fineract Helm chart

Name: fineract Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

openshift

Scored 14 Sept 2026

Apache Fineract is an open source microfinance platform that provides a robust and scalable solution for financial institutions, enabling the management of loans, savings, customers and financial reporting

Latest 0.1.1app version v1.12.1 0Artifact Hub

fineract 0.1.1 deploys 4 container images: library/nginx, apache/fineract, openmf/community-app and library/mariadb. Across them, 659 findings — 3 critical, 8 high — 3 on CISA KEV. The highest contribution is GHSA-f58c-gq56-vjjf in tika-core 2.9.3, fixed in 3.2.2. Chart.yaml declares kubeVersion >=1.31.0; rendered for Kubernetes 1.31.0.

Radar Score

7,79238124524

659 findings over 4 of 4 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
library/nginx	latest	0030145	1,827
apache/fineract	1.12.1	3541118	2,402
openmf/community-app	latest	033568	1,688
library/mariadb×2	11.4	0018193	1,875

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

619 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-27171	zlib@1.3.1-r1	1.3.2-r0
Low	DEBIAN-CVE-2026-27171	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed
Low	DEBIAN-CVE-2017-14159	openldap@2.6.10+dfsg-1	no fix listed
Low	DEBIAN-CVE-2026-50813	sqlite3@3.46.1-7+deb13u1	no fix listed
Low	GO-2026-5038	stdlib@go1.24.6	1.25.11
Low	DEBIAN-CVE-2017-18018	coreutils@9.7-3	no fix listed
Low	DEBIAN-CVE-2026-86139	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	UBUNTU-CVE-2026-13757	p11-kit@0.25.3-4ubuntu2.1	0.25.3-4ubuntu2.2
Low	UBUNTU-CVE-2026-53799	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	GHSA-hvcg-qmg6-jm4c	netty-codec-http@4.1.119.Final	4.1.135.Final
Low	DEBIAN-CVE-2026-11850	krb5@1.21.3-5+deb13u1	no fix listed
Low	DEBIAN-CVE-2025-66382	expat@2.8.3-1~deb13u1	no fix listed
Low	GO-2025-4012	stdlib@go1.24.6	1.24.8
Low	GHSA-h2h4-5m64-m273	activemq-client@6.1.6	6.2.2
Low	UBUNTU-CVE-2026-53796	rsync@3.2.7-1ubuntu1.5	no fix listed
Low	GO-2025-4011	stdlib@go1.24.6	1.24.8
Low	GO-2025-4015	stdlib@go1.24.6	1.24.8
Low	GO-2026-6218	stdlib@go1.24.6	1.25.13
Low	DEBIAN-CVE-2026-56392	coreutils@9.7-3	no fix listed
Low	DEBIAN-CVE-2026-54370	acl@2.3.2-2+b1	no fix listed
Low	DEBIAN-CVE-2005-2541	tar@1.35+dfsg-3.1	no fix listed
Low	DEBIAN-CVE-2025-10966	curl@8.14.1-2+deb13u4	no fix listed
Low	GHSA-957g-f97v-vppc	spring-webmvc@6.2.5	6.2.19
Low	UBUNTU-CVE-2026-15534	perl@5.38.2-3.2ubuntu0.3	no fix listed
Low	GHSA-cvc6-q2cp-2xhw	spring-security-oauth2-jose@6.4.4	no fix listed
Low	UBUNTU-CVE-2026-47012	mariadb@1:11.4.13+maria~ubu2404	no fix listed
Low	UBUNTU-CVE-2026-60177	mariadb@1:11.4.13+maria~ubu2404	no fix listed
Low	UBUNTU-CVE-2026-60182	mariadb@1:11.4.13+maria~ubu2404	no fix listed
Low	UBUNTU-CVE-2026-60184	mariadb@1:11.4.13+maria~ubu2404	no fix listed
Low	UBUNTU-CVE-2026-60185	mariadb@1:11.4.13+maria~ubu2404	no fix listed
Low	UBUNTU-CVE-2026-60186	mariadb@1:11.4.13+maria~ubu2404	no fix listed
Low	UBUNTU-CVE-2026-60187	mariadb@1:11.4.13+maria~ubu2404	no fix listed
Low	DEBIAN-CVE-2026-56391	coreutils@9.7-3	no fix listed
Low	GO-2025-4155	stdlib@go1.24.6	1.24.11
Low	DEBIAN-CVE-2025-14017	curl@8.14.1-2+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-33165	libde265@1.0.15-1+deb13u1	1.0.15-1+deb13u2
Low	DEBIAN-CVE-2025-10911	libxslt@1.1.35-1.2+deb13u3	no fix listed
Low	DLA-3297-1	tiff@4.1.0+git191117-2~deb10u1	4.1.0+git191117-2~deb10u6
Low	DEBIAN-CVE-2026-86144	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	GO-2025-4008	stdlib@go1.24.6	1.24.8
Low	GO-2025-4010	stdlib@go1.24.6	1.24.8
Low	UBUNTU-CVE-2026-60189	mariadb@1:11.4.13+maria~ubu2404	no fix listed
Low	GHSA-cjpg-rgq5-fr37	spring-webmvc@6.2.5	6.2.19
Low	DSA-4850-1	libzstd@1.3.8+dfsg-3	1.3.8+dfsg-3+deb10u1
Low	UBUNTU-CVE-2024-10041	pam@1.5.3-5ubuntu5.6	no fix listed
Low	GHSA-mhm7-754m-9p8w	jackson-databind@2.18.3	2.18.9
Low	DLA-3333-1	tiff@4.1.0+git191117-2~deb10u1	4.1.0+git191117-2~deb10u7
Low	DLA-3474-1	systemd@241-7~deb10u4	241-7~deb10u10
Low	DEBIAN-CVE-2026-50812	sqlite3@3.46.1-7+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-18495	tiff@4.7.0-3+deb13u3	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.1latest	—	v1.12.1	38124524	7,792

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/openshift/fineract.svg)](https://charts.stackradar.io/charts/openshift/fineract)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.