bpjstk-service Helm chart

Name: bpjstk-service Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

openshift

Scored 14 Sept 2026

BPJSTK Multichannel Payment Gateway

Latest 1.0.0deploys tag latest 0Artifact Hub

bpjstk-service 1.0.0 deploys 6 container images: andrianrf/bpjstk-simulator, andrianrf/iso-server, andrianrf/iso-client, andrianrf/bpjstk-service and 2 more. Across them, 1,730 findings — 55 critical, 130 high — 38 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.3.4.RELEASE, fixed in 2.5.12. Chart.yaml declares kubeVersion >=1.20.0; rendered for Kubernetes 1.20.0.

Radar Score

34,67155130646899

1,730 findings over 6 of 6 images measured

KEV ×38 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
andrianrf/bpjstk-simulator	latest	6125493	3,239
andrianrf/iso-server	latest	1720148185	7,310
andrianrf/iso-client	latest	81573105	4,066
andrianrf/bpjstk-service	latest	8146398	3,767
andrianrf/backoffice-be	latest	1318136194	6,645
andrianrf/backoffice	latest	351172224	9,644

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

871 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	RHSA-2026:48225	perl-File-Temp@0.230.600-1.el8	1:0.231.100-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-libnet@3.11-3.el8	0:3.13-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Unicode-Normalize@1.25-396.el8	0:1.27-458.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Digest@1.17-395.el8	0:1.20-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Storable@1:3.11-3.el8	1:3.21-457.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-URI@1.73-3.el8	0:1.76-5.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-parent@1:0.237-1.el8	1:0.238-457.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Data-Dumper@2.167-399.el8	0:2.174-440.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-HTTP-Tiny@0.074-3.el8	0:0.078-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-constant@1.33-396.el8	0:1.33-1001.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Pod-Usage@4:1.69-395.el8	4:2.01-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Carp@1.42-396.el8	0:1.50-439.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Term-ANSIColor@4.06-396.el8	0:5.01-458.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl@0:1.28-422.el8	0:1.30-474.module+el8.10.0+24099+8aa2f756
Low	RHSA-2026:48225	perl-MIME-Base64@3.15-396.el8	0:3.15-1001.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-IO-Socket-IP@0.39-5.el8	0:0.41-2.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Term-Cap@1.17-395.el8	0:1.17-396.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-File-Path@2.15-2.el8	0:2.16-439.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Getopt-Long@1:2.50-4.el8	1:2.52-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Pod-Perldoc@3.28-396.el8	0:3.28.01-443.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Text-ParseWords@3.30-395.el8	0:3.30-396.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Pod-Escapes@1:1.07-395.el8	1:1.07-396.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Exporter@5.72-396.el8	0:5.74-458.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Scalar-List-Utils@3:1.49-2.el8	4:1.55-457.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Text-Tabs+Wrap@2013.0523-395.el8	0:2013.0523-396.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Pod-Simple@1:3.35-395.el8	1:3.42-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-threads@1:2.21-2.el8	1:2.25-457.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Encode@4:2.97-3.el8	4:3.08-461.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-PathTools@3.74-1.el8	0:3.78-439.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-threads-shared@1.58-2.el8	0:1.61-457.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-podlators@4.11-1.el8	1:4.14-457.module+el8.10.0+21354+3ad137bb
Low	GHSA-x4m4-345f-5h5g	tomcat-embed-core@9.0.38	9.0.117
Low	GHSA-gfwj-fwqj-fp3v	spring-web@5.2.9.RELEASE	5.2.15
Low	GHSA-v435-xc8x-wvr9	bcprov-jdk15on@1.51	1.78
Low	GHSA-jjfh-589g-3hjx	spring-boot-actuator@2.3.4.RELEASE	2.7.18
Low	DSA-5200-1	libtirpc@1.3.1-1	1.3.1-1+deb11u1
Low	GHSA-fpj8-gq4v-p354	tomcat-embed-core@9.0.38	9.0.113
Low	RHSA-2024:2463	systemd@252-13.el9_2	0:252-32.el9_4
Low	GHSA-hgrr-935x-pq79	tomcat-embed-core@9.0.38	9.0.110
Low	RHSA-2026:18599	p11-kit@0.24.1-2.el9	0:0.26.2-1.el9
Low	RHSA-2025:12447	libxml2@2.9.13-3.el9_1	0:2.9.13-11.el9_6
Low	GHSA-x23c-287f-qqv5	spring-webmvc@5.2.9.RELEASE	no fix listed
Low	RHSA-2025:17347	libtasn1@4.16.0-8.el9_1	0:4.16.0-8.el9_2.1
Low	RHSA-2026:57462	curl@7.61.1-34.el8	0:7.61.1-34.el8_10.13
Low	RHSA-2024:10779	python3@3.6.8-62.el8_10	0:3.6.8-69.el8_10
Low	GHSA-8xfc-gm6g-vgpv	bcprov-jdk15on@1.51	1.78
Low	GHSA-rc42-6c7j-7h5r	spring-boot@2.3.4.RELEASE	no fix listed
Low	RHSA-2024:4078	python3.9@3.9.16-1.el9	0:3.9.18-3.el9_4.1
Low	RHSA-2026:17481	rsync@3.1.3-19.el8_7.1	0:3.1.3-25.el8_10
Low	RHSA-2026:20602	rsync@3.2.3-19.el9	0:3.2.3-19.el9_2.3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.0latest	—	latest	55130646899	34,671

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/openshift/bpjstk-service.svg)](https://charts.stackradar.io/charts/openshift/bpjstk-service)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.