bpjstk-service Helm chart

Name: bpjstk-service Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

openshift

Scored 15 Sept 2026

BPJSTK Multichannel Payment Gateway

Latest 1.0.0deploys tag latest 0Artifact Hub

bpjstk-service 1.0.0 deploys 6 container images: andrianrf/bpjstk-simulator, andrianrf/iso-server, andrianrf/iso-client, andrianrf/bpjstk-service and 2 more. Across them, 1,734 findings — 52 critical, 133 high — 38 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.3.4.RELEASE, fixed in 2.5.12. Chart.yaml declares kubeVersion >=1.20.0; rendered for Kubernetes 1.20.0.

Radar Score

34,72152133648901

1,734 findings over 6 of 6 images measured

KEV ×38 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
andrianrf/bpjstk-simulator	latest	6125493	3,239
andrianrf/iso-server	latest	1621149186	7,335
andrianrf/iso-client	latest	81573105	4,066
andrianrf/bpjstk-service	latest	8146398	3,767
andrianrf/backoffice-be	latest	1219137195	6,671
andrianrf/backoffice	latest	252172224	9,643

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

873 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	RHSA-2025:11402	avahi@0.8-12.el9	0:0.8-22.el9_6.1
Low	RHSA-2026:58936	sqlite@3.34.1-6.el9_1	0:3.34.1-11.el9_8
Low	RHSA-2026:58938	sqlite@3.26.0-19.el8_9	0:3.26.0-21.el8_10
Low	RHSA-2026:62232	sqlite@3.34.1-6.el9_1	0:3.34.1-6.el9_2.3
Low	DLA-4267-1	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u8
Low	DLA-4063-1	gnutls28@3.7.1-5+deb11u1	3.7.1-5+deb11u7
Low	RHSA-2025:22660	systemd@252-13.el9_2	0:252-55.el9_7.7
Low	GHSA-xvfq-4q6q-gxx7	spring-kafka@2.8.11	no fix listed
Low	GHSA-4773-3jfm-qmx3	spring-webmvc@5.3.27	no fix listed
Low	RHSA-2026:0067	tar@2:1.34-6.el9_1	2:1.34-9.el9_7
Low	RHSA-2024:2433	avahi@0.8-12.el9	0:0.8-20.el9
Low	RHSA-2026:50147	libgcrypt@1.10.0-10.el9_2	0:1.10.0-13.el9_8
Low	GHSA-72pg-x5f8-j25j	spring-webmvc@5.2.9.RELEASE	no fix listed
Low	RHSA-2026:61247	libxml2@2.9.13-3.el9_1	0:2.9.13-14.el9_8.4
Low	RHSA-2026:5581	nginx@1:1.20.1-1.module+el8.8.0+20359+9bd89172.1	1:1.24.0-2.module+el8.10.0+24013+f603d2af
Low	DLA-4061-1	libtasn1-6@4.16.0-2	4.16.0-2+deb11u2
Low	RHSA-2025:13777	krb5@1.20.1-8.el9	0:1.20.1-9.el9_2.3
Low	RHSA-2026:0719	gnupg2@2.3.3-2.el9_0	0:2.3.3-5.el9_7
Low	GHSA-mq64-j8f9-9gcj	spring-webmvc@5.2.9.RELEASE	no fix listed
Low	RHSA-2024:1822	java-11-openjdk@1:11.0.19.0.7-4.el9	1:11.0.23.0.9-3.el9
Low	RHSA-2026:48703	vim@2:8.0.1763-19.el8_6.4	2:8.0.1763-31.el8_10
Low	GHSA-5m4m-73w9-8433	spring-data-commons@2.3.4.RELEASE	no fix listed
Low	RHSA-2026:36732	python-urllib3@1.24.2-8.el8_10	0:1.24.2-10.el8_10
Low	GHSA-6gf2-pvqw-37ph	spring-core@5.2.9.RELEASE	5.2.19
Low	DLA-4145-1	expat@2.2.10-2+deb11u5	2.2.10-2+deb11u7
Low	GHSA-53w6-v7cv-fc9h	spring-kafka@2.8.11	no fix listed
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.11.2	2.18.8
Low	GHSA-pq67-6m6q-mj2v	urllib3@1.24.2	2.5.0
Low	RHSA-2025:8958	libxml2@2.9.7-18.el8_10.1	0:2.9.7-20.el8_10
Low	RHSA-2026:33226	glibc@2.34-60.el9	0:2.34-272.el9_8
Low	GHSA-5vpf-xvv7-c8vh	spring-data-commons@2.3.4.RELEASE	no fix listed
Low	DLA-4481-1	libpng1.6@1.6.37-3	1.6.37-3+deb11u2
Low	RHSA-2026:12441	libcap@2.48-8.el9	0:2.48-10.el9_7.1
Low	GHSA-65pc-fj4g-8rjx	idna@2.5	3.15
Low	RHSA-2026:54290	python-idna@2.5-7.el8_10	0:2.5-8.el8_10
Low	GHSA-9wx4-h78v-vm56	requests@2.20.0	2.32.0
Low	RHSA-2025:0012	python-requests@2.20.0-3.el8_8	0:2.20.0-5.el8_10
Low	RHSA-2026:64809	expat@2.2.5-13.el8_10	0:2.5.0-2.el8_10.2
Low	RHSA-2026:64812	expat@2.5.0-1.el9	0:2.5.0-6.el9_8.3
Low	RHSA-2025:4241	glibc@2.34-60.el9	0:2.34-60.el9_2.17
Low	RHSA-2025:23342	python3.9@3.9.16-1.el9	0:3.9.25-2.el9_7
Low	GHSA-3chg-m5w7-qfv5	spring-webmvc@5.2.9.RELEASE	no fix listed
Low	GHSA-2827-2mxx-j8pv	spring-retry@1.3.4	no fix listed
Low	RHSA-2026:13677	systemd@252-13.el9_2	0:252-55.el9_7.9
Low	RHSA-2026:20587	glibc@2.28-251.el8_10.2	0:2.28-251.el8_10.37
Low	RHSA-2024:0790	nss@4.34.0-18.el9_1	0:4.35.0-6.el9_3
Low	DLA-4490-1	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u5
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.11.2	2.18.8
Low	RHSA-2026:42736	acl@2.3.1-3.el9	0:2.4.0-1.el9_8
Low	RHSA-2026:43420	acl@2.2.53-3.el8	0:2.4.0-1.el8_10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.0latest	—	latest	52133648901	34,721

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/openshift/bpjstk-service.svg)](https://charts.stackradar.io/charts/openshift/bpjstk-service)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.