sonatype-nexus 1.1.13 Helm chart

Name: sonatype-nexus Helm chart 1.1.13: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

redhat-cop

Scored 14 Sept 2026

Sonatype Nexus is an open source repository manager

Version 1.1.13 1 year agodeploys tag 3.72.0-ubi-1 0Artifact Hub

sonatype-nexus 1.1.13 deploys 2 container images: registry.connect.redhat.com/sonatype/nexus-repository-manager and quay.io/openshift/origin-jenkins-agent-base. Across the 1 measured, 848 findings — 14 critical, 64 high — 6 on CISA KEV. The highest contribution is RHSA-2023:4419 in openssh 8.0p1-15.el8_6.3, fixed in 0:8.0p1-19.el8_8.

Radar Score

16,0471464294476

848 findings over 1 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
registry.connect.redhat.com/sonatype/nexus-repository-manager	3.72.0-ubi-1	—	unmeasured
quay.io/openshift/origin-jenkins-agent-base	latest	1464294476	16,047

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

476 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-mq26-g339-26xf	pip@9.0.3	23.3
Low	GO-2023-2382	stdlib@go1.21.3	1.20.12
Low	RHSA-2023:3840	sqlite@3.26.0-16.el8_6.1	0:3.26.0-18.el8_8
Low	RHSA-2026:47117	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.18.0	0.52.0
Low	RHSA-2024:3163	pam@1.3.1-16.el8_6.1	0:1.3.1-33.el8
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.18.0	0.45.0
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.18.0	0.52.0
Low	GO-2024-2599	stdlib@go1.21.3	1.21.8
Low	GHSA-6pjf-3r9x-m592	github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250	3.1.1
Low	GHSA-fcv2-xgw5-pqxf	github.com/sigstore/sigstore@v1.7.5	1.10.4
Low	GO-2024-3106	stdlib@go1.21.3	1.22.7
Low	RHSA-2025:15001	krb5@1.18.2-16.el8_6	0:1.18.2-16.el8_6.4
Low	RHSA-2026:0728	gnupg2@2.2.20-3.el8_6	0:2.2.20-4.el8_10
Low	RHSA-2023:0100	systemd@239-58.el8_6.12	0:239-68.el8_7.1
Low	RHSA-2024:1818	java-1.8.0-openjdk@1:1.8.0.402.b06-1.el8_6	1:1.8.0.412.b08-1.el8_6
Low	RHSA-2024:1822	java-11-openjdk@1:11.0.22.0.7-1.el8_6	1:11.0.23.0.9-2.el8_6
Low	GO-2024-2600	stdlib@go1.21.3	1.21.8
Low	RHSA-2025:8419	python36@3.6.8-38.module+el8.5.0+12207+5c5719bc	0:3.6.8-39.module+el8.10.0+20784+edafcd43
Low	RHSA-2026:48703	vim@2:8.0.1763-19.el8_6.4	2:8.0.1763-31.el8_10
Low	RHSA-2026:36732	python-urllib3@1.24.2-5.el8_6.1	0:1.24.2-10.el8_10
Low	GO-2024-2609	stdlib@go1.21.3	1.21.8
Low	GO-2024-3107	stdlib@go1.21.3	1.22.7
Low	GHSA-pq67-6m6q-mj2v	urllib3@1.24.2	2.5.0
Low	RHSA-2025:8958	libxml2@2.9.7-13.el8_6.4	0:2.9.7-20.el8_10
Low	GHSA-cp6g-7hqx-qxhp	go.mongodb.org/mongo-driver@v1.11.3	1.17.7
Low	RHSA-2026:33126	glibc@2.28-189.8.el8_6	0:2.28-251.el8_10.38
Low	RHSA-2026:13285	libcap@2.48-4.el8_6	0:2.48-6.el8_10.1
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.18.0	0.52.0
Low	GHSA-jc7w-c686-c4v9	github.com/ulikunitz/xz@v0.5.11	0.5.15
Low	GHSA-pwhc-rpq9-4c8w	github.com/containerd/containerd@v1.7.0	1.7.29
Low	GHSA-273p-m2cw-6833	github.com/sigstore/rekor@v1.2.2	1.5.0
Low	GHSA-65pc-fj4g-8rjx	idna@2.5	3.15
Low	RHSA-2026:54290	python-idna@2.5-5.el8	0:2.5-8.el8_10
Low	GHSA-x86f-5xw2-fm2r	github.com/docker/docker@v24.0.7+incompatible	no fix listed
Low	GHSA-9wx4-h78v-vm56	requests@2.20.0	2.32.0
Low	RHSA-2025:0012	python-requests@2.20.0-3.el8_6	0:2.20.0-5.el8_10
Low	RHSA-2026:64809	expat@2.2.5-8.el8_6.4	0:2.5.0-2.el8_10.2
Low	RHSA-2025:3828	glibc@2.28-189.8.el8_6	0:2.28-251.el8_10.16
Low	GO-2023-2186	stdlib@go1.21.3	1.20.11
Low	RHSA-2026:50077	systemd@239-58.el8_6.12	0:239-58.el8_6.16
Low	RHSA-2026:20587	glibc@2.28-189.8.el8_6	0:2.28-251.el8_10.37
Low	RHSA-2024:0786	nss@3.79.0-12.el8_6	0:3.90.0-6.el8_9
Low	GO-2024-3333	golang.org/x/net@v0.20.0	0.33.0
Low	RHSA-2026:43420	acl@2.2.53-1.el8	0:2.4.0-1.el8_10
Low	RHSA-2024:7417	python3@3.6.8-47.el8_6.4	0:3.6.8-47.el8_6.7
Low	GHSA-389r-gv7p-r3rp	github.com/go-git/go-git/v5@v5.11.0	5.19.0
Low	RHSA-2025:1517	libxml2@2.9.7-13.el8_6.4	0:2.9.7-18.el8_10.2
Low	RHSA-2025:21977	libssh@0.9.6-4.el8_6	0:0.9.6-16.el8_10
Low	GO-2024-3105	stdlib@go1.21.3	1.22.7

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.13latest	1 year ago	3.72.0-ubi-1	1464294476	16,047

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/redhat-cop/sonatype-nexus.svg)](https://charts.stackradar.io/charts/redhat-cop/sonatype-nexus)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.