sonatype-nexus 1.1.13 Helm chart

Name: sonatype-nexus Helm chart 1.1.13: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

redhat-cop

Scored 14 Sept 2026

Sonatype Nexus is an open source repository manager

Version 1.1.13 1 year agodeploys tag 3.72.0-ubi-1 0Artifact Hub

sonatype-nexus 1.1.13 deploys 2 container images: registry.connect.redhat.com/sonatype/nexus-repository-manager and quay.io/openshift/origin-jenkins-agent-base. Across the 1 measured, 848 findings — 14 critical, 64 high — 6 on CISA KEV. The highest contribution is RHSA-2023:4419 in openssh 8.0p1-15.el8_6.3, fixed in 0:8.0p1-19.el8_8.

Radar Score

16,0471464294476

848 findings over 1 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
registry.connect.redhat.com/sonatype/nexus-repository-manager	3.72.0-ubi-1	—	unmeasured
quay.io/openshift/origin-jenkins-agent-base	latest	1464294476	16,047

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

476 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	RHSA-2026:1631	python3@3.6.8-47.el8_6.4	0:3.6.8-72.el8_10
Low	RHSA-2023:4498	dbus@1:1.12.8-18.el8_6.3	1:1.12.8-24.el8_8.1
Low	RHSA-2026:4728	libpng@2:1.6.34-5.el8	2:1.6.34-10.el8_10
Low	RHSA-2026:4730	libpng@2:1.6.34-5.el8	2:1.6.34-8.el8_6.2
Low	RHSA-2026:54654	bind@32:9.11.36-3.el8_6.5	32:9.11.36-16.el8_10.14
Low	RHSA-2025:3845	java-1.8.0-openjdk@1:1.8.0.402.b06-1.el8_6	1:1.8.0.452.b09-2.el8
Low	RHSA-2023:3106	curl@7.61.1-22.el8_6.12	0:7.61.1-30.el8_8.2
Low	GHSA-9493-h29p-rfm2	github.com/opencontainers/runc@v1.1.10	1.2.8
Low	RHSA-2026:7667	nghttp2@1.33.0-4.el8_6.1	0:1.33.0-6.el8_10.2
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.18.0	0.52.0
Low	RHSA-2024:10379	pam@1.3.1-16.el8_6.1	0:1.3.1-36.el8_10
Low	RHSA-2023:3042	emacs@1:26.1-7.el8_6.1	1:26.1-9.el8
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.18.0	0.52.0
Low	RHSA-2026:16252	jq@1.6-3.el8	0:1.6-12.el8_10
Low	RHSA-2026:18047	jq@1.6-3.el8	0:1.6-3.el8_6.2
Low	RHSA-2026:11077	python3@3.6.8-47.el8_6.4	0:3.6.8-76.el8_10
Low	RHSA-2026:17619	python3@3.6.8-47.el8_6.4	0:3.6.8-47.el8_6.13
Low	RHSA-2026:20582	git-lfs@2.13.3-3.el8_6	0:2.13.3-3.el8_6.7
Low	GHSA-r9px-m959-cxf4	github.com/go-git/go-git/v5@v5.11.0	5.13.0
Low	RHSA-2026:34477	vim@2:8.0.1763-19.el8_6.4	2:8.0.1763-19.el8_6.6
Low	GHSA-4c29-8rgm-jvjj	github.com/moby/buildkit@v0.0.0-20181107081847-c3a857e3fca0	0.28.1
Low	RHSA-2025:11030	emacs@1:26.1-7.el8_6.1	1:26.1-15.el8_10
Low	RHSA-2025:22063	cups@1:2.2.6-45.el8_6.3	1:2.2.6-64.el8_10
Low	RHSA-2026:56219	python3@3.6.8-47.el8_6.4	0:3.6.8-78.el8_10
Low	RHSA-2024:3128	perl-podlators@4.11-1.el8	1:4.14-457.module+el8.10.0+21354+3ad137bb
Low	RHSA-2024:3128	perl-Carp@1.42-396.el8	0:1.50-439.module+el8.10.0+21354+3ad137bb
Low	RHSA-2024:3128	perl-Pod-Usage@4:1.69-395.el8	4:2.01-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2024:3128	perl-parent@1:0.237-1.el8	1:0.238-457.module+el8.10.0+21354+3ad137bb
Low	RHSA-2024:3128	perl-Pod-Escapes@1:1.07-395.el8	1:1.07-396.module+el8.10.0+21354+3ad137bb
Low	RHSA-2024:3128	perl-PathTools@3.74-1.el8	0:3.78-439.module+el8.10.0+21354+3ad137bb
Low	RHSA-2024:3128	perl-Storable@1:3.11-3.el8	1:3.21-457.module+el8.10.0+21354+3ad137bb
Low	RHSA-2024:3128	perl-Term-ANSIColor@4.06-396.el8	0:5.01-458.module+el8.10.0+21354+3ad137bb
Low	RHSA-2024:3128	perl-MIME-Base64@3.15-396.el8	0:3.15-1001.module+el8.10.0+21354+3ad137bb
Low	RHSA-2024:3128	perl-Exporter@5.72-396.el8	0:5.74-458.module+el8.10.0+21354+3ad137bb
Low	RHSA-2024:3128	perl-Text-ParseWords@3.30-395.el8	0:3.30-396.module+el8.10.0+21354+3ad137bb
Low	RHSA-2024:3128	perl-IO-Socket-IP@0.39-5.el8	0:0.41-2.module+el8.10.0+21354+3ad137bb
Low	RHSA-2024:3128	perl-Digest@1.17-395.el8	0:1.20-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2024:3128	perl-Pod-Perldoc@3.28-396.el8	0:3.28.01-443.module+el8.10.0+21354+3ad137bb
Low	RHSA-2024:3128	perl-Term-Cap@1.17-395.el8	0:1.17-396.module+el8.10.0+21354+3ad137bb
Low	RHSA-2024:3128	perl-Text-Tabs+Wrap@2013.0523-395.el8	0:2013.0523-396.module+el8.10.0+21354+3ad137bb
Low	RHSA-2024:3128	perl-Data-Dumper@2.167-399.el8	0:2.174-440.module+el8.10.0+21354+3ad137bb
Low	RHSA-2024:3128	perl-HTTP-Tiny@0.074-1.el8_6.1	0:0.078-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2024:3128	perl-Encode@4:2.97-3.el8	4:3.08-461.module+el8.10.0+21354+3ad137bb
Low	RHSA-2024:3128	perl-Getopt-Long@1:2.50-4.el8	1:2.52-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2024:3128	perl-Pod-Simple@1:3.35-395.el8	1:3.42-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2024:3128	perl-libnet@3.11-3.el8	0:3.13-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2024:3128	perl-File-Temp@0.230.600-1.el8	1:0.231.100-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2024:3128	perl-Scalar-List-Utils@3:1.49-2.el8	4:1.55-457.module+el8.10.0+21354+3ad137bb
Low	RHSA-2024:3128	perl-constant@1.33-396.el8	0:1.33-1001.module+el8.10.0+21354+3ad137bb
Low	RHSA-2024:3128	perl@0:1.28-421.el8	0:1.30-473.module+el8.10.0+21354+3ad137bb

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.13latest	1 year ago	3.72.0-ubi-1	1464294476	16,047

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/redhat-cop/sonatype-nexus.svg)](https://charts.stackradar.io/charts/redhat-cop/sonatype-nexus)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.