dfdewey Helm chart

Name: dfdewey Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

osdfir-infrastructure

Scored 14 Sept 2026

A Helm chart for dfDewey datastore Kubernetes deployments.

Latest 1.0.0 2 years agodeploys tag 2.12.0 0Artifact Hub

dfdewey 1.0.0 deploys 3 container images: library/busybox, opensearchproject/opensearch and bitnami/postgresql. Across the 2 measured, 92 findings — 0 critical, 1 high. The highest contribution is GHSA-vgq5-3255-v292 in kafka-clients 3.5.1, fixed in 3.9.1.

Radar Score

1,190011873

92 findings over 2 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox×2	latest	0000	0
opensearchproject/opensearch×2	2.12.0	011873	1,190
bitnami/postgresql	16.2.0-debian-12-r6	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

92 distinct across the version’s images

Severity	Advisory	Package	Fixed in
High	GHSA-vgq5-3255-v292	kafka-clients@3.5.1	3.9.1
Medium	GHSA-wxr5-93ph-8wr9	commons-beanutils@1.9.4	1.11.0
Medium	GHSA-4g8c-wm8x-jfhw	netty-handler@4.1.106.Final	4.1.118.Final
Medium	GHSA-fh5r-crhr-qrrq	cxf-core@4.0.3	4.0.6
Medium	GHSA-p93r-85wp-75v3	bcprov-jdk15to18@1.76	1.80.2
Medium	GHSA-w9fj-cfpg-grvv	netty-codec-http2@4.1.106.Final	4.1.132.Final
Medium	GHSA-j288-q9x7-2f5v	commons-lang3@3.12.0	3.18.0
Medium	GHSA-j288-q9x7-2f5v	commons-lang@2.6	no fix listed
Medium	GHSA-78wr-2p64-hpwj	commons-io@2.8.0	2.14.0
Medium	GHSA-3qp7-7mw8-wx86	netty-handler@4.1.106.Final	4.1.135.Final
Medium	GHSA-rmj7-2vxq-3g9f	jackson-databind@2.16.1	2.18.8
Medium	GHSA-j3rv-43j4-c7qm	jackson-databind@2.16.1	2.18.8
Medium	GHSA-prj3-ccx8-p6x4	netty-codec-http2@4.1.106.Final	4.1.124.Final
Medium	GHSA-f6hv-jmp6-3vwv	netty-codec-http@4.1.106.Final	4.1.133.Final
Medium	GHSA-f6hv-jmp6-3vwv	netty-codec-http2@4.1.106.Final	4.1.133.Final
Medium	GHSA-jppx-w49h-x2qq	netty-codec-http@4.1.106.Final	4.1.136.Final
Medium	GHSA-hf6x-8p5f-cgmf	httpcore5@5.2.2	5.4.3
Medium	GHSA-x4gw-5cx5-pgmh	netty-handler@4.1.106.Final	4.1.135.Final
Medium	GHSA-2x2g-32r7-p4x8	kafka-clients@3.5.1	3.7.1
Low	GHSA-3pxv-7cmr-fjr4	log4j-core@2.21.0	2.25.4
Low	GHSA-445c-vh5m-36rj	log4j-core@2.21.0	2.25.4
Low	GHSA-v6w3-2prq-h95f	javax.el@3.0.0	no fix listed
Low	GHSA-57rv-r2g8-2cj3	netty-codec-http@4.1.106.Final	4.1.133.Final
Low	GHSA-mw3v-mmfw-3x2g	opensearch-common@2.12.0	2.19.4
Low	GHSA-5qcv-4rpc-jp93	kafka-clients@3.5.1	3.9.2
Low	GHSA-pwqr-wmgm-9rr8	netty-codec-http@4.1.106.Final	4.1.132.Final
Low	GHSA-45q3-82m4-75jr	netty-handler-proxy@4.1.106.Final	4.1.133.Final
Low	GHSA-574f-3g2m-x479	bcprov-jdk15to18@1.76	no fix listed
Low	GHSA-574f-3g2m-x479	bcprov-ext-jdk18on@1.75	no fix listed
Low	GHSA-574f-3g2m-x479	bcprov-jdk18on@1.77	1.80.2
Low	GHSA-pq2g-wx69-c263	json-smart@2.5.0	2.5.2
Low	GHSA-c4c3-7fpv-j4q5	netty-handler@4.1.106.Final	4.1.137.Final
Low	GHSA-5jpm-x58v-624v	netty-codec-http@4.1.106.Final	4.1.108.Final
Low	GHSA-qv9r-c865-cp47	log4j-api@2.21.0	2.25.5
Low	GHSA-3p8m-j85q-pgmj	netty-codec@4.1.106.Final	4.1.125.Final
Low	GHSA-mj4r-2hfc-f8p6	netty-codec@4.1.106.Final	4.1.133.Final
Low	GHSA-ghvc-7hp8-2g2v	cxf-core@4.0.3	4.1.7
Low	GHSA-c653-97m9-rcg9	netty-handler@4.1.106.Final	4.1.135.Final
Low	GHSA-vc5p-v9hr-52mj	log4j-core@2.21.0	2.25.3
Low	GHSA-93wv-jw9v-4972	netty-codec-http2@4.1.106.Final	4.1.136.Final
Low	GHSA-6jqx-86gh-f27w	netty-codec-http@4.1.106.Final	4.1.136.Final
Low	GHSA-v435-xc8x-wvr9	bcprov-jdk18on@1.77	1.78
Low	GHSA-v435-xc8x-wvr9	bcprov-jdk15to18@1.76	1.78
Low	GHSA-mvh2-crg5-v77c	netty-codec-http@4.1.106.Final	4.1.136.Final
Low	GHSA-558v-64gr-wgg4	netty-codec@4.1.106.Final	4.1.136.Final
Low	GHSA-c3fc-8qff-9hwx	bcprov-jdk18on@1.77	1.84
Low	GHSA-c3fc-8qff-9hwx	bcprov-jdk15to18@1.76	1.84
Low	GHSA-xwmg-2g98-w7v9	nimbus-jose-jwt@9.37.3	9.37.4
Low	GHSA-8xfc-gm6g-vgpv	bc-fips@1.0.2.4	1.0.2.5
Low	GHSA-8xfc-gm6g-vgpv	bcprov-jdk18on@1.77	1.78

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.0latest	2 years ago	2.12.0	011873	1,190

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/osdfir-infrastructure/dfdewey.svg)](https://charts.stackradar.io/charts/osdfir-infrastructure/dfdewey)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.