timesketch 1.0.8 Helm chart

Name: timesketch Helm chart 1.0.8: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

osdfir-infrastructure

Scored 14 Sept 2026

A Helm chart for Timesketch Kubernetes deployments.

Version 1.0.8 1 year agoapp version 20240828 0Artifact Hub

timesketch 1.0.8 deploys 6 container images: alpine/git, us-docker.pkg.dev/osdfir-registry/timesketch/timesketch, library/busybox, opensearchproject/opensearch and 2 more. Across the 3 measured, 143 findings — 0 critical, 3 high. The highest contribution is GHSA-vgq5-3255-v292 in kafka-clients 3.7.0, fixed in 3.9.1.

Radar Score

1,7530327113

143 findings over 3 of 6 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
alpine/git×2	latest	02950	680
us-docker.pkg.dev/osdfir-registry/timesketch/timesketch×2	20240828	—	unmeasured
library/busybox×2	latest	0000	0
opensearchproject/opensearch×2	2.14.0	011863	1,073
bitnami/postgresql	16.3.0-debian-12-r6	—	unmeasured
bitnami/redis	7.2.4-debian-12-r16	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

113 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-36wv-v2qp-v4g4	cxf-core@4.0.4	4.0.7
Low	GHSA-m44j-cfrm-g8qc	bcprov-jdk15to18@1.75	1.78
Low	GHSA-q4f6-jm68-57ww	netty-codec-http@4.1.109.Final	4.1.136.Final
Low	GHSA-6cqp-g7gg-8hr5	netty-codec-http@4.1.109.Final	4.1.136.Final
Low	GHSA-6hg6-v5c8-fphq	log4j-core@2.21.0	2.25.4
Low	GHSA-72hv-8253-57qq	jackson-core@2.17.0	2.18.6
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-m4cv-j2px-7723	netty-codec-http@4.1.109.Final	4.1.133.Final
Low	GHSA-wf66-mphr-4c4r	kafka-clients@3.7.0	3.9.2
Low	GHSA-c2gf-v879-257j	netty-codec-http2@4.1.109.Final	4.1.135.Final
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.54.0	0.55.0
Low	GHSA-84h7-rjj3-6jx4	netty-codec-http@4.1.109.Final	4.1.129.Final
Low	GHSA-3pjw-73gf-8qr5	jackson-databind@2.17.0	2.18.8
Low	ALPINE-CVE-2026-60001	openssh@10.3_p1-r0	10.3_p1-r1
Low	GHSA-c69g-56f8-xwqj	netty-codec-http2@4.1.109.Final	4.1.136.Final
Low	GHSA-38f8-5428-x5cv	netty-codec-http@4.1.109.Final	4.1.133.Final
Low	GHSA-xq3w-v528-46rv	netty-common@4.1.109.Final	4.1.115.Final
Low	GHSA-8c42-7qj2-3j46	netty-codec-http@4.1.109.Final	4.1.137.Final
Low	ALPINE-CVE-2026-59999	openssh@10.3_p1-r0	10.3_p1-r1
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.17.0	2.18.8
Low	GHSA-389x-839f-4rhx	netty-common@4.1.109.Final	4.1.118.Final
Low	GHSA-4mp9-239f-g9hg	netty-codec-http@4.1.109.Final	4.1.136.Final
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.17.0	2.18.8
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.17.0	2.18.9
Low	ALPINE-CVE-2026-76957	expat@2.8.3-r0	2.8.4-r0
Low	ALPINE-CVE-2026-59998	openssh@10.3_p1-r0	10.3_p1-r1
Low	GHSA-gcjf-9mgh-3p7g	netty-codec-http@4.1.109.Final	4.1.136.Final
Low	GHSA-v8h7-rr48-vmmv	netty-codec-http@4.1.109.Final	4.1.133.Final
Low	GHSA-563q-j3cm-6jxm	netty-codec-http2@4.1.109.Final	4.1.135.Final
Low	GO-2026-5026	golang.org/x/net@v0.54.0	0.55.0
Low	GO-2026-5026	stdlib@go1.26.3	1.25.13
Low	GHSA-5x3r-wrvg-rp6q	netty-codec-http2@4.1.109.Final	4.1.135.Final
Low	ALPINE-CVE-2026-59995	openssh@10.3_p1-r0	10.3_p1-r1
Low	ALPINE-CVE-2026-59996	openssh@10.3_p1-r0	10.3_p1-r1
Low	GO-2026-5037	stdlib@go1.26.3	1.25.11
Low	GO-2026-5972	stdlib@go1.26.3	1.25.13
Low	GO-2026-6088	stdlib@go1.26.3	1.25.13
Low	GO-2026-6089	stdlib@go1.26.3	1.25.13
Low	GO-2026-6090	stdlib@go1.26.3	1.25.13
Low	GO-2026-5038	stdlib@go1.26.3	1.25.11
Low	GO-2026-5942	stdlib@go1.26.3	1.26.6
Low	GO-2026-5942	golang.org/x/net@v0.54.0	0.56.0
Low	GHSA-hvcg-qmg6-jm4c	netty-codec-http@4.1.109.Final	4.1.135.Final
Low	GO-2026-6218	stdlib@go1.26.3	1.25.13
Low	GO-2026-5970	golang.org/x/text@v0.37.0	0.39.0
Low	ALPINE-CVE-2026-59997	openssh@10.3_p1-r0	10.3_p1-r1
Low	GO-2026-5856	stdlib@go1.26.3	1.25.12
Low	GO-2026-6355	golang.org/x/crypto@v0.52.0	0.56.0
Low	GO-2026-5039	stdlib@go1.26.3	1.25.11
Low	GO-2026-6303	golang.org/x/crypto@v0.52.0	0.55.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.8latest	1 year ago	20240828	0327113	1,753

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/osdfir-infrastructure/timesketch.svg)](https://charts.stackradar.io/charts/osdfir-infrastructure/timesketch)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.