sonatype-nexus Helm chart

Name: sonatype-nexus Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

redhat-cop

Scored 14 Sept 2026

Sonatype Nexus is an open source repository manager

Latest 1.1.13 1 year agodeploys tag 3.72.0-ubi-1 0Artifact Hub

sonatype-nexus 1.1.13 deploys 2 container images: registry.connect.redhat.com/sonatype/nexus-repository-manager and quay.io/openshift/origin-jenkins-agent-base. Across the 1 measured, 848 findings — 14 critical, 64 high — 6 on CISA KEV. The highest contribution is RHSA-2023:4419 in openssh 8.0p1-15.el8_6.3, fixed in 0:8.0p1-19.el8_8.

Radar Score

16,0471464294476

848 findings over 1 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
registry.connect.redhat.com/sonatype/nexus-repository-manager	3.72.0-ubi-1	—	unmeasured
quay.io/openshift/origin-jenkins-agent-base	latest	1464294476	16,047

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

848 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	PYSEC-2025-49	setuptools@39.2.0	78.1.1
Medium	RHSA-2023:0625	libksba@1.3.5-9.el8_6	0:1.3.5-9.el8_7
Medium	RHSA-2024:6975	python3@3.6.8-47.el8_6.4	0:3.6.8-67.el8_10
Medium	RHSA-2024:8359	python-chardet@3.0.4-7.el8	0:3.0.4-19.module+el8.9.0+19644+d68f775d
Medium	RHSA-2024:8359	python-requests@2.20.0-3.el8_6	0:2.25.0-3.module+el8.9.0+19644+d68f775d
Medium	RHSA-2024:8359	python-pysocks@1.6.8-3.el8	0:1.7.1-4.module+el8.9.0+19644+d68f775d
Medium	RHSA-2024:8359	python-ply@3.9-9.el8	0:3.11-10.module+el8.9.0+19644+d68f775d
Medium	RHSA-2024:8359	python-urllib3@1.24.2-5.el8_6.1	0:1.25.10-5.module+el8.10.0+20443+f0a692fe
Medium	RHSA-2024:8359	python-idna@2.5-5.el8	0:2.10-4.module+el8.10.0+21815+bb024982
Medium	RHSA-2023:7174	perl-HTTP-Tiny@0.074-1.el8_6.1	0:0.074-2.el8
Medium	RHSA-2024:1601	curl@7.61.1-22.el8_6.12	0:7.61.1-33.el8_9.5
Medium	RHSA-2026:3972	git-lfs@2.13.3-3.el8_6	0:2.13.3-3.el8_6.6
Medium	RHSA-2026:3985	git-lfs@2.13.3-3.el8_6	0:3.4.1-8.el8_10
Medium	RHSA-2024:3166	openssh@8.0p1-15.el8_6.3	0:8.0p1-24.el8
Medium	RHSA-2024:5524	bind@32:9.11.36-3.el8_6.5	32:9.11.36-16.el8_10.2
Medium	RHSA-2024:5908	bind@32:9.11.36-3.el8_6.5	32:9.11.36-3.el8_6.9
Medium	RHSA-2024:1102	gmp@1:6.1.2-10.el8	1:6.1.2-11.el8_6.1
Medium	RHSA-2024:6915	python-pysocks@1.6.8-3.el8	0:1.7.1-4.module+el8.4.0+9822+20bf1249
Medium	RHSA-2024:6915	python-urllib3@1.24.2-5.el8_6.1	0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
Medium	RHSA-2024:6915	python-ply@3.9-9.el8	0:3.11-10.module+el8.4.0+9822+20bf1249
Medium	RHSA-2024:6915	python-idna@2.5-5.el8	0:2.10-3.module+el8.4.0+9822+20bf1249
