sonatype-nexus Helm chart

Name: sonatype-nexus Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

redhat-cop

Scored 14 Sept 2026

Sonatype Nexus is an open source repository manager

Latest 1.1.13 1 year agodeploys tag 3.72.0-ubi-1 0Artifact Hub

sonatype-nexus 1.1.13 deploys 2 container images: registry.connect.redhat.com/sonatype/nexus-repository-manager and quay.io/openshift/origin-jenkins-agent-base. Across the 1 measured, 848 findings — 14 critical, 64 high — 6 on CISA KEV. The highest contribution is RHSA-2023:4419 in openssh 8.0p1-15.el8_6.3, fixed in 0:8.0p1-19.el8_8.

Radar Score

16,0471464294476

848 findings over 1 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
registry.connect.redhat.com/sonatype/nexus-repository-manager	3.72.0-ubi-1	—	unmeasured
quay.io/openshift/origin-jenkins-agent-base	latest	1464294476	16,047

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

848 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	RHSA-2024:0627	gnutls@3.6.16-5.el8_6.2	0:3.6.16-8.el8_9.1
Medium	RHSA-2024:8922	bzip2@1.0.6-26.el8	0:1.0.6-27.el8_10
Medium	GHSA-j8r2-6x86-q33q	requests@2.20.0	2.31.0
Medium	RHSA-2023:4520	python-requests@2.20.0-3.el8_6	0:2.20.0-3.el8_8
Medium	RHSA-2023:7042	python-pysocks@1.6.8-3.el8	0:1.6.8-6.module+el8.9.0+19487+7dc18407
Medium	RHSA-2023:7042	python-idna@2.5-5.el8	0:2.5-7.module+el8.9.0+19487+7dc18407
Medium	RHSA-2023:7042	python-chardet@3.0.4-7.el8	0:3.0.4-10.module+el8.9.0+19487+7dc18407
Medium	RHSA-2026:16060	bind@32:9.11.36-3.el8_6.5	32:9.11.36-3.el8_6.12
Medium	RHSA-2024:4256	less@530-1.el8	0:530-3.el8_10
Medium	RHSA-2024:3466	python-idna@2.5-5.el8	0:2.10-4.module+el8.10.0+21815+bb024982
Medium	RHSA-2024:3466	python-pysocks@1.6.8-3.el8	0:1.7.1-4.module+el8.9.0+19644+d68f775d
Medium	RHSA-2024:3466	python-ply@3.9-9.el8	0:3.11-10.module+el8.9.0+19644+d68f775d
Medium	RHSA-2024:3466	python-requests@2.20.0-3.el8_6	0:2.25.0-3.module+el8.9.0+19644+d68f775d
Medium	RHSA-2024:3466	python-chardet@3.0.4-7.el8	0:3.0.4-19.module+el8.9.0+19644+d68f775d
Medium	RHSA-2024:3466	python-urllib3@1.24.2-5.el8_6.1	0:1.25.10-5.module+el8.10.0+20443+f0a692fe
Medium	PYSEC-2023-192	urllib3@1.24.2	2.0.6
Medium	RHSA-2025:14900	python-idna@2.5-5.el8	0:2.10-4.module+el8.10.0+21815+bb024982
Medium	RHSA-2025:14900	python-urllib3@1.24.2-5.el8_6.1	0:1.25.10-5.module+el8.10.0+20443+f0a692fe
Medium	RHSA-2025:14900	python-requests@2.20.0-3.el8_6	0:2.25.0-3.module+el8.9.0+19644+d68f775d
Medium	RHSA-2025:14900	python-ply@3.9-9.el8	0:3.11-10.module+el8.9.0+19644+d68f775d
Medium	RHSA-2025:14900	python-pysocks@1.6.8-3.el8	0:1.7.1-4.module+el8.9.0+19644+d68f775d
Medium	RHSA-2025:14900	python-chardet@3.0.4-7.el8	0:3.0.4-19.module+el8.9.0+19644+d68f775d
Medium	RHSA-2025:23854	rsync@3.1.3-14.el8_6.5	0:3.1.3-14.el8_6.9
Medium	RHSA-2024:4971	emacs@1:26.1-7.el8_6.1	1:26.1-7.el8_6.5
Medium	RHSA-2024:6987	emacs@1:26.1-7.el8_6.1	1:26.1-12.el8_10
Medium	RHSA-2025:10128	python3@3.6.8-47.el8_6.4	0:3.6.8-70.el8_10
Medium	RHSA-2025:10484	python3@3.6.8-47.el8_6.4	0:3.6.8-47.el8_6.8
Medium	RHSA-2025:2513	libxml2@2.9.7-13.el8_6.4	0:2.9.7-13.el8_6.8
Medium	RHSA-2025:2686	libxml2@2.9.7-13.el8_6.4	0:2.9.7-19.el8_10
Medium	GHSA-wqvq-5m8c-6g24	urllib3@1.24.2	1.25.9
Medium	RHSA-2024:0751	libmaxminddb@1.2.0-10.el8	0:1.2.0-10.el8_6.1
Medium	PYSEC-2024-60	idna@2.5	3.7
Medium	GO-2026-4887	github.com/docker/docker@v24.0.7+incompatible	no fix listed
Medium	RHSA-2025:10862	java-1.8.0-openjdk@1:1.8.0.402.b06-1.el8_6	1:1.8.0.462.b08-2.el8
Medium	RHSA-2024:3299	libxml2@2.9.7-13.el8_6.4	0:2.9.7-13.el8_6.5
Medium	RHSA-2024:3344	glibc@2.28-189.8.el8_6	0:2.28-251.el8_10.2
Medium	RHSA-2025:0765	git-lfs@2.13.3-3.el8_6	0:2.13.3-3.el8_6.3
Medium	RHSA-2023:1569	gnutls@3.6.16-5.el8_6.2	0:3.6.16-6.el8_7
Medium	RHSA-2025:3913	expat@2.2.5-8.el8_6.4	0:2.2.5-17.el8_10
Medium	RHSA-2025:11036	python-setuptools@39.2.0-7.el8_6	0:39.2.0-9.el8_10
Medium	RHSA-2025:15410	python-pysocks@1.6.8-3.el8	0:1.7.1-4.module+el8.4.0+9822+20bf1249
Medium	RHSA-2025:15410	python-requests@2.20.0-3.el8_6	0:2.25.0-2.module+el8.4.0+9822+20bf1249
Medium	RHSA-2025:15410	python-urllib3@1.24.2-5.el8_6.1	0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
Medium	RHSA-2025:15410	python-idna@2.5-5.el8	0:2.10-3.module+el8.4.0+9822+20bf1249
Medium	RHSA-2025:15410	python-ply@3.9-9.el8	0:3.11-10.module+el8.4.0+9822+20bf1249
Medium	RHSA-2025:15410	python-chardet@3.0.4-7.el8	0:3.0.4-19.module+el8.4.0+9822+20bf1249
Medium	GHSA-8r3f-844c-mc37	google.golang.org/protobuf@v1.31.0	1.33.0
Medium	RHSA-2023:7165	cups@1:2.2.6-45.el8_6.3	1:2.2.6-54.el8_9
Medium	RHSA-2024:1101	cups@1:2.2.6-45.el8_6.3	1:2.2.6-45.el8_6.4
Medium	RHSA-2026:8534	libarchive@3.3.3-4.el8_6	0:3.3.3-7.el8_10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.13latest	1 year ago	3.72.0-ubi-1	1464294476	16,047

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/redhat-cop/sonatype-nexus.svg)](https://charts.stackradar.io/charts/redhat-cop/sonatype-nexus)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.