sonatype-nexus 1.1.13 Helm chart

Name: sonatype-nexus Helm chart 1.1.13: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

redhat-cop

Scored 14 Sept 2026

Sonatype Nexus is an open source repository manager

Version 1.1.13 1 year agodeploys tag 3.72.0-ubi-1 0Artifact Hub

sonatype-nexus 1.1.13 deploys 2 container images: registry.connect.redhat.com/sonatype/nexus-repository-manager and quay.io/openshift/origin-jenkins-agent-base. Across the 1 measured, 848 findings — 14 critical, 64 high — 6 on CISA KEV. The highest contribution is RHSA-2023:4419 in openssh 8.0p1-15.el8_6.3, fixed in 0:8.0p1-19.el8_8.

Radar Score

16,0471464294476

848 findings over 1 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
registry.connect.redhat.com/sonatype/nexus-repository-manager	3.72.0-ubi-1	—	unmeasured
quay.io/openshift/origin-jenkins-agent-base	latest	1464294476	16,047

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

476 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	RHSA-2025:4051	gnutls@3.6.16-5.el8_6.2	0:3.6.16-8.el8_10.3
Low	GHSA-f2g3-hh2r-cwgc	github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250	3.1.0
Low	RHSA-2025:8686	glibc@2.28-189.8.el8_6	0:2.28-251.el8_10.22
Low	RHSA-2026:48225	perl-Time-Local@1:1.280-1.el8	2:1.300-4.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl@0:1.28-421.el8	0:1.30-474.module+el8.10.0+24099+8aa2f756
Low	RHSA-2026:48225	perl-parent@1:0.237-1.el8	1:0.238-457.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Exporter@5.72-396.el8	0:5.74-458.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-threads-shared@1.58-2.el8	0:1.61-457.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Pod-Escapes@1:1.07-395.el8	1:1.07-396.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-URI@1.73-3.el8	0:1.76-5.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Data-Dumper@2.167-399.el8	0:2.174-440.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-File-Temp@0.230.600-1.el8	1:0.231.100-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-PathTools@3.74-1.el8	0:3.78-439.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-MIME-Base64@3.15-396.el8	0:3.15-1001.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Unicode-Normalize@1.25-396.el8	0:1.27-458.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Pod-Usage@4:1.69-395.el8	4:2.01-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Digest@1.17-395.el8	0:1.20-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-libnet@3.11-3.el8	0:3.13-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Text-Tabs+Wrap@2013.0523-395.el8	0:2013.0523-396.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Getopt-Long@1:2.50-4.el8	1:2.52-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Socket@4:2.027-3.el8	4:2.031-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-constant@1.33-396.el8	0:1.33-1001.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Scalar-List-Utils@3:1.49-2.el8	4:1.55-457.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Digest-MD5@2.55-396.el8	0:2.58-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-HTTP-Tiny@0.074-1.el8_6.1	0:0.078-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-podlators@4.11-1.el8	1:4.14-457.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Pod-Simple@1:3.35-395.el8	1:3.42-1.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Text-ParseWords@3.30-395.el8	0:3.30-396.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Pod-Perldoc@3.28-396.el8	0:3.28.01-443.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-threads@1:2.21-2.el8	1:2.25-457.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-IO-Socket-IP@0.39-5.el8	0:0.41-2.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Term-Cap@1.17-395.el8	0:1.17-396.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-File-Path@2.15-2.el8	0:2.16-439.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Encode@4:2.97-3.el8	4:3.08-461.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Term-ANSIColor@4.06-396.el8	0:5.01-458.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Carp@1.42-396.el8	0:1.50-439.module+el8.10.0+21354+3ad137bb
Low	RHSA-2026:48225	perl-Storable@1:3.11-3.el8	1:3.21-457.module+el8.10.0+21354+3ad137bb
Low	RHSA-2023:5252	dmidecode@1:3.3-4.el8_6.1	1:3.3-4.el8_8.1
Low	GO-2023-2185	stdlib@go1.21.3	1.20.11
Low	RHSA-2024:3203	systemd@239-58.el8_6.12	0:239-82.el8
Low	RHSA-2025:12450	libxml2@2.9.7-13.el8_6.4	0:2.9.7-21.el8_10.2
Low	RHSA-2025:4049	libtasn1@4.13-3.el8_6.1	0:4.13-5.el8_10
Low	GHSA-qw64-3x98-g7q2	github.com/go-git/go-billy/v5@v5.5.0	5.9.0
Low	RHSA-2026:57462	curl@7.61.1-22.el8_6.12	0:7.61.1-34.el8_10.13
Low	RHSA-2024:10779	python3@3.6.8-47.el8_6.4	0:3.6.8-69.el8_10
Low	GHSA-wf93-45jw-7689	pip@9.0.3	26.1.2
Low	RHSA-2024:3347	python3@3.6.8-47.el8_6.4	0:3.6.8-62.el8_10
Low	RHSA-2024:4406	python3@3.6.8-47.el8_6.4	0:3.6.8-47.el8_6.6
Low	RHSA-2026:17481	rsync@3.1.3-14.el8_6.5	0:3.1.3-25.el8_10
Low	RHSA-2024:3233	libssh@0.9.6-4.el8_6	0:0.9.6-14.el8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.13latest	1 year ago	3.72.0-ubi-1	1464294476	16,047

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/redhat-cop/sonatype-nexus.svg)](https://charts.stackradar.io/charts/redhat-cop/sonatype-nexus)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.