fineract 0.1.1 Helm chart

Name: fineract Helm chart 0.1.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

openshift

Scored 14 Sept 2026

Apache Fineract is an open source microfinance platform that provides a robust and scalable solution for financial institutions, enabling the management of loans, savings, customers and financial reporting

Version 0.1.1app version v1.12.1 0Artifact Hub

fineract 0.1.1 deploys 4 container images: library/nginx, apache/fineract, openmf/community-app and library/mariadb. Across them, 659 findings — 3 critical, 8 high — 3 on CISA KEV. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.9.3, fixed in 3.2.2. Chart.yaml declares kubeVersion >=1.31.0; rendered for Kubernetes 1.31.0.

Radar Score

7,79238124524

659 findings over 4 of 4 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
library/nginx	latest	0030145	1,827
apache/fineract	1.12.1	3541118	2,402
openmf/community-app	latest	033568	1,688
library/mariadb×2	11.4	0018193	1,875

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

484 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-9m3c-qcxr-9x87	tomcat-embed-core@10.1.39	10.1.53
Low	DLA-3070-1	gnutls28@3.6.7-4+deb10u5	3.6.7-4+deb10u9
Low	UBUNTU-CVE-2016-2781	coreutils@9.4-3ubuntu6.2	no fix listed
Low	DLA-3783-1	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u7
Low	GHSA-7889-rm5j-hpgg	ckeditor4@4.16.1	4.16.2
Low	DEBIAN-CVE-2025-8176	tiff@4.7.0-3+deb13u3	no fix listed
Low	GHSA-fccg-mwvh-qqg4	netty-handler@4.1.119.Final	4.1.137.Final
Low	DEBIAN-CVE-2026-9080	curl@8.14.1-2+deb13u4	no fix listed
Low	UBUNTU-CVE-2026-61109	mariadb@1:11.4.13+maria~ubu2404	no fix listed
Low	UBUNTU-CVE-2026-48962	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
Low	DEBIAN-CVE-2026-9545	curl@8.14.1-2+deb13u4	no fix listed
Low	DLA-3278-1	tiff@4.1.0+git191117-2~deb10u1	4.1.0+git191117-2~deb10u5
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.119.Final	4.1.136.Final
Low	DLA-3341-1	curl@7.64.0-4+deb10u1	7.64.0-4+deb10u5
Low	UBUNTU-CVE-2026-53803	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	UBUNTU-CVE-2026-42015	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	DEBIAN-CVE-2026-76642	util-linux@2.41.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-11822	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2
Low	DEBIAN-CVE-2026-11824	sqlite3@3.46.1-7+deb13u1	3.46.1-7+deb13u2
Low	DLA-3472-1	libx11@2:1.6.7-1+deb10u1	2:1.6.7-1+deb10u3
Low	GHSA-6cqp-g7gg-8hr5	netty-codec-http@4.1.119.Final	4.1.136.Final
Low	UBUNTU-CVE-2026-70457	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	UBUNTU-CVE-2026-60178	mariadb@1:11.4.13+maria~ubu2404	no fix listed
Low	UBUNTU-CVE-2026-60585	mariadb@1:11.4.13+maria~ubu2404	no fix listed
Low	DLA-3740-1	gnutls28@3.6.7-4+deb10u5	3.6.7-4+deb10u12
Low	GHSA-7r32-vfj5-c2jv	ckeditor4@4.16.1	4.25.0
Low	DEBIAN-CVE-2026-48961	perl@5.40.1-6	5.40.1-6+deb13u1
Low	GHSA-72hv-8253-57qq	jackson-core@2.18.3	2.18.6
Low	UBUNTU-CVE-2026-63074	openssl@3.0.13-0ubuntu3.12	3.0.13-0ubuntu3.15
Low	GHSA-m4cv-j2px-7723	netty-codec-http@4.1.119.Final	4.1.133.Final
Low	DSA-5108-1	tiff@4.1.0+git191117-2~deb10u1	4.1.0+git191117-2~deb10u4
Low	DEBIAN-CVE-2025-61144	tiff@4.7.0-3+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-6238	glibc@2.41-12+deb13u3	no fix listed
Low	UBUNTU-CVE-2026-53789	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	UBUNTU-CVE-2026-70454	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	GHSA-5gvw-p9qm-jgwh	jackson-databind@2.18.3	2.18.9
Low	GHSA-wf66-mphr-4c4r	kafka-clients@3.8.1	3.9.2
Low	DSA-4997-1	tiff@4.1.0+git191117-2~deb10u1	4.1.0+git191117-2~deb10u3
Low	GHSA-jhq6-gfmj-v8fx	logback-core@1.5.17	1.5.34
Low	DEBIAN-CVE-2026-5435	glibc@2.41-12+deb13u3	no fix listed
Low	GHSA-c2gf-v879-257j	netty-codec-http2@4.1.119.Final	4.1.135.Final
Low	DEBIAN-CVE-2026-54369	acl@2.3.2-2+b1	no fix listed
Low	DLA-3321-1	gnutls28@3.6.7-4+deb10u5	3.6.7-4+deb10u10
Low	DLA-3513-1	tiff@4.1.0+git191117-2~deb10u1	4.1.0+git191117-2~deb10u8
Low	UBUNTU-CVE-2026-7017	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
Low	ALPINE-CVE-2026-40200	musl@1.2.5-r1	1.2.5-r3
Low	GHSA-84h7-rjj3-6jx4	netty-codec-http@4.1.119.Final	4.1.129.Final
Low	DEBIAN-CVE-2021-4214	libpng1.6@1.6.48-1+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.2-3	no fix listed
Low	UBUNTU-CVE-2026-53786	rsync@3.2.7-1ubuntu1.5	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.1latest	—	v1.12.1	38124524	7,792

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/openshift/fineract.svg)](https://charts.stackradar.io/charts/openshift/fineract)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.