sonatype-nexus Helm chart

Name: sonatype-nexus Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

redhat-cop

Scored 14 Sept 2026

Sonatype Nexus is an open source repository manager

Latest 1.1.13 1 year agodeploys tag 3.72.0-ubi-1 0Artifact Hub

sonatype-nexus 1.1.13 deploys 2 container images: registry.connect.redhat.com/sonatype/nexus-repository-manager and quay.io/openshift/origin-jenkins-agent-base. Across the 1 measured, 848 findings — 14 critical, 64 high — 6 on CISA KEV. The highest contribution is RHSA-2023:4419 in openssh 8.0p1-15.el8_6.3, fixed in 0:8.0p1-19.el8_8.

Radar Score

16,0471464294476

848 findings over 1 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
registry.connect.redhat.com/sonatype/nexus-repository-manager	3.72.0-ubi-1	—	unmeasured
quay.io/openshift/origin-jenkins-agent-base	latest	1464294476	16,047

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

848 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	RHSA-2023:2859	git@2.31.8-1.el8_6	0:2.39.1-1.el8
Medium	RHSA-2024:2987	python-idna@2.5-5.el8	0:2.5-7.module+el8.9.0+19487+7dc18407
Medium	RHSA-2024:2987	python-requests@2.20.0-3.el8_6	0:2.20.0-4.module+el8.9.0+19487+7dc18407
Medium	RHSA-2024:2987	python-chardet@3.0.4-7.el8	0:3.0.4-10.module+el8.9.0+19487+7dc18407
Medium	RHSA-2024:2987	python-pysocks@1.6.8-3.el8	0:1.6.8-6.module+el8.9.0+19487+7dc18407
Medium	GHSA-4v98-7qmw-rqr8	github.com/moby/buildkit@v0.0.0-20181107081847-c3a857e3fca0	0.12.5
Medium	RHSA-2026:26275	openssl@1:1.1.1k-12.el8_6	1:1.1.1k-16.el8_6
Medium	RHSA-2025:1917	emacs@1:26.1-7.el8_6.1	1:26.1-13.el8_10
Medium	RHSA-2025:7540	libjpeg-turbo@1.5.3-12.el8	0:1.5.3-14.el8_10
Medium	RHSA-2022:1763	python-chardet@3.0.4-7.el8	0:3.0.4-19.module+el8.4.0+9822+20bf1249
Medium	RHSA-2022:1763	python-ply@3.9-9.el8	0:3.11-10.module+el8.4.0+9822+20bf1249
Medium	RHSA-2022:1763	python-idna@2.5-5.el8	0:2.10-3.module+el8.4.0+9822+20bf1249
Medium	RHSA-2022:1763	python-urllib3@1.24.2-5.el8_6.1	0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
Medium	RHSA-2022:1763	python-pysocks@1.6.8-3.el8	0:1.7.1-4.module+el8.4.0+9822+20bf1249
Medium	RHSA-2022:1763	python-requests@2.20.0-3.el8_6	0:2.25.0-2.module+el8.4.0+9822+20bf1249
Medium	RHSA-2023:4102	bind@32:9.11.36-3.el8_6.5	32:9.11.36-8.el8_8.1
Medium	RHSA-2022:7745	freetype@2.9.1-5.el8_6.3	0:2.9.1-9.el8
Medium	RHSA-2023:7877	openssl@1:1.1.1k-12.el8_6	1:1.1.1k-12.el8_9
Medium	GHSA-cx63-2mw6-8hw5	setuptools@39.2.0	70.0.0
Medium	RHSA-2024:5040	python-setuptools@39.2.0-7.el8_6	0:39.2.0-7.el8_6.1
Medium	RHSA-2024:5962	python-requests@2.20.0-3.el8_6	0:2.25.0-3.module+el8.9.0+19644+d68f775d
