StackRadar

solr Helm chart

preferred-aiVerified publisher

Scored 14 Sept 2026

A helm chart to install Apache Solr: http://lucene.apache.org/solr/

Latest 3.2.0 5 years agoapp version 8.7.0 5Artifact Hub

solr 3.2.0 deploys 3 container images: bitnami/zookeeper, library/busybox and library/solr. Across the 2 measured, 252 findings — 10 critical, 26 high — 7 on CISA KEV. The highest contribution is GHSA-jfh8-c2jp-5v3q in log4j-core 2.13.2, fixed in 2.15.0.

Radar Score

6,0481026104112

252 findings over 2 of 3 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
bitnami/zookeeper3.6.2-debian-10-r37—unmeasured
library/busyboxstable-glibc00000
library/solr×28.7.010261041126,048

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

252 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumGHSA-rgv9-q543-rqg4jackson-databind@2.4.02.12.7.1
MediumGHSA-735f-pc8j-v9w8protobuf-java@3.11.03.25.5
MediumDSA-5218-1zlib@1:1.2.11.dfsg-2+deb11u11:1.2.11.dfsg-2+deb11u2
MediumGHSA-gwrp-pvrq-jmwvcommons-io@2.52.7
MediumGHSA-mvr2-9pj6-7w5jguava@18.024.1.1-android
MediumGHSA-wgmr-mf83-7x4jhttp2-server@9.4.27.v202002279.4.47
MediumGHSA-86wm-rrjm-8wh8jetty-server@9.4.27.v202002279.4.35.v20201120
MediumGHSA-68r2-fwcg-qpm8solr-core@8.7.09.8.0
MediumGHSA-qcwq-55hx-v3vhsnappy-java@1.1.7.61.1.10.1
MediumGHSA-wrvw-hg22-4m67protobuf-java@3.11.03.16.1
MediumGHSA-6mjq-h674-j845netty-handler@4.1.50.Final4.1.94.Final
MediumGHSA-cx4m-2p55-rw7jopennlp-tools@1.9.21.9.5
MediumGHSA-xrj7-x7gp-wwqrsolr-solrj@8.7.08.11.3
MediumGHSA-j288-q9x7-2f5vcommons-lang@2.6no fix listed
MediumGHSA-j288-q9x7-2f5vcommons-lang3@3.103.18.0
MediumGHSA-rggv-cv7r-mw98http2-common@9.4.27.v202002279.4.54
MediumGHSA-fg3j-q579-v8x4pdfbox@2.0.192.0.24
MediumGHSA-xjp4-hw94-mvp5commons-configuration2@2.1.12.10.1
MediumGHSA-6vqp-h455-42mrpdfbox@2.0.192.0.23
MediumGHSA-78wr-2p64-hpwjcommons-io@2.8.02.14.0
MediumGHSA-3qp7-7mw8-wx86netty-handler@4.1.50.Final4.1.135.Final
MediumGHSA-355h-qmc2-wpwfjetty-http@9.4.27.v202002279.4.60
MediumGHSA-7grw-6pjh-jpc9pdfbox@2.0.192.0.24
MediumGHSA-2h3j-m7gr-25xjpdfbox@2.0.192.0.23
MediumGHSA-qw69-rqj8-6qw8jetty-server@9.4.27.v202002279.4.51.v20230217
MediumGHSA-9w38-p64v-xpmvcommons-configuration2@2.1.12.10.1
MediumGHSA-3x8x-79m2-3w2wjackson-databind@2.11.22.12.6
MediumGHSA-rmj7-2vxq-3g9fjackson-databind@2.11.22.18.8
MediumGHSA-j3rv-43j4-c7qmjackson-databind@2.11.22.18.8
MediumGHSA-4p6w-m9wc-c9c9ant@1.8.21.9.15
MediumGHSA-55g7-9cwv-5qfvsnappy-java@1.1.7.61.1.10.4
MediumGHSA-h46c-h94j-95f3jackson-core@2.11.22.15.0
MediumGHSA-hxp5-8pgq-mgv9calcite-core@1.18.01.26.0
MediumGHSA-rpjm-422r-95mhtika-core@1.24.11.28.2
MediumGHSA-q5r4-cfpx-h6fhant@1.8.21.9.16
MediumDSA-5286-1krb5@1.18.3-6+deb11u11.18.3-6+deb11u3
MediumGHSA-4v8g-86x5-3vrcopennlp-tools@1.9.22.5.9
MediumGHSA-x4gw-5cx5-pgmhnetty-handler@4.1.50.Final4.1.135.Final
MediumGHSA-g5ww-5jh7-63cxprotobuf-java@3.11.03.16.3
MediumGHSA-pqr6-cmr2-h8hfsnappy-java@1.1.7.61.1.10.1
LowGHSA-qw3f-w4pf-jh5ftika-core@1.24.11.28.3
LowGHSA-3pxv-7cmr-fjr4log4j-core@2.13.22.25.4
LowGHSA-2fvj-hgj9-j2grjetty-security@9.4.27.v202002279.4.63
LowGHSA-fjpj-2g6w-x25rsnappy-java@1.1.7.61.1.10.1
LowGHSA-4gg5-vx3j-xwc7protobuf-java@3.11.03.16.3
LowDSA-5330-1curl@7.74.0-1.3+deb11u17.74.0-1.3+deb11u5
LowGHSA-qr3p-2xj2-q7hqsolr-core@8.7.09.10.1
LowGHSA-7g24-qg88-p43qjose4j@0.6.50.9.3
LowGHSA-3wrr-7qpf-2prhjackson-databind@2.11.22.14.0
LowGHSA-8wv5-x4w7-5gwwlibthrift@0.13.00.24.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
3.2.0latest5 years ago8.7.010261041126,048

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/preferred-ai/solr.svg)](https://charts.stackradar.io/charts/preferred-ai/solr)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.