StackRadar

todo-api Helm chart

pavanelthepu

Scored 14 Sept 2026

A Helm chart for Kubernetes

Latest 0.1.0 3 years agodeploys tag 6.0.8-debian-11-r12 1Artifact Hub

todo-api 0.1.0 deploys 2 container images: bitnami/mongodb and pavanelthepu/todo-api. Across the 1 measured, 120 findings5 critical, 11 high 4 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-beans 5.3.8, fixed in 5.3.18.

Radar Score

2,5445114460

120 findings over 1 of 2 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
bitnami/mongodb6.0.8-debian-11-r12unmeasured
pavanelthepu/todo-api1.0.251144602,544

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

60 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGHSA-9m89-8frq-c98ctomcat-embed-core@9.0.489.0.118
LowGHSA-659m-px2c-25wjspring-core@5.3.8no fix listed
LowGHSA-4wp7-92pw-q264spring-context@5.3.8no fix listed
LowGHSA-h3qp-gqrc-q736spring-webmvc@5.3.8no fix listed
LowGHSA-9f52-rjqv-25qvspring-expression@5.3.8no fix listed
LowGHSA-wg35-8jpf-2xv3spring-webmvc@5.3.8no fix listed
LowGHSA-p47f-322f-whfhlogback-core@1.2.31.5.33
LowGHSA-6v67-2wr5-gvf4logback-core@1.2.31.3.15
LowGHSA-6hcq-hmm3-jj3cspring-webmvc@5.3.8no fix listed
LowGHSA-qqpg-mvqg-649vlogback-core@1.2.31.5.25

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.0latest3 years ago6.0.8-debian-11-r1251144602,544

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/pavanelthepu/todo-api.svg)](https://charts.stackradar.io/charts/pavanelthepu/todo-api)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.