Medium	RHSA-2024:6915	python-requests@2.20.0-3.el8_6	0:2.25.0-2.module+el8.4.0+9822+20bf1249
Medium	RHSA-2024:6915	python-chardet@3.0.4-7.el8	0:3.0.4-19.module+el8.4.0+9822+20bf1249
Medium	RHSA-2026:24339	bind@32:9.11.36-3.el8_6.5	32:9.11.36-16.el8_10.8
Medium	RHSA-2024:5312	krb5@1.18.2-16.el8_6	0:1.18.2-29.el8_10
Medium	RHSA-2024:5625	krb5@1.18.2-16.el8_6	0:1.18.2-16.el8_6.1
Medium	RHSA-2023:7083	emacs@1:26.1-7.el8_6.1	1:26.1-11.el8
Medium	RHSA-2024:1103	emacs@1:26.1-7.el8_6.1	1:26.1-7.el8_6.3
Medium	RHSA-2024:1615	expat@2.2.5-8.el8_6.4	0:2.2.5-11.el8_9.1
Medium	RHSA-2024:2980	harfbuzz@1.7.5-3.el8	0:1.7.5-4.el8
Medium	RHSA-2024:0114	python3@3.6.8-47.el8_6.4	0:3.6.8-56.el8_9.2
Medium	RHSA-2024:10953	python36@3.6.8-38.module+el8.5.0+12207+5c5719bc	0:3.6.8-39.module+el8.10.0+20784+edafcd43
Medium	RHSA-2026:20611	gnutls@3.6.16-5.el8_6.2	0:3.6.16-8.el8_10.6
Medium	RHSA-2026:30849	libtasn1@4.13-3.el8_6.1	0:4.13-3.el8_6.2
Medium	RHSA-2026:30849	gnutls@3.6.16-5.el8_6.2	0:3.6.16-5.el8_6.5
Medium	GHSA-6wvf-f2vw-3425	github.com/containers/image/v5@v5.29.0	5.29.3
Medium	RHSA-2024:2985	python-ply@3.9-9.el8	0:3.11-10.module+el8.9.0+19644+d68f775d
Medium	RHSA-2024:2985	python-urllib3@1.24.2-5.el8_6.1	0:1.25.10-5.module+el8.10.0+20443+f0a692fe
Medium	RHSA-2024:2985	python-idna@2.5-5.el8	0:2.10-3.module+el8.9.0+19644+d68f775d
Medium	RHSA-2024:2985	python-pysocks@1.6.8-3.el8	0:1.7.1-4.module+el8.9.0+19644+d68f775d
Medium	RHSA-2024:2985	python-requests@2.20.0-3.el8_6	0:2.25.0-3.module+el8.9.0+19644+d68f775d
Medium	RHSA-2024:2985	python-chardet@3.0.4-7.el8	0:3.0.4-19.module+el8.9.0+19644+d68f775d
Medium	RHSA-2024:6989	expat@2.2.5-8.el8_6.4	0:2.2.5-15.el8_10
Medium	RHSA-2024:4264	openldap@2.4.46-18.el8	0:2.4.46-19.el8_10
Medium	RHSA-2025:23530	python-urllib3@1.24.2-5.el8_6.1	0:1.25.10-5.module+el8.10.0+20443+f0a692fe
Medium	RHSA-2025:23530	python-ply@3.9-9.el8	0:3.11-10.module+el8.9.0+19644+d68f775d
Medium	RHSA-2025:23530	python-idna@2.5-5.el8	0:2.10-4.module+el8.10.0+21815+bb024982
Medium	RHSA-2025:23530	python-chardet@3.0.4-7.el8	0:3.0.4-19.module+el8.9.0+19644+d68f775d
Medium	RHSA-2025:23530	python-pysocks@1.6.8-3.el8	0:1.7.1-4.module+el8.9.0+19644+d68f775d
Medium	RHSA-2025:23530	python-requests@2.20.0-3.el8_6	0:2.25.0-3.module+el8.9.0+19644+d68f775d

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.13latest	1 year ago	3.72.0-ubi-1	1464294476	16,047

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/redhat-cop/sonatype-nexus.svg)](https://charts.stackradar.io/charts/redhat-cop/sonatype-nexus)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.