sonatype-nexus 1.1.13 Helm chart

Name: sonatype-nexus Helm chart 1.1.13: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

redhat-cop

Scored 14 Sept 2026

Sonatype Nexus is an open source repository manager

Version 1.1.13 1 year agodeploys tag 3.72.0-ubi-1 0Artifact Hub

sonatype-nexus 1.1.13 deploys 2 container images: registry.connect.redhat.com/sonatype/nexus-repository-manager and quay.io/openshift/origin-jenkins-agent-base. Across the 1 measured, 848 findings — 14 critical, 64 high — 6 on CISA KEV. The highest contribution is RHSA-2023:4419 in openssh 8.0p1-15.el8_6.3, fixed in 0:8.0p1-19.el8_8.

Radar Score

16,0471464294476

848 findings over 1 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
registry.connect.redhat.com/sonatype/nexus-repository-manager	3.72.0-ubi-1	—	unmeasured
quay.io/openshift/origin-jenkins-agent-base	latest	1464294476	16,047

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

476 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	RHSA-2026:62218	libssh@0.9.6-4.el8_6	0:0.9.6-17.el8_10
Low	GHSA-c5q2-7r4c-mv6g	gopkg.in/go-jose/go-jose.v2@v2.6.1	2.6.3
Low	GHSA-c5q2-7r4c-mv6g	github.com/go-jose/go-jose/v3@v3.0.1	3.0.3
Low	GHSA-pjcq-xvwq-hhpj	github.com/Azure/go-ntlmssp@v0.0.0-20211209120228-48547f28849e	0.1.1
Low	RHSA-2026:0241	libpng@2:1.6.34-5.el8	2:1.6.34-9.el8_10
Low	RHSA-2026:0322	libpng@2:1.6.34-5.el8	2:1.6.34-8.el8_6.1
Low	RHSA-2026:0991	glib2@2.56.4-158.el8_6.1	0:2.56.4-168.el8_10
Low	GHSA-9hjg-9r4m-mvj7	requests@2.20.0	2.32.4
Low	RHSA-2025:13234	python-requests@2.20.0-3.el8_6	0:2.20.0-6.el8_10
Low	RHSA-2023:3839	libssh@0.9.6-4.el8_6	0:0.9.6-10.el8_8
Low	RHSA-2023:0837	systemd@239-58.el8_6.12	0:239-68.el8_7.4
Low	GHSA-9p26-698r-w4hx	github.com/moby/buildkit@v0.0.0-20181107081847-c3a857e3fca0	0.12.5
Low	RHSA-2024:0647	rpm@4.14.3-26.el8_6	0:4.14.3-28.el8_9
Low	RHSA-2025:2722	krb5@1.18.2-16.el8_6	0:1.18.2-31.el8_10
Low	GHSA-47q9-m4ww-924m	github.com/sigstore/rekor@v1.2.2	1.5.2
Low	GO-2026-4341	stdlib@go1.21.3	1.24.12
Low	RHSA-2023:7166	tpm2-tss@2.3.2-4.el8	0:2.3.2-5.el8
Low	RHSA-2025:18815	java-1.8.0-openjdk@1:1.8.0.402.b06-1.el8_6	1:1.8.0.472.b08-1.el8
Low	RHSA-2026:36733	cups@1:2.2.6-45.el8_6.3	1:2.2.6-68.el8_10
Low	RHSA-2026:4772	glibc@2.28-189.8.el8_6	0:2.28-251.el8_10.31
Low	GHSA-c6gw-w398-hv78	github.com/go-jose/go-jose/v3@v3.0.1	3.0.4
Low	RHSA-2025:15105	pam@1.3.1-16.el8_6.1	0:1.3.1-16.el8_6.3
Low	GHSA-hc8v-wwc9-vgxm	github.com/go-git/go-git/v5@v5.11.0	5.19.2
Low	RHSA-2025:9060	git-lfs@2.13.3-3.el8_6	0:3.4.1-5.el8_10
Low	RHSA-2023:4706	subscription-manager@1.28.29.1-2.el8_6	0:1.28.36-3.el8_8
Low	RHSA-2026:16799	krb5@1.18.2-16.el8_6	0:1.18.2-34.el8_10
Low	GO-2024-2887	stdlib@go1.21.3	1.21.11
Low	GHSA-pxq6-2prw-chj9	github.com/docker/docker@v24.0.7+incompatible	no fix listed
Low	RHSA-2025:11042	socat@1.7.4.1-1.el8	0:1.7.4.1-2.el8_10
Low	GHSA-xhf5-7wjv-pqxp	github.com/containerd/containerd@v1.7.0	1.7.33
Low	GHSA-3p65-76g6-3w7r	github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250	3.1.0
Low	GHSA-f5mr-q85p-6hh6	github.com/sigstore/fulcio@v1.4.3	1.8.6
Low	RHSA-2024:4998	wget@1.19.5-10.el8	0:1.19.5-10.el8_6.2
Low	RHSA-2026:6473	python3@3.6.8-47.el8_6.4	0:3.6.8-75.el8_10
Low	RHSA-2024:1784	gnutls@3.6.16-5.el8_6.2	0:3.6.16-8.el8_9.3
Low	RHSA-2026:36730	libsolv@0.7.20-1.el8	0:0.7.20-7.el8_10
Low	GHSA-m3xc-h892-ggx6	github.com/go-git/go-billy/v5@v5.5.0	5.9.0
Low	RHSA-2023:7836	avahi@0.7-20.el8_6.3	0:0.7-21.el8_9.1
Low	RHSA-2025:11805	perl@0:1.28-421.el8	0:1.28-423.el8_10
Low	RHSA-2026:37070	perl-Getopt-Long@1:2.50-4.el8	1:2.52-1.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Term-Cap@1.17-395.el8	0:1.17-396.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Term-ANSIColor@4.06-396.el8	0:5.01-458.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Storable@1:3.11-3.el8	1:3.21-457.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Carp@1.42-396.el8	0:1.50-439.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Socket@4:2.027-3.el8	4:2.031-1.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Scalar-List-Utils@3:1.49-2.el8	4:1.55-457.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Pod-Usage@4:1.69-395.el8	4:2.01-1.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Pod-Simple@1:3.35-395.el8	1:3.42-1.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-constant@1.33-396.el8	0:1.33-1001.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Pod-Perldoc@3.28-396.el8	0:3.28.01-443.module+el8.6.0+13324+628a2397

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.13latest	1 year ago	3.72.0-ubi-1	1464294476	16,047

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/redhat-cop/sonatype-nexus.svg)](https://charts.stackradar.io/charts/redhat-cop/sonatype-nexus)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.