sonatype-nexus Helm chart

Name: sonatype-nexus Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

redhat-cop

Scored 15 Sept 2026

Sonatype Nexus is an open source repository manager

Latest 1.1.13 1 year agodeploys tag 3.72.0-ubi-1 0Artifact Hub

sonatype-nexus 1.1.13 deploys 2 container images: registry.connect.redhat.com/sonatype/nexus-repository-manager and quay.io/openshift/origin-jenkins-agent-base. Across the 1 measured, 849 findings — 13 critical, 65 high — 6 on CISA KEV. The highest contribution is RHSA-2023:4419 in openssh 8.0p1-15.el8_6.3, fixed in 0:8.0p1-19.el8_8.

Radar Score

16,0601365294477

849 findings over 1 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
registry.connect.redhat.com/sonatype/nexus-repository-manager	3.72.0-ubi-1	—	unmeasured
quay.io/openshift/origin-jenkins-agent-base	latest	1365294477	16,060

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

849 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-pxq6-2prw-chj9	github.com/docker/docker@v24.0.7+incompatible	no fix listed
Low	RHSA-2025:11042	socat@1.7.4.1-1.el8	0:1.7.4.1-2.el8_10
Low	GHSA-xhf5-7wjv-pqxp	github.com/containerd/containerd@v1.7.0	1.7.33
Low	GHSA-3p65-76g6-3w7r	github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250	3.1.0
Low	GHSA-f5mr-q85p-6hh6	github.com/sigstore/fulcio@v1.4.3	1.8.6
Low	RHSA-2024:4998	wget@1.19.5-10.el8	0:1.19.5-10.el8_6.2
Low	RHSA-2026:6473	python3@3.6.8-47.el8_6.4	0:3.6.8-75.el8_10
Low	RHSA-2024:1784	gnutls@3.6.16-5.el8_6.2	0:3.6.16-8.el8_9.3
Low	RHSA-2026:36730	libsolv@0.7.20-1.el8	0:0.7.20-7.el8_10
Low	GHSA-m3xc-h892-ggx6	github.com/go-git/go-billy/v5@v5.5.0	5.9.0
Low	RHSA-2023:7836	avahi@0.7-20.el8_6.3	0:0.7-21.el8_9.1
Low	RHSA-2025:11805	perl@0:1.28-421.el8	0:1.28-423.el8_10
Low	RHSA-2026:37070	perl-Term-ANSIColor@4.06-396.el8	0:5.01-458.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-threads-shared@1.58-2.el8	0:1.61-457.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Storable@1:3.11-3.el8	1:3.21-457.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Socket@4:2.027-3.el8	4:2.031-1.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Time-Local@1:1.280-1.el8	2:1.300-4.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Scalar-List-Utils@3:1.49-2.el8	4:1.55-457.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Unicode-Normalize@1.25-396.el8	0:1.27-458.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Pod-Usage@4:1.69-395.el8	4:2.01-1.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Pod-Simple@1:3.35-395.el8	1:3.42-1.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-URI@1.73-3.el8	0:1.76-5.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Pod-Perldoc@3.28-396.el8	0:3.28.01-443.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-podlators@4.11-1.el8	1:4.14-457.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Pod-Escapes@1:1.07-395.el8	1:1.07-396.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-PathTools@3.74-1.el8	0:3.78-439.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-parent@1:0.237-1.el8	1:0.238-457.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-MIME-Base64@3.15-396.el8	0:3.15-1001.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-libnet@3.11-3.el8	0:3.13-1.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-IO-Socket-IP@0.39-5.el8	0:0.41-2.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-HTTP-Tiny@0.074-1.el8_6.1	0:0.078-1.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Getopt-Long@1:2.50-4.el8	1:2.52-1.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-File-Temp@0.230.600-1.el8	1:0.231.100-1.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-File-Path@2.15-2.el8	0:2.16-439.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Exporter@5.72-396.el8	0:5.74-458.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Encode@4:2.97-3.el8	4:3.08-461.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Digest-MD5@2.55-396.el8	0:2.58-1.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Digest@1.17-395.el8	0:1.20-1.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Data-Dumper@2.167-399.el8	0:2.174-440.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-constant@1.33-396.el8	0:1.33-1001.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Carp@1.42-396.el8	0:1.50-439.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Text-Tabs+Wrap@2013.0523-395.el8	0:2013.0523-396.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Text-ParseWords@3.30-395.el8	0:3.30-396.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-threads@1:2.21-2.el8	1:2.25-457.module+el8.6.0+13324+628a2397
Low	RHSA-2026:37070	perl-Term-Cap@1.17-395.el8	0:1.17-396.module+el8.6.0+13324+628a2397
Low	GHSA-qgq7-7hm3-q39j	github.com/go-git/go-git/v5@v5.11.0	5.19.2
Low	RHSA-2026:42733	glibc@2.28-189.8.el8_6	0:2.28-251.el8_10.40
Low	RHSA-2026:0596	cups@1:2.2.6-45.el8_6.3	1:2.2.6-66.el8_10
Low	RHSA-2026:5585	gnutls@3.6.16-5.el8_6.2	0:3.6.16-8.el8_10.5
Low	RHSA-2026:55775	java-1.8.0-openjdk@1:1.8.0.402.b06-1.el8_6	1:1.8.0.504.b01-1.1.el8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.13latest	1 year ago	3.72.0-ubi-1	1365294477	16,060

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/redhat-cop/sonatype-nexus.svg)](https://charts.stackradar.io/charts/redhat-cop/sonatype-nexus)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.