sonatype-nexus 1.1.13 Helm chart

Name: sonatype-nexus Helm chart 1.1.13: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

redhat-cop

Scored 14 Sept 2026

Sonatype Nexus is an open source repository manager

Version 1.1.13 1 year agodeploys tag 3.72.0-ubi-1 0Artifact Hub

sonatype-nexus 1.1.13 deploys 2 container images: registry.connect.redhat.com/sonatype/nexus-repository-manager and quay.io/openshift/origin-jenkins-agent-base. Across the 1 measured, 848 findings — 14 critical, 64 high — 6 on CISA KEV. The highest contribution is RHSA-2023:4419 in openssh 8.0p1-15.el8_6.3, fixed in 0:8.0p1-19.el8_8.

Radar Score

16,0471464294476

848 findings over 1 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
registry.connect.redhat.com/sonatype/nexus-repository-manager	3.72.0-ubi-1	—	unmeasured
quay.io/openshift/origin-jenkins-agent-base	latest	1464294476	16,047

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

476 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	RHSA-2026:37070	perl-podlators@4.11-1.el8	1:4.14-457.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Pod-Escapes@1:1.07-395.el8	1:1.07-396.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-PathTools@3.74-1.el8	0:3.78-439.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Data-Dumper@2.167-399.el8	0:2.174-440.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-parent@1:0.237-1.el8	1:0.238-457.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-MIME-Base64@3.15-396.el8	0:3.15-1001.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Encode@4:2.97-3.el8	4:3.08-461.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-libnet@3.11-3.el8	0:3.13-1.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-IO-Socket-IP@0.39-5.el8	0:0.41-2.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Digest@1.17-395.el8	0:1.20-1.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-HTTP-Tiny@0.074-1.el8_6.1	0:0.078-1.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-File-Temp@0.230.600-1.el8	1:0.231.100-1.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-File-Path@2.15-2.el8	0:2.16-439.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Digest-MD5@2.55-396.el8	0:2.58-1.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Unicode-Normalize@1.25-396.el8	0:1.27-458.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-URI@1.73-3.el8	0:1.76-5.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Exporter@5.72-396.el8	0:5.74-458.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Time-Local@1:1.280-1.el8	2:1.300-4.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-threads-shared@1.58-2.el8	0:1.61-457.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-threads@1:2.21-2.el8	1:2.25-457.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Text-Tabs+Wrap@2013.0523-395.el8	0:2013.0523-396.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Text-ParseWords@3.30-395.el8	0:3.30-396.module+el8.6.0+13324+628a2397
Low	GHSA-qgq7-7hm3-q39j	github.com/go-git/go-git/v5@v5.11.0	5.19.2
Low	RHSA-2026:42733	glibc@2.28-189.8.el8_6	0:2.28-251.el8_10.40
Low	RHSA-2026:0596	cups@1:2.2.6-45.el8_6.3	1:2.2.6-66.el8_10
Low	RHSA-2026:5585	gnutls@3.6.16-5.el8_6.2	0:3.6.16-8.el8_10.5
Low	RHSA-2026:55775	java-1.8.0-openjdk@1:1.8.0.402.b06-1.el8_6	1:1.8.0.504.b01-1.1.el8
Low	GHSA-34jh-p97f-mpxf	urllib3@1.24.2	1.26.19
Low	RHSA-2024:5041	python-urllib3@1.24.2-5.el8_6.1	0:1.24.2-5.el8_6.3
Low	RHSA-2026:62144	wget@1.19.5-10.el8	0:1.19.5-16.el8_10
Low	GHSA-4xh5-x5gv-qwph	pip@9.0.3	25.3
Low	RHSA-2023:4864	cups@1:2.2.6-45.el8_6.3	1:2.2.6-51.el8_8.1
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.18.0	0.52.0
Low	RHSA-2023:7190	avahi@0.7-20.el8_6.3	0:0.7-21.el8
Low	GHSA-h35f-9h28-mq5c	setuptools@39.2.0	83.0.0
Low	GO-2024-2963	stdlib@go1.21.3	1.21.12
Low	RHSA-2026:65998	gzip@1.9-13.el8_5	0:1.9-15.el8_10
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.20.0	0.55.0
Low	GHSA-f83f-xpx7-ffpw	github.com/sigstore/fulcio@v1.4.3	1.8.3
Low	RHSA-2025:10618	jq@1.6-3.el8	0:1.6-11.el8_10
Low	RHSA-2025:10620	jq@1.6-3.el8	0:1.6-3.el8_6.1
Low	RHSA-2026:66451	glib2@2.56.4-158.el8_6.1	0:2.56.4-178.el8_10
Low	GHSA-jpcc-p29g-p8mq	github.com/containerd/containerd@v1.7.0	1.7.33
Low	RHSA-2026:4442	vim@2:8.0.1763-19.el8_6.4	2:8.0.1763-22.el8_10
Low	GHSA-xw73-rw38-6vjc	github.com/docker/docker@v24.0.7+incompatible	24.0.9
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.18.0	0.45.0
Low	RHSA-2026:58938	sqlite@3.26.0-16.el8_6.1	0:3.26.0-21.el8_10
Low	RHSA-2026:59020	sqlite@3.26.0-16.el8_6.1	0:3.26.0-16.el8_6.4
Low	PYSEC-2026-3721	pip@9.0.3	26.2
Low	GHSA-vvgc-356p-c3xw	golang.org/x/net@v0.20.0	0.38.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.13latest	1 year ago	3.72.0-ubi-1	1464294476	16,047

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/redhat-cop/sonatype-nexus.svg)](https://charts.stackradar.io/charts/redhat-cop/sonatype-nexus)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.