Medium	RHSA-2024:5962	python-pysocks@1.6.8-3.el8	0:1.7.1-4.module+el8.9.0+19644+d68f775d
Medium	RHSA-2024:5962	python-ply@3.9-9.el8	0:3.11-10.module+el8.9.0+19644+d68f775d
Medium	RHSA-2024:5962	python-idna@2.5-5.el8	0:2.10-4.module+el8.10.0+21815+bb024982
Medium	RHSA-2024:5962	python-chardet@3.0.4-7.el8	0:3.0.4-19.module+el8.9.0+19644+d68f775d
Medium	RHSA-2024:5962	python-urllib3@1.24.2-5.el8_6.1	0:1.25.10-5.module+el8.10.0+20443+f0a692fe
Medium	RHSA-2024:6220	python-pysocks@1.6.8-3.el8	0:1.7.1-4.module+el8.4.0+9822+20bf1249
Medium	RHSA-2024:6220	python-requests@2.20.0-3.el8_6	0:2.25.0-2.module+el8.4.0+9822+20bf1249
Medium	RHSA-2024:6220	python-urllib3@1.24.2-5.el8_6.1	0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
Medium	RHSA-2024:6220	python-ply@3.9-9.el8	0:3.11-10.module+el8.4.0+9822+20bf1249
Medium	RHSA-2024:6220	python-chardet@3.0.4-7.el8	0:3.0.4-19.module+el8.4.0+9822+20bf1249
Medium	RHSA-2024:6220	python-idna@2.5-5.el8	0:2.10-3.module+el8.4.0+9822+20bf1249
Medium	RHSA-2025:2600	rsync@3.1.3-14.el8_6.5	0:3.1.3-21.el8_10
Medium	GHSA-gpvv-69j7-gwj8	pip@9.0.3	19.2
Medium	GHSA-38jv-5279-wg99	urllib3@1.24.2	2.6.3
Medium	RHSA-2026:1254	python-urllib3@1.24.2-5.el8_6.1	0:1.24.2-9.el8_10
Medium	RHSA-2026:2717	python-urllib3@1.24.2-5.el8_6.1	0:1.24.2-5.el8_6.4
Medium	GHSA-v725-9546-7q7m	github.com/go-git/go-git/v5@v5.11.0	5.13.0
Medium	RHSA-2026:15893	openssh@8.0p1-15.el8_6.3	0:8.0p1-15.el8_6.4
Medium	RHSA-2024:7846	openssl@1:1.1.1k-12.el8_6	1:1.1.1k-14.el8_6
Medium	RHSA-2025:10698	libxml2@2.9.7-13.el8_6.4	0:2.9.7-21.el8_10.1
Medium	RHSA-2025:12098	libxml2@2.9.7-13.el8_6.4	0:2.9.7-13.el8_6.10
Medium	RHSA-2023:2860	python-chardet@3.0.4-7.el8	0:3.0.4-10.module+el8.1.0+3111+de3f2d8e
Medium	RHSA-2023:2860	python-idna@2.5-5.el8	0:2.5-7.module+el8.1.0+3111+de3f2d8e
Medium	RHSA-2023:2860	python-pysocks@1.6.8-3.el8	0:1.6.8-6.module+el8.1.0+3111+de3f2d8e
Medium	RHSA-2023:2860	python-requests@2.20.0-3.el8_6	0:2.20.0-3.module+el8.2.0+4577+feefd9b8
Medium	RHSA-2023:5474	bind@32:9.11.36-3.el8_6.5	32:9.11.36-8.el8_8.2
Medium	GHSA-r9hx-vwmv-q579	setuptools@39.2.0	65.5.1
Medium	RHSA-2022:7790	bind@32:9.11.36-3.el8_6.5	32:9.11.36-5.el8
Medium	RHSA-2023:0103	expat@2.2.5-8.el8_6.4	0:2.2.5-10.el8_7.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.13latest	1 year ago	3.72.0-ubi-1	1464294476	16,047

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/redhat-cop/sonatype-nexus.svg)](https://charts.stackradar.io/charts/redhat-cop/sonatype-nexus)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.