fineract 0.1.1 Helm chart

Name: fineract Helm chart 0.1.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

openshift

Scored 14 Sept 2026

Apache Fineract is an open source microfinance platform that provides a robust and scalable solution for financial institutions, enabling the management of loans, savings, customers and financial reporting

Version 0.1.1app version v1.12.1 0Artifact Hub

fineract 0.1.1 deploys 4 container images: library/nginx, apache/fineract, openmf/community-app and library/mariadb. Across them, 659 findings — 3 critical, 8 high — 3 on CISA KEV. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.9.3, fixed in 3.2.2. Chart.yaml declares kubeVersion >=1.31.0; rendered for Kubernetes 1.31.0.

Radar Score

7,79238124524

659 findings over 4 of 4 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
library/nginx	latest	0030145	1,827
apache/fineract	1.12.1	3541118	2,402
openmf/community-app	latest	033568	1,688
library/mariadb×2	11.4	0018193	1,875

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

484 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DLA-3439-1	libwebp@0.6.1-2	0.6.1-2+deb10u2
Low	DEBIAN-CVE-2026-89158	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	UBUNTU-CVE-2026-53801	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	DEBIAN-CVE-2013-4392	systemd@257.13-1~deb13u1	no fix listed
Low	GHSA-3chg-m5w7-qfv5	spring-webmvc@6.2.5	6.2.19
Low	GHSA-2827-2mxx-j8pv	spring-retry@2.0.11	2.0.13
Low	UBUNTU-CVE-2025-29481	libbpf@1:1.3.0-2build2	no fix listed
Low	UBUNTU-CVE-2026-78408	util-linux@2.39.3-9ubuntu6.5	no fix listed
Low	UBUNTU-CVE-2026-53794	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.18.3	2.18.8
Low	UBUNTU-CVE-2026-41989	libgcrypt20@1.10.3-2ubuntu0.1	1.12.0-2ubuntu0.1~Fips1~rc11
Low	GHSA-wxpp-56q6-5pcg	spring-expression@6.2.5	6.2.19
Low	UBUNTU-CVE-2026-13595	util-linux@2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
Low	UBUNTU-CVE-2026-47052	mariadb@1:11.4.13+maria~ubu2404	no fix listed
Low	GO-2026-4981	stdlib@go1.24.6	1.25.10
Low	DEBIAN-CVE-2023-31439	systemd@257.13-1~deb13u1	no fix listed
Low	UBUNTU-CVE-2026-60183	mariadb@1:11.4.13+maria~ubu2404	no fix listed
Low	UBUNTU-CVE-2026-60331	mariadb@1:11.4.13+maria~ubu2404	no fix listed
Low	UBUNTU-CVE-2026-60332	mariadb@1:11.4.13+maria~ubu2404	no fix listed
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.18.3	2.18.9
Low	GO-2026-4977	stdlib@go1.24.6	1.25.10
Low	DEBIAN-CVE-2026-76957	expat@2.8.3-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2023-31437	systemd@257.13-1~deb13u1	no fix listed
Low	GHSA-6p4f-wcwh-5vvm	spring-webmvc@6.2.5	6.2.18
Low	GO-2026-4986	stdlib@go1.24.6	1.25.10
Low	GO-2026-4918	stdlib@go1.24.6	1.25.10
Low	UBUNTU-CVE-2023-52968	mariadb@1:11.4.13+maria~ubu2404	no fix listed
Low	GO-2026-4337	stdlib@go1.24.6	1.24.13
Low	DEBIAN-CVE-2023-31438	systemd@257.13-1~deb13u1	no fix listed
Low	UBUNTU-CVE-2026-60145	mariadb@1:11.4.13+maria~ubu2404	no fix listed
Low	GHSA-wwpq-f5c3-7hvx	spring-boot@3.4.4	no fix listed
Low	GO-2026-4601	stdlib@go1.24.6	1.25.8
Low	UBUNTU-CVE-2026-53798	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	UBUNTU-CVE-2026-60747	mariadb@1:11.4.13+maria~ubu2404	no fix listed
Low	GHSA-gcjf-9mgh-3p7g	netty-codec-http@4.1.119.Final	4.1.136.Final
Low	GHSA-v8h7-rr48-vmmv	netty-codec-http@4.1.119.Final	4.1.133.Final
Low	GHSA-g9jj-cgmh-9f38	mariadb-java-client@3.5.2	3.5.9
Low	UBUNTU-CVE-2026-78410	util-linux@2.39.3-9ubuntu6.5	no fix listed
Low	GHSA-563q-j3cm-6jxm	netty-codec-http2@4.1.119.Final	4.1.135.Final
Low	DEBIAN-CVE-2026-89161	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	GO-2026-5026	stdlib@go1.24.6	1.25.13
Low	UBUNTU-CVE-2026-44171	mariadb@1:11.4.13+maria~ubu2404	no fix listed
Low	GHSA-5x3r-wrvg-rp6q	netty-codec-http2@4.1.119.Final	4.1.135.Final
Low	DEBIAN-CVE-2026-86142	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	UBUNTU-CVE-2026-42014	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	GO-2026-4342	stdlib@go1.24.6	1.24.12
Low	UBUNTU-CVE-2026-78409	util-linux@2.39.3-9ubuntu6.5	no fix listed
Low	GHSA-293q-567p-wmwq	spring-security-web@6.4.4	no fix listed
Low	DLA-3602-1	libx11@2:1.6.7-1+deb10u1	2:1.6.7-1+deb10u4
Low	GHSA-qxvw-fvwx-5cp7	mariadb-java-client@3.5.2	3.5.9

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.1latest	—	v1.12.1	38124524	7,792

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/openshift/fineract.svg)](https://charts.stackradar.io/charts/openshift/fineract)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.