fineract Helm chart

Name: fineract Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

openshift

Scored 14 Sept 2026

Apache Fineract is an open source microfinance platform that provides a robust and scalable solution for financial institutions, enabling the management of loans, savings, customers and financial reporting

Latest 0.1.1app version v1.12.1 0Artifact Hub

fineract 0.1.1 deploys 4 container images: library/nginx, apache/fineract, openmf/community-app and library/mariadb. Across them, 659 findings — 3 critical, 8 high — 3 on CISA KEV. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.9.3, fixed in 3.2.2. Chart.yaml declares kubeVersion >=1.31.0; rendered for Kubernetes 1.31.0.

Radar Score

7,79238124524

659 findings over 4 of 4 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
library/nginx	latest	0030145	1,827
apache/fineract	1.12.1	3541118	2,402
openmf/community-app	latest	033568	1,688
library/mariadb×2	11.4	0018193	1,875

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

484 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-12064	curl@8.14.1-2+deb13u4	no fix listed
Low	GHSA-x23c-287f-qqv5	spring-webmvc@6.2.5	6.2.19
Low	DEBIAN-CVE-2026-8932	curl@8.14.1-2+deb13u4	no fix listed
Low	GHSA-xwmg-2g98-w7v9	nimbus-jose-jwt@9.37.3	9.37.4
Low	DEBIAN-CVE-2026-8286	curl@8.14.1-2+deb13u4	no fix listed
Low	GHSA-6r3c-xf4w-jxjm	spring-web@6.2.5	6.2.8
Low	UBUNTU-CVE-2026-75803	openssl@3.0.13-0ubuntu3.12	3.0.13-0ubuntu3.15
Low	GHSA-rc42-6c7j-7h5r	spring-boot@3.4.4	3.4.5
Low	GHSA-fq6h-4g8v-qqvm	ckeditor4@4.16.1	4.24.0-lts
Low	ALPINE-CVE-2025-15468	openssl@3.3.4-r0	3.3.6-r0
Low	UBUNTU-CVE-2026-53793	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	DEBIAN-CVE-2026-58051	libssh2@1.11.1-1+deb13u1	1.11.1-1+deb13u2
Low	GHSA-42wg-hm62-jcwg	tomcat-embed-core@10.1.39	10.1.42
Low	UBUNTU-CVE-2026-48959	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
Low	DLA-3165-1	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u6
Low	DEBIAN-CVE-2026-5928	glibc@2.41-12+deb13u3	2.41-12+deb13u4
Low	UBUNTU-CVE-2026-3833	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	UBUNTU-CVE-2026-60163	mariadb@1:11.4.13+maria~ubu2404	no fix listed
Low	UBUNTU-CVE-2026-60081	libdbi-perl@1.643-4ubuntu0.1	no fix listed
Low	GHSA-88fw-v6x4-3f58	spring-data-commons@3.4.4	no fix listed
Low	GHSA-9fw2-h3hf-293r	spring-data-commons@3.4.4	no fix listed
Low	GHSA-x863-p983-p4f7	spring-jms@6.2.5	6.2.19
Low	GHSA-r5w3-xv2f-j59q	spring-expression@6.2.5	6.2.19
Low	UBUNTU-CVE-2026-6791	glibc@2.39-0ubuntu8.8	2.39-0ubuntu8.9
Low	UBUNTU-CVE-2026-60315	mariadb@1:11.4.13+maria~ubu2404	no fix listed
Low	DEBIAN-CVE-2026-8458	curl@8.14.1-2+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-33164	libde265@1.0.15-1+deb13u1	1.0.15-1+deb13u2
Low	DLA-3782-1	util-linux@2.33.1-0.1	2.33.1-0.1+deb10u1
Low	DLA-3586-1	ncurses@6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u4
Low	DLA-3692-1	curl@7.64.0-4+deb10u1	7.64.0-4+deb10u8
Low	DSA-4782-1	openldap@2.4.47+dfsg-3+deb10u2	2.4.47+dfsg-3+deb10u3
Low	DLA-3119-1	expat@2.2.6-2+deb10u1	2.2.6-2+deb10u5
Low	UBUNTU-CVE-2026-60316	mariadb@1:11.4.13+maria~ubu2404	no fix listed
Low	DLA-3763-1	curl@7.64.0-4+deb10u1	7.64.0-4+deb10u9
Low	DLA-3263-1	libtasn1-6@4.13-3	4.13-3+deb10u1
Low	DLA-3758-1	tiff@4.1.0+git191117-2~deb10u1	4.1.0+git191117-2~deb10u9
Low	GO-2026-4341	stdlib@go1.24.6	1.24.12
Low	DEBIAN-CVE-2026-9547	curl@8.14.1-2+deb13u4	no fix listed
Low	GHSA-j92g-9f8w-j867	postgresql@42.7.4	42.7.12
Low	DEBIAN-CVE-2025-8177	tiff@4.7.0-3+deb13u3	no fix listed
Low	DEBIAN-CVE-2021-45346	sqlite3@3.46.1-7+deb13u1	no fix listed
Low	DEBIAN-CVE-2025-8941	pam@1.7.0-5	no fix listed
Low	DLA-3398-1	curl@7.64.0-4+deb10u1	7.64.0-4+deb10u6
Low	DEBIAN-CVE-2025-70873	sqlite3@3.46.1-7+deb13u1	no fix listed
Low	UBUNTU-CVE-2026-42012	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	UBUNTU-CVE-2026-57432	perl@5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
Low	DSA-4869-1	tiff@4.1.0+git191117-2~deb10u1	4.1.0+git191117-2~deb10u2
Low	GHSA-xxqh-mfjm-7mv9	netty-codec-http@4.1.119.Final	4.1.133.Final
Low	DEBIAN-CVE-2024-26458	krb5@1.21.3-5+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-76956	expat@2.8.3-1~deb13u1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.1latest	—	v1.12.1	38124524	7,792

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/openshift/fineract.svg)](https://charts.stackradar.io/charts/openshift/fineract)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.