sonatype-nexus Helm chart

Name: sonatype-nexus Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

redhat-cop

Scored 14 Sept 2026

Sonatype Nexus is an open source repository manager

Latest 1.1.13 1 year agodeploys tag 3.72.0-ubi-1 0Artifact Hub

sonatype-nexus 1.1.13 deploys 2 container images: registry.connect.redhat.com/sonatype/nexus-repository-manager and quay.io/openshift/origin-jenkins-agent-base. Across the 1 measured, 848 findings — 14 critical, 64 high — 6 on CISA KEV. The highest contribution is RHSA-2023:4419 in openssh 8.0p1-15.el8_6.3, fixed in 0:8.0p1-19.el8_8.

Radar Score

16,0471464294476

848 findings over 1 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
registry.connect.redhat.com/sonatype/nexus-repository-manager	3.72.0-ubi-1	—	unmeasured
quay.io/openshift/origin-jenkins-agent-base	latest	1464294476	16,047

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

848 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	RHSA-2026:8908	libarchive@3.3.3-4.el8_6	0:3.3.3-6.el8_6.1
Medium	GHSA-m3r6-h7wv-7xxv	github.com/moby/buildkit@v0.0.0-20181107081847-c3a857e3fca0	0.12.5
Medium	RHSA-2023:2963	curl@7.61.1-22.el8_6.12	0:7.61.1-30.el8
Medium	RHSA-2024:4563	java-1.8.0-openjdk@1:1.8.0.402.b06-1.el8_6	1:1.8.0.422.b05-2.el8
Medium	RHSA-2024:4567	java-11-openjdk@1:11.0.22.0.7-1.el8_6	1:11.0.24.0.8-3.el8
Medium	RHSA-2023:5993	python-pysocks@1.6.8-3.el8	0:1.6.8-6.module+el8.1.0+3111+de3f2d8e
Medium	RHSA-2023:5993	python-idna@2.5-5.el8	0:2.5-7.module+el8.1.0+3111+de3f2d8e
Medium	RHSA-2023:5993	python-requests@2.20.0-3.el8_6	0:2.20.0-3.module+el8.2.0+4577+feefd9b8
Medium	RHSA-2023:5993	python-chardet@3.0.4-7.el8	0:3.0.4-10.module+el8.1.0+3111+de3f2d8e
Medium	RHSA-2023:5997	python3@3.6.8-47.el8_6.4	0:3.6.8-51.el8_8.2
Medium	RHSA-2023:5998	python-urllib3@1.24.2-5.el8_6.1	0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
Medium	RHSA-2023:5998	python-ply@3.9-9.el8	0:3.11-10.module+el8.4.0+9822+20bf1249
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.18.0	0.52.0
Medium	RHSA-2025:15702	cups@1:2.2.6-45.el8_6.3	1:2.2.6-63.el8_10
Medium	RHSA-2026:5588	python3@3.6.8-47.el8_6.4	0:3.6.8-74.el8_10
Medium	RHSA-2024:0253	sqlite@3.26.0-16.el8_6.1	0:3.26.0-19.el8_9
Medium	RHSA-2023:3018	libarchive@3.3.3-4.el8_6	0:3.3.3-5.el8
Medium	GHSA-2xpw-w6gg-jr37	urllib3@1.24.2	2.6.0
Medium	GHSA-gm62-xv2j-4w53	urllib3@1.24.2	2.6.0
Medium	RHSA-2024:7135	git-lfs@2.13.3-3.el8_6	0:3.4.1-3.el8_10
Medium	GHSA-r64q-w8jr-g9qp	urllib3@1.24.2	1.24.3
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.18.0	0.52.0
Medium	RHSA-2023:1140	curl@7.61.1-22.el8_6.12	0:7.61.1-25.el8_7.3
Medium	RHSA-2026:9683	java-1.8.0-openjdk@1:1.8.0.402.b06-1.el8_6	1:1.8.0.492.b09-1.el8
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.18.0	0.52.0
Medium	RHSA-2026:6731	vim@2:8.0.1763-19.el8_6.4	2:8.0.1763-19.el8_6.5
Medium	RHSA-2026:6915	vim@2:8.0.1763-19.el8_6.4	2:8.0.1763-22.el8_10.1
Medium	RHSA-2023:0116	libtasn1@4.13-3.el8_6.1	0:4.13-4.el8_7
Medium	RHSA-2026:29898	libpng@2:1.6.34-5.el8	2:1.6.34-11.el8_10
Medium	RHSA-2023:5249	ncurses@6.1-9.20180224.el8_6.1	0:6.1-9.20180224.el8_8.1
Medium	GHSA-pc3f-x583-g7j2	github.com/moby/spdystream@v0.2.0	0.5.1
Medium	RHSA-2025:11327	glib2@2.56.4-158.el8_6.1	0:2.56.4-166.el8_10
Medium	RHSA-2025:14988	glib2@2.56.4-158.el8_6.1	0:2.56.4-158.el8_6.2
Medium	RHBA-2024:5736	ca-certificates@2023.2.60_v7.0.306-80.0.el8_6	0:2024.2.69_v8.0.303-80.0.el8_10
Medium	RHSA-2025:19835	bind@32:9.11.36-3.el8_6.5	32:9.11.36-16.el8_10.6
Medium	RHSA-2024:0265	java-1.8.0-openjdk@1:1.8.0.402.b06-1.el8_6	1:1.8.0.402.b06-2.el8
Medium	RHSA-2024:0266	java-11-openjdk@1:11.0.22.0.7-1.el8_6	1:11.0.22.0.7-2.el8
Medium	RHSA-2026:26408	rsync@3.1.3-14.el8_6.5	0:3.1.3-27.el8_10
Medium	RHSA-2024:8117	java-1.8.0-openjdk@1:1.8.0.402.b06-1.el8_6	1:1.8.0.432.b06-2.el8
Medium	RHSA-2024:8121	java-11-openjdk@1:11.0.22.0.7-1.el8_6	1:11.0.25.0.9-2.el8
Medium	RHSA-2024:4418	less@530-1.el8	0:530-3.el8_6
Medium	RHBA-2024:3053	git-lfs@2.13.3-3.el8_6	0:3.4.1-1.el8
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.18.0	0.52.0
Medium	GHSA-hcg3-q754-cr77	golang.org/x/crypto@v0.18.0	0.35.0
Medium	RHSA-2023:0096	dbus@1:1.12.8-18.el8_6.3	1:1.12.8-23.el8_7.1
Medium	RHSA-2026:26354	libxml2@2.9.7-13.el8_6.4	0:2.9.7-21.el8_10.5
Medium	RHSA-2026:30853	git-lfs@2.13.3-3.el8_6	0:3.4.1-11.el8_10
Medium	RHSA-2024:3552	python-idna@2.5-5.el8	0:2.5-5.el8_6.1
Medium	RHSA-2026:41948	javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6	0:5.3.0-2.module+el8.10.0+23274+27840b45
Medium	RHSA-2024:0256	python3@3.6.8-47.el8_6.4	0:3.6.8-56.el8_9.3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.13latest	1 year ago	3.72.0-ubi-1	1464294476	16,047

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/redhat-cop/sonatype-nexus.svg)](https://charts.stackradar.io/charts/redhat-cop/sonatype-nexus)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.