helloworld Helm chart

Name: helloworld Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

pauls-helm-charts

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 2.0.0 6 years agodeploys tag latest 0Artifact Hub

helloworld 2.0.0 deploys 1 container image: paulczar/spring-helloworld. Across them, 213 findings — 10 critical, 27 high — 7 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-boot-starter-web 2.1.3.RELEASE, fixed in 2.5.12.

Radar Score

5,59610279779

213 findings over 1 of 1 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
paulczar/spring-helloworld	latest	10279779	5,596

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

High findings

27 distinct across the version’s images

High: findings whose contribution to the Radar Score is 40–69. Show every band

Severity	Advisory	Package	Fixed in
High	GHSA-q4hg-rmq2-52q9	tomcat-embed-core@9.0.16	9.0.20
High	GHSA-4wrc-f8pq-fpqp	spring-web@5.1.5.RELEASE	6.0.0
High	GHSA-wmwf-9ccg-fff5	tomcat-embed-core@9.0.16	9.0.109
High	GHSA-h3gc-qfqq-6h8f	tomcat-embed-core@9.0.16	9.0.106
High	GHSA-4w82-r329-3q67	jackson-databind@2.9.8	2.9.10.3
High	GHSA-g5vr-rgqm-vf78	spring-webmvc@5.1.5.RELEASE	no fix listed
High	GHSA-hfrx-6qgj-fp6c	tomcat-embed-core@9.0.16	9.0.71
High	GHSA-344f-f5vg-2jfj	tomcat-embed-core@9.0.16	9.0.35
High	GHSA-q93h-jc49-78gg	jackson-databind@2.9.8	2.9.10.4
High	GHSA-p43x-xfjf-5jhr	jackson-databind@2.9.8	2.9.10.4
High	GHSA-qppj-fm5r-hxr3KEV	tomcat-embed-core@9.0.16	9.0.81
High	GHSA-rvwf-54qp-4r6v	snakeyaml@1.23	1.26
High	GHSA-53hp-jpwq-2jgq	tomcat-embed-core@9.0.16	9.0.35
High	GHSA-9gph-22xh-8x98	jackson-databind@2.9.8	2.9.10.8
High	GHSA-jjpq-gp5q-8q6w	tomcat-embed-core@9.0.16	9.0.17
High	GHSA-h822-r4r5-v8jg	jackson-databind@2.9.8	2.9.10
High	GHSA-558x-2xjg-6232	spring-expression@5.1.5.RELEASE	5.2.20.RELEASE
High	GHSA-7w75-32cg-r6g2	tomcat-embed-core@9.0.16	9.0.86
High	GHSA-mph4-vhrx-mv67	jackson-databind@2.9.8	2.9.9.1
High	GHSA-5ww9-j83m-q7qx	jackson-databind@2.9.8	2.9.9
High	GHSA-gww7-p5w4-wrfv	jackson-databind@2.9.8	2.9.10.2
High	GHSA-j39c-c8hj-x4j3	tomcat-embed-core@9.0.16	9.0.43
High	GHSA-6fpp-rgj9-8rwc	jackson-databind@2.9.8	2.9.9.2
High	GHSA-288c-cq4h-88gq	jackson-databind@2.9.8	2.9.10.7
High	GHSA-27hp-xhwr-wr2m	tomcat-embed-core@9.0.16	9.0.98
High	GHSA-5r5r-6hpj-8gg9	jackson-databind@2.9.8	2.9.10.8
High	DLA-2415-1KEV	freetype@2.6.3-3.2	2.6.3-3.2+deb9u2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.0.0latest	6 years ago	latest	10279779	5,596

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/pauls-helm-charts/helloworld.svg)](https://charts.stackradar.io/charts/pauls-helm-charts/helloworld)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.