sonatype-nexus Helm chart
redhat-copScored 15 Sept 2026
Sonatype Nexus is an open source repository manager
Latest 1.1.13 1 year agodeploys tag 3.72.0-ubi-1 0Artifact Hub
sonatype-nexus 1.1.13 deploys 2 container images: registry.connect.redhat.com/sonatype/nexus-repository-manager and quay.io/openshift/origin-jenkins-agent-base. Across the 1 measured, 849 findings — 13 critical, 65 high — 6 on CISA KEV. The highest contribution is RHSA-2023:4419 in openssh 8.0p1-15.el8_6.3, fixed in 0:8.0p1-19.el8_8.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| registry.connect.redhat.com/ | 3.72.0-ubi-1 | — | unmeasured |
| quay.io/ | latest | 1365294477 | 16,060 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-34jh-p97f-mpxf | urllib3 | 1.26.19 |
| Low | RHSA-2024:5041 | python-urllib3 | 0:1.24.2-5.el8_6.3 |
| Low | RHSA-2026:62144 | wget | 0:1.19.5-16.el8_10 |
| Low | GHSA-4xh5-x5gv-qwph | pip | 25.3 |
| Low | RHSA-2023:4864 | cups | 1:2.2.6-51.el8_8.1 |
| Low | GHSA-45gg-vh54-h5m9 | golang.org/ | 0.52.0 |
| Low | RHSA-2023:7190 | avahi | 0:0.7-21.el8 |
| Low | GHSA-h35f-9h28-mq5c | setuptools | 83.0.0 |
| Low | GO-2024-2963 | stdlib | 1.21.12 |
| Low | RHSA-2026:65998 | gzip | 0:1.9-15.el8_10 |
| Low | GHSA-5cv4-jp36-h3mw | golang.org/ | 0.55.0 |
| Low | GHSA-f83f-xpx7-ffpw | github.com/ | 1.8.3 |
| Low | RHSA-2025:10618 | jq | 0:1.6-11.el8_10 |
| Low | RHSA-2025:10620 | jq | 0:1.6-3.el8_6.1 |
| Low | RHSA-2026:66451 | glib2 | 0:2.56.4-178.el8_10 |
| Low | GHSA-jpcc-p29g-p8mq | github.com/ | 1.7.33 |
| Low | RHSA-2026:4442 | vim | 2:8.0.1763-22.el8_10 |
| Low | GHSA-xw73-rw38-6vjc | github.com/ | 24.0.9 |
| Low | GHSA-j5w8-q4qc-rx2x | golang.org/ | 0.45.0 |
| Low | RHSA-2026:58938 | sqlite | 0:3.26.0-21.el8_10 |
| Low | RHSA-2026:59020 | sqlite | 0:3.26.0-16.el8_6.4 |
| Low | PYSEC-2026-3721 | pip | 26.2 |
| Low | GHSA-vvgc-356p-c3xw | golang.org/ | 0.38.0 |
| Low | GHSA-mq26-g339-26xf | pip | 23.3 |
| Low | GO-2023-2382 | stdlib | 1.20.12 |
| Low | RHSA-2023:3840 | sqlite | 0:3.26.0-18.el8_8 |
| Low | RHSA-2026:47117 | libgcrypt | 0:1.8.5-8.el8_10 |
| Low | GHSA-qpw4-5x99-6vjp | golang.org/ | 0.52.0 |
| Low | RHSA-2024:3163 | pam | 0:1.3.1-33.el8 |
| Low | GHSA-f6x5-jh6r-wrfv | golang.org/ | 0.45.0 |
| Low | GHSA-78mq-xcr3-xm33 | golang.org/ | 0.52.0 |
| Low | GO-2024-2599 | stdlib | 1.21.8 |
| Low | GHSA-6pjf-3r9x-m592 | github.com/ | 3.1.1 |
| Low | GHSA-fcv2-xgw5-pqxf | github.com/ | 1.10.4 |
| Low | GO-2024-3106 | stdlib | 1.22.7 |
| Low | RHSA-2025:15001 | krb5 | 0:1.18.2-16.el8_6.4 |
| Low | RHSA-2026:0728 | gnupg2 | 0:2.2.20-4.el8_10 |
| Low | RHSA-2023:0100 | systemd | 0:239-68.el8_7.1 |
| Low | RHSA-2024:1818 | java-1.8.0-openjdk | 1:1.8.0.412.b08-1.el8_6 |
| Low | RHSA-2024:1822 | java-11-openjdk | 1:11.0.23.0.9-2.el8_6 |
| Low | GO-2024-2600 | stdlib | 1.21.8 |
| Low | RHSA-2025:8419 | python36 | 0:3.6.8-39.module+el8.10.0+20784+edafcd43 |
| Low | RHSA-2026:48703 | vim | 2:8.0.1763-31.el8_10 |
| Low | RHSA-2026:36732 | python-urllib3 | 0:1.24.2-10.el8_10 |
| Low | GO-2024-2609 | stdlib | 1.21.8 |
| Low | GO-2024-3107 | stdlib | 1.22.7 |
| Low | GHSA-pq67-6m6q-mj2v | urllib3 | 2.5.0 |
| Low | RHSA-2025:8958 | libxml2 | 0:2.9.7-20.el8_10 |
| Low | GHSA-cp6g-7hqx-qxhp | go.mongodb.org/ | 1.17.7 |
| Low | RHSA-2026:33126 | glibc | 0:2.28-251.el8_10.38 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 1.1.13latest | 1 year ago | 3.72.0-ubi-1 | 1365294477 | 16,060 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.