sonatype-nexus Helm chart

Name: sonatype-nexus Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

redhat-cop

Scored 14 Sept 2026

Sonatype Nexus is an open source repository manager

Latest 1.1.13 1 year agodeploys tag 3.72.0-ubi-1 0Artifact Hub

sonatype-nexus 1.1.13 deploys 2 container images: registry.connect.redhat.com/sonatype/nexus-repository-manager and quay.io/openshift/origin-jenkins-agent-base. Across the 1 measured, 848 findings — 14 critical, 64 high — 6 on CISA KEV. The highest contribution is RHSA-2023:4419 in openssh 8.0p1-15.el8_6.3, fixed in 0:8.0p1-19.el8_8.

Radar Score

16,0471464294476

848 findings over 1 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
registry.connect.redhat.com/sonatype/nexus-repository-manager	3.72.0-ubi-1	—	unmeasured
quay.io/openshift/origin-jenkins-agent-base	latest	1464294476	16,047

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

848 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	RHSA-2023:4419	openssh@8.0p1-15.el8_6.3	0:8.0p1-19.el8_8
Critical	RHSA-2024:2722	glibc@2.28-189.8.el8_6	0:2.28-236.el8_9.13
Critical	RHSA-2024:2799	glibc@2.28-189.8.el8_6	0:2.28-189.10.el8_6
Critical	RHSA-2025:11534KEV	git@2.31.8-1.el8_6	0:2.43.7-1.el8_10
Critical	RHSA-2025:3385KEV	freetype@2.9.1-5.el8_6.3	0:2.9.1-6.el8_6.3
Critical	RHSA-2025:11801KEV	git@2.31.8-1.el8_6	0:2.31.8-3.el8_6.1
Critical	RHSA-2023:5455KEV	glibc@2.28-189.8.el8_6	0:2.28-225.el8_8.6
Critical	RHSA-2023:5837KEV	nghttp2@1.33.0-4.el8_6.1	0:1.33.0-5.el8_8
Critical	RHSA-2024:1782	bind@32:9.11.36-3.el8_6.5	32:9.11.36-11.el8_9.1
Critical	RHSA-2024:2720	bind@32:9.11.36-3.el8_6.5	32:9.11.36-3.el8_6.7
Critical	RHSA-2024:3271	bind@32:9.11.36-3.el8_6.5	32:9.11.36-14.el8_10
Critical	RHSA-2024:2699	git-lfs@2.13.3-3.el8_6	0:3.2.0-3.el8_9
Critical	RHSA-2024:3346	git-lfs@2.13.3-3.el8_6	0:3.4.1-2.el8_10
Critical	RHSA-2025:12010	sqlite@3.26.0-16.el8_6.1	0:3.26.0-20.el8_10
High	RHSA-2025:0083	cups@1:2.2.6-45.el8_6.3	1:2.2.6-62.el8_10
High	RHSA-2021:4162	python-chardet@3.0.4-7.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79
High	RHSA-2021:4162	python-ply@3.9-9.el8	0:3.11-10.module+el8.4.0+9579+e9717e18
High	RHSA-2021:4162	python-idna@2.5-5.el8	0:2.8-6.module+el8.4.0+8888+89bc7e79
High	RHSA-2021:4162	python-urllib3@1.24.2-5.el8_6.1	0:1.25.7-5.module+el8.5.0+11639+ea5b349d
High	RHSA-2021:4162	python-pysocks@1.6.8-3.el8	0:1.7.1-4.module+el8.4.0+8888+89bc7e79
High	RHSA-2021:4162	python-requests@2.20.0-3.el8_6	0:2.22.0-9.module+el8.4.0+8888+89bc7e79
High	RHSA-2024:0606	openssh@8.0p1-15.el8_6.3	0:8.0p1-19.el8_9.2
High	RHSA-2023:3246	git@2.31.8-1.el8_6	0:2.39.3-1.el8_8
High	RHSA-2025:1301KEV	gcc@8.5.0-10.3.el8_6	0:8.5.0-23.el8_10
High	RHSA-2024:4084	git@2.31.8-1.el8_6	0:2.43.5-1.el8_10
High	RHSA-2024:6027	git@2.31.8-1.el8_6	0:2.31.8-3.el8_6
High	RHSA-2025:9318	javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6	0:5.3.0-2.module+el8.10.0+23274+27840b45
High	RHSA-2024:0628	libssh@0.9.6-4.el8_6	0:0.9.6-13.el8_9
High	RHSA-2021:4151	python-pysocks@1.6.8-3.el8	0:1.6.8-6.module+el8.1.0+3111+de3f2d8e
High	RHSA-2021:4151	python-requests@2.20.0-3.el8_6	0:2.20.0-3.module+el8.2.0+4577+feefd9b8
High	RHSA-2021:4151	python-idna@2.5-5.el8	0:2.5-7.module+el8.1.0+3111+de3f2d8e
High	RHSA-2021:4151	python-chardet@3.0.4-7.el8	0:3.0.4-10.module+el8.1.0+3111+de3f2d8e
High	GHSA-v23v-6jw2-98fq	github.com/docker/docker@v24.0.7+incompatible	25.0.6
High	RHSA-2024:5654	curl@7.61.1-22.el8_6.12	0:7.61.1-34.el8_10.2
High	GHSA-4v7x-pqxf-cx7m	golang.org/x/net@v0.20.0	0.23.0
High	RHSA-2024:3763	nghttp2@1.33.0-4.el8_6.1	0:1.33.0-4.el8_6.2
High	RHSA-2020:4641	python-requests@2.20.0-3.el8_6	0:2.22.0-9.module+el8.2.0+5234+f98739b6
High	RHSA-2020:4641	python-idna@2.5-5.el8	0:2.8-6.module+el8.2.0+5234+f98739b6
High	RHSA-2020:4641	python-ply@3.9-9.el8	0:3.11-8.module+el8.2.0+5234+f98739b6
High	RHSA-2020:4641	python-six@1.12.0-2.el8ost	0:1.12.0-9.module+el8.2.0+5234+f98739b6
High	RHSA-2020:4641	python-urllib3@1.24.2-5.el8_6.1	0:1.25.7-4.module+el8.2.0+5234+f98739b6
High	RHSA-2020:4641	python-pysocks@1.6.8-3.el8	0:1.7.1-4.module+el8.2.0+5234+f98739b6
High	RHSA-2020:4641	python-chardet@3.0.4-7.el8	0:3.0.4-19.module+el8.2.0+5234+f98739b6
High	RHSA-2019:3335	python-chardet@3.0.4-7.el8	0:3.0.4-10.module+el8.1.0+3111+de3f2d8e
High	RHSA-2019:3335	python-idna@2.5-5.el8	0:2.5-7.module+el8.1.0+3111+de3f2d8e
High	RHSA-2019:3335	python-pysocks@1.6.8-3.el8	0:1.6.8-6.module+el8.1.0+3111+de3f2d8e
High	GHSA-xr7r-f8xq-vfvv	github.com/opencontainers/runc@v1.1.10	1.1.12
High	RHSA-2024:8794	krb5@1.18.2-16.el8_6	0:1.18.2-16.el8_6.2
High	RHSA-2023:0173	libxml2@2.9.7-13.el8_6.4	0:2.9.7-15.el8_7.1
High	RHSA-2021:4160	python-requests@2.20.0-3.el8_6	0:2.25.0-2.module+el8.4.0+9822+20bf1249

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.13latest	1 year ago	3.72.0-ubi-1	1464294476	16,047

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/redhat-cop/sonatype-nexus.svg)](https://charts.stackradar.io/charts/redhat-cop/sonatype-nexus)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.