sonatype-nexus Helm chart
redhat-copScored 15 Sept 2026
Sonatype Nexus is an open source repository manager
Latest 1.1.13 1 year agodeploys tag 3.72.0-ubi-1 0Artifact Hub
sonatype-nexus 1.1.13 deploys 2 container images: registry.connect.redhat.com/sonatype/nexus-repository-manager and quay.io/openshift/origin-jenkins-agent-base. Across the 1 measured, 849 findings — 13 critical, 65 high — 6 on CISA KEV. The highest contribution is RHSA-2023:4419 in openssh 8.0p1-15.el8_6.3, fixed in 0:8.0p1-19.el8_8.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| registry.connect.redhat.com/ | 3.72.0-ubi-1 | — | unmeasured |
| quay.io/ | latest | 1365294477 | 16,060 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | RHSA-2026:13285 | libcap | 0:2.48-6.el8_10.1 |
| Low | GHSA-9m57-25v3-79x9 | golang.org/ | 0.52.0 |
| Low | GHSA-jc7w-c686-c4v9 | github.com/ | 0.5.15 |
| Low | GHSA-pwhc-rpq9-4c8w | github.com/ | 1.7.29 |
| Low | GHSA-273p-m2cw-6833 | github.com/ | 1.5.0 |
| Low | GHSA-65pc-fj4g-8rjx | idna | 3.15 |
| Low | RHSA-2026:54290 | python-idna | 0:2.5-8.el8_10 |
| Low | GHSA-x86f-5xw2-fm2r | github.com/ | no fix listed |
| Low | GHSA-9wx4-h78v-vm56 | requests | 2.32.0 |
| Low | RHSA-2025:0012 | python-requests | 0:2.20.0-5.el8_10 |
| Low | RHSA-2026:64809 | expat | 0:2.5.0-2.el8_10.2 |
| Low | RHSA-2025:3828 | glibc | 0:2.28-251.el8_10.16 |
| Low | GO-2023-2186 | stdlib | 1.20.11 |
| Low | RHSA-2026:50077 | systemd | 0:239-58.el8_6.16 |
| Low | RHSA-2026:20587 | glibc | 0:2.28-251.el8_10.37 |
| Low | RHSA-2024:0786 | nss | 0:3.90.0-6.el8_9 |
| Low | GO-2024-3333 | golang.org/ | 0.33.0 |
| Low | RHSA-2026:43420 | acl | 0:2.4.0-1.el8_10 |
| Low | RHSA-2024:7417 | python3 | 0:3.6.8-47.el8_6.7 |
| Low | GHSA-389r-gv7p-r3rp | github.com/ | 5.19.0 |
| Low | RHSA-2025:1517 | libxml2 | 0:2.9.7-18.el8_10.2 |
| Low | RHSA-2025:21977 | libssh | 0:0.9.6-16.el8_10 |
| Low | GO-2024-3105 | stdlib | 1.22.7 |
| Low | GHSA-7236-3392-c5c6 | github.com/ | 0.31.1 |
| Low | GHSA-m6hq-p25p-ffr2 | github.com/ | 1.7.29 |
| Low | GO-2026-4981 | stdlib | 1.25.10 |
| Low | GO-2025-3563 | stdlib | 1.23.8 |
| Low | RHSA-2025:17715 | vim | 2:8.0.1763-21.el8_10 |
| Low | GHSA-4c4x-jm2x-pf9j | github.com/ | 1.5.0 |
| Low | GO-2026-4977 | stdlib | 1.25.10 |
| Low | GO-2024-2610 | stdlib | 1.21.8 |
| Low | GO-2026-4986 | stdlib | 1.25.10 |
| Low | GO-2026-4918 | golang.org/ | 0.53.0 |
| Low | GO-2026-4918 | stdlib | 1.25.10 |
| Low | GO-2026-4337 | stdlib | 1.24.13 |
| Low | GHSA-qccp-gfcp-xxvc | urllib3 | 2.7.0 |
| Low | GHSA-crhj-59gh-8x96 | github.com/ | 5.19.1 |
| Low | GO-2026-4601 | stdlib | 1.25.8 |
| Low | GHSA-59jp-pj84-45mr | github.com/ | 1.8.5 |
| Low | GO-2026-5026 | stdlib | 1.25.13 |
| Low | GO-2026-5026 | golang.org/ | 0.55.0 |
| Low | RHSA-2026:1852 | util-linux | 0:2.32.1-48.el8_10 |
| Low | GO-2025-3420 | stdlib | 1.22.11 |
| Low | GO-2026-4342 | stdlib | 1.24.12 |
| Low | GO-2024-2598 | stdlib | 1.21.8 |
| Low | GO-2025-3751 | stdlib | 1.23.10 |
| Low | RHSA-2025:23481 | openssh | 0:8.0p1-27.el8_10 |
| Low | GHSA-g4mx-q9vg-27p4 | urllib3 | 1.26.18 |
| Low | GO-2025-4116 | golang.org/ | 0.43.0 |
| Low | RHSA-2026:55804 | nghttp2 | 0:1.33.0-6.el8_10.3 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 1.1.13latest | 1 year ago | 3.72.0-ubi-1 | 1365294477 | 16,060 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.