68.4-7.el9_2.5
Low	RHSA-2024:0107	nss@4.34.0-18.el9_1	0:4.35.0-4.el9_2
Low	RHSA-2023:4349	libxml2@2.9.13-3.el9_1	0:2.9.13-3.el9_2.1
Low	RHBA-2024:6679	nss@4.34.0-18.el9_1	0:4.35.0-14.el9_2
Low	GHSA-563x-q5rq-57qp	tomcat-embed-core@9.0.38	9.0.116
Low	RHSA-2026:38510	vim@2:8.0.1763-19.el8_6.4	2:8.0.1763-27.el8_10
Low	RHSA-2024:9541	expat@2.5.0-1.el9	0:2.5.0-3.el9_5.1
Low	RHSA-2026:2042	brotli@1.0.9-6.el9	0:1.0.9-9.el9_7
Low	RHSA-2026:19218	openssl@1:3.0.7-6.el9_2	1:3.5.5-2.el9_8
Low	RHSA-2023:6631	glib2@2.68.4-6.el9	0:2.68.4-11.el9
Low	RHSA-2023:5744	java-11-openjdk@1:11.0.19.0.7-4.el9	1:11.0.21.0.9-2.el9
Low	RHSA-2025:10027	pam@1.3.1-34.el8_10	0:1.3.1-37.el8_10
Low	RHSA-2025:14557	pam@1.3.1-34.el8_10	0:1.3.1-38.el8_10
Low	GHSA-hhhw-99gj-p3c3	snakeyaml@1.26	1.31
Low	RHSA-2025:23127	curl@7.76.1-23.el9_2.1	0:7.76.1-23.el9_2.8
Low	RHSA-2023:7747	libxml2@2.9.13-3.el9_1	0:2.9.13-5.el9_3
Low	RHSA-2024:4776	cups@1:2.3.3op2-16.el9	1:2.3.3op2-27.el9_4
Low	RHSA-2026:52674	libarchive@3.5.3-4.el9	0:3.5.3-11.el9_8
Low	GHSA-qv9r-c865-cp47	log4j-api@2.13.3	2.25.5
Low	RHSA-2025:14130	libarchive@3.5.3-4.el9	0:3.5.3-6.el9_6
Low	GHSA-6xx3-rg99-gc3p	bcprov-jdk15on@1.51	1.66
Low	GHSA-mgvc-8q2h-5pgc	spring-boot-starter-actuator@2.2.5.RELEASE	no fix listed
Low	GHSA-5mp6-jrq3-r938	tomcat-embed-core@9.0.38	9.0.118
Low	RHSA-2025:22175	expat@2.5.0-1.el9	0:2.5.0-5.el9_7.1
Low	RHSA-2026:28553	vim@2:8.0.1763-19.el8_6.4	2:8.0.1763-24.el8_10
Low	RHSA-2026:2128	python3@3.6.8-62.el8_10	0:3.6.8-73.el8_10
Low	RHSA-2026:4168	python3.9@3.9.16-1.el9	0:3.9.25-3.el9_7.1
Low	RHSA-2026:5225	python3.9@3.9.16-1.el9	0:3.9.16-1.el9_2.12
Low	GHSA-jmp9-x22r-554x	spring-core@5.3.27	no fix listed
Low	GHSA-rv64-5gf8-9qq8	tomcat-embed-core@9.0.75	9.0.116
Low	RHSA-2026:23230	expat@2.5.0-1.el9	0:2.5.0-6.el9_8.1
Low	RHSA-2025:7076	gnutls@3.7.6-20.el9_2	0:3.8.3-6.el9
Low	RHSA-2025:8655	glibc@2.34-60.el9	0:2.34-168.el9_6.19
Low	RHSA-2024:9371	python3.9@3.9.16-1.el9	0:3.9.19-8.el9
Low	RHSA-2026:48225	perl-Socket@4:2.027-3.el8	4:2.031-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Time-Local@1:1.280-1.el8	2:1.300-4.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Digest-MD5@2.55-396.el8	0:2.58-1.module+el8.10.0+21354+3ad137bb

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.0latest	—	latest	55130646899	34,671

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/openshift/bpjstk-service.svg)](https://charts.stackradar.io/charts/openshift/bpjstk-service)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.