todo-api 0.1.0 Helm chart

Name: todo-api Helm chart 0.1.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

pb-todo-api-v1

Scored 14 Sept 2026

A Helm chart for Kubernetes

Version 0.1.0 2 years agodeploys tag 7.0.8-debian-12-r2 0Artifact Hub

todo-api 0.1.0 deploys 2 container images: bitnami/mongodb and pavanelthepu/todo-api. Across the 1 measured, 120 findings — 5 critical, 11 high — 4 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-beans 5.3.8, fixed in 5.3.18.

Radar Score

2,5445114460

120 findings over 1 of 2 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
bitnami/mongodb	7.0.8-debian-12-r2	—	unmeasured
pavanelthepu/todo-api	1.0.2	5114460	2,544

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

120 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GHSA-3x8x-79m2-3w2w	jackson-databind@2.12.3	2.12.6
Medium	GHSA-rmj7-2vxq-3g9f	jackson-databind@2.12.3	2.18.8
Medium	GHSA-wxqc-pxw9-g2p8	spring-expression@5.3.8	5.3.27
Medium	GHSA-j3rv-43j4-c7qm	jackson-databind@2.12.3	2.18.8
Medium	GHSA-gcx9-497g-6cp6	tomcat-embed-core@9.0.48	9.0.121
Medium	GHSA-h46c-h94j-95f3	jackson-core@2.12.3	2.15.0
Medium	GHSA-w37g-rhq8-7m4j	snakeyaml@1.28	1.32
Medium	GHSA-r936-gwx5-v52f	spring-webmvc@5.3.8	no fix listed
Medium	GHSA-xf96-w227-r7c4	spring-boot-autoconfigure@2.5.2	2.5.15
Medium	GHSA-gx5v-xp9w-j4cg	tomcat-embed-core@9.0.48	9.0.118
Low	GHSA-vmq6-5m68-f53m	logback-core@1.2.3	1.2.13
Low	GHSA-vmq6-5m68-f53m	logback-classic@1.2.3	1.2.13
Low	GHSA-g8pj-r55q-5c2v	tomcat-embed-core@9.0.48	9.0.81
Low	GHSA-564r-hj7v-mcr5	spring-expression@5.3.8	5.3.26
Low	GHSA-3wrr-7qpf-2prh	jackson-databind@2.12.3	2.14.0
Low	GHSA-fv25-8xcx-gqjc	tomcat-embed-core@9.0.48	9.0.118
Low	GHSA-23hv-mwm6-g8jf	tomcat-embed-core@9.0.48	9.0.106
Low	GHSA-563x-q5rq-57qp	tomcat-embed-core@9.0.48	9.0.116
Low	GHSA-hhhw-99gj-p3c3	snakeyaml@1.28	1.31
Low	GHSA-qv9r-c865-cp47	log4j-api@2.14.1	2.25.5
Low	GHSA-5mp6-jrq3-r938	tomcat-embed-core@9.0.48	9.0.118
Low	GHSA-jmp9-x22r-554x	spring-core@5.3.8	no fix listed
Low	GHSA-rv64-5gf8-9qq8	tomcat-embed-core@9.0.48	9.0.116
Low	GHSA-x4m4-345f-5h5g	tomcat-embed-core@9.0.48	9.0.117
Low	GHSA-fpj8-gq4v-p354	tomcat-embed-core@9.0.48	9.0.113
Low	GHSA-5whc-4q84-fj73	spring-data-mongodb@3.2.2	no fix listed
Low	GHSA-hgrr-935x-pq79	tomcat-embed-core@9.0.48	9.0.110
Low	GHSA-x23c-287f-qqv5	spring-webmvc@5.3.8	no fix listed
Low	GHSA-rc42-6c7j-7h5r	spring-boot@2.5.2	no fix listed
Low	GHSA-42wg-hm62-jcwg	tomcat-embed-core@9.0.48	9.0.106
Low	GHSA-9fw2-h3hf-293r	spring-data-commons@2.5.2	no fix listed
Low	GHSA-r5w3-xv2f-j59q	spring-expression@5.3.8	no fix listed
Low	GHSA-2rmj-mq67-h97g	spring-web@5.3.8	5.3.38
Low	GHSA-9m3c-qcxr-9x87	tomcat-embed-core@9.0.48	9.0.116
Low	GHSA-775g-4xr8-78h8	spring-expression@5.3.8	no fix listed
Low	GHSA-rfmp-97jj-h8m6	spring-core@5.3.8	5.3.11
Low	GHSA-w3c8-7r8f-9jp8	spring-webmvc@5.3.8	5.3.42
Low	GHSA-pr98-23f8-jwxv	logback-core@1.2.3	1.3.15
Low	GHSA-jhq6-gfmj-v8fx	logback-core@1.2.3	1.5.34
Low	GHSA-4gc7-5j7h-4qph	spring-web@5.3.8	no fix listed
Low	GHSA-4gc7-5j7h-4qph	spring-context@5.3.8	no fix listed
Low	GHSA-4773-3jfm-qmx3	spring-webmvc@5.3.8	no fix listed
Low	GHSA-72pg-x5f8-j25j	spring-webmvc@5.3.8	no fix listed
Low	GHSA-mq64-j8f9-9gcj	spring-webmvc@5.3.8	no fix listed
Low	GHSA-5m4m-73w9-8433	spring-data-commons@2.5.2	no fix listed
Low	GHSA-6gf2-pvqw-37ph	spring-core@5.3.8	5.3.14
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.12.3	2.18.8
Low	GHSA-5vpf-xvv7-c8vh	spring-data-commons@2.5.2	no fix listed
Low	GHSA-3chg-m5w7-qfv5	spring-webmvc@5.3.8	no fix listed
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.12.3	2.18.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.1.0latest	2 years ago	7.0.8-debian-12-r2	5114460	2,544

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/pb-todo-api-v1/todo-api.svg)](https://charts.stackradar.io/charts/pb-todo-api-v1/todo-api)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.