sonatype-nexus 1.1.13 Helm chart

Name: sonatype-nexus Helm chart 1.1.13: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

redhat-cop

Scored 14 Sept 2026

Sonatype Nexus is an open source repository manager

Version 1.1.13 1 year agodeploys tag 3.72.0-ubi-1 0Artifact Hub

sonatype-nexus 1.1.13 deploys 2 container images: registry.connect.redhat.com/sonatype/nexus-repository-manager and quay.io/openshift/origin-jenkins-agent-base. Across the 1 measured, 848 findings — 14 critical, 64 high — 6 on CISA KEV. The highest contribution is RHSA-2023:4419 in openssh 8.0p1-15.el8_6.3, fixed in 0:8.0p1-19.el8_8.

Radar Score

16,0471464294476

848 findings over 1 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
registry.connect.redhat.com/sonatype/nexus-repository-manager	3.72.0-ubi-1	—	unmeasured
quay.io/openshift/origin-jenkins-agent-base	latest	1464294476	16,047

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

476 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-jfvp-7x6p-h2pv	github.com/opencontainers/runc@v1.1.10	1.1.14
Low	GO-2022-0635	github.com/aws/aws-sdk-go@v1.45.20	no fix listed
Low	GO-2026-5027	golang.org/x/net@v0.20.0	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.20.0	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.20.0	0.55.0
Low	GHSA-58qw-9mgm-455v	pip@9.0.3	26.1
Low	GO-2026-4602	stdlib@go1.21.3	1.25.8
Low	RHBA-2026:47115	coreutils@8.30-12.el8	0:8.30-20.el8_10
Low	RHSA-2025:12980	glibc@2.28-189.8.el8_6	0:2.28-251.el8_10.25
Low	GHSA-37cx-329c-33x3	github.com/go-git/go-git/v5@v5.11.0	5.16.5
Low	GO-2026-5622	github.com/containerd/containerd@v1.7.0	no fix listed
Low	RHSA-2023:7187	procps-ng@3.3.15-6.el8	0:3.3.15-14.el8
Low	RHSA-2026:22730	vim@2:8.0.1763-19.el8_6.4	2:8.0.1763-23.el8_10
Low	GO-2026-5024	golang.org/x/sys@v0.16.0	0.44.0
Low	GHSA-xjvp-4fhw-gc47	github.com/opencontainers/runc@v1.1.10	1.3.6
Low	GO-2023-2412	github.com/containerd/containerd@v1.7.0	1.6.26
Low	GO-2026-5693	github.com/go-git/go-git/v5@v5.11.0	5.19.1
Low	GO-2026-5841	github.com/klauspost/compress@v1.17.3	1.18.7
Low	GO-2026-5932	golang.org/x/crypto@v0.18.0	no fix listed
Low	GO-2026-6278	github.com/gorilla/websocket@v1.5.0	1.5.3
Low	GHSA-4vq8-7jfc-9cvp	github.com/docker/docker@v24.0.7+incompatible	25.0.13
Low	GHSA-72x6-4j93-7w86	github.com/moby/buildkit@v0.0.0-20181107081847-c3a857e3fca0	0.31.1
Low	RHSA-2026:36734	libxml2@2.9.7-13.el8_6.4	0:2.9.7-21.el8_10.6
Low	GHSA-m7cr-m3pv-hgrp	github.com/go-git/go-git/v5@v5.11.0	5.19.1
Low	GHSA-gm2x-2g9h-ccm8	github.com/go-git/go-git/v5@v5.11.0	5.17.1
Low	GHSA-6vgw-5pg2-w6jp	pip@9.0.3	26.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.13latest	1 year ago	3.72.0-ubi-1	1464294476	16,047

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/redhat-cop/sonatype-nexus.svg)](https://charts.stackradar.io/charts/redhat-cop/sonatype-nexus)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.