StackRadar

bookinfo Helm chart

rgnu

Scored 14 Sept 2026

Latest 1.0.0 2 years agoApp version not verified against the render 0Artifact Hub

bookinfo 1.0.0 deploys 7 container images: istio/examples-bookinfo-details-v1, istio/examples-bookinfo-ratings-v1, istio/examples-bookinfo-reviews-v1, istio/examples-bookinfo-reviews-v2 and 3 more. Across them, 1,193 findings — 13 critical, 46 high. The highest contribution is UBUNTU-CVE-2022-2068 in openssl 1.0.2g-1ubuntu4.14, fixed in 1.0.2g-1ubuntu4.20+esm5.

Radar Score

20,4621346457677

1,193 findings over 7 of 7 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images
ImageTagVulnerabilitiesRadar Score
istio/examples-bookinfo-details-v11.14.0012128807
istio/examples-bookinfo-ratings-v11.14.00359792,364
istio/examples-bookinfo-reviews-v11.14.04121111665,073
istio/examples-bookinfo-reviews-v21.14.04121111665,073
istio/examples-bookinfo-reviews-v31.14.04121111665,073
istio/examples-bookinfo-productpage-v11.14.00137721,528
pstauffer/curllatest1570544

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

289 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowGHSA-qjxf-f2mg-c6mctornado@4.5.36.5.5
LowUBUNTU-CVE-2026-48959perl@5.22.1-9ubuntu0.6no fix listed
LowUBUNTU-CVE-2026-5928glibc@2.23-0ubuntu10no fix listed
LowGHSA-h75v-3vvj-5mfjjinja2@2.103.1.4
LowUBUNTU-CVE-2026-6791glibc@2.23-0ubuntu10no fix listed
LowGHSA-mpf4-983q-p7j4tornado@4.5.36.5.8
LowGHSA-w5hq-g745-h8pquuid@3.3.211.1.1
LowUBUNTU-CVE-2020-27618glibc@2.23-0ubuntu102.23-0ubuntu11.3+esm3
LowGHSA-9hjg-9r4m-mvj7requests@2.21.02.32.4
LowUBUNTU-CVE-2022-4415systemd@229-4ubuntu21.15229-4ubuntu21.31+esm3
LowUBUNTU-CVE-2018-19211ncurses@6.0+20160213-1ubuntu16.0+20160213-1ubuntu1+esm2
LowDLA-2425-1openldap@2.4.44+dfsg-5+deb9u22.4.44+dfsg-5+deb9u5
LowGHSA-h5c8-rqwp-cp95jinja2@2.103.1.3
LowGHSA-9ppj-qmqm-q256tar@2.2.17.5.11
LowGHSA-29vq-49wr-vm6xwerkzeug@0.14.13.1.6
LowGHSA-4jwp-vfvf-657pbson@1.0.91.1.4
LowUBUNTU-CVE-2020-13776systemd@229-4ubuntu21.15no fix listed
LowGHSA-mpwj-fcr6-x34cyarn@1.15.21.22.13
LowGHSA-hgf8-39gv-g3f2werkzeug@0.14.13.1.4
LowUBUNTU-CVE-2019-13627libgcrypt20@1.6.5-2ubuntu0.51.6.5-2ubuntu0.6
LowUBUNTU-CVE-2020-10029glibc@2.23-0ubuntu102.23-0ubuntu11.2
LowUBUNTU-CVE-2026-57432perl@5.22.1-9ubuntu0.65.22.1-9ubuntu0.9+esm3
LowUBUNTU-CVE-2019-1547openssl@1.0.2g-1ubuntu4.141.0.2g-1ubuntu4.16
LowGHSA-r995-q44h-hr64webrick@1.4.21.8.2
LowGHSA-4xqq-m2hx-25v8rexml@3.1.93.3.2
LowGHSA-f886-m6hf-6m8vbrace-expansion@1.1.111.1.13
LowUBUNTU-CVE-2016-2781coreutils@8.25-2ubuntu3~16.04no fix listed
LowUBUNTU-CVE-2016-9844unzip@6.0-20ubuntu16.0-20ubuntu1.1
LowUBUNTU-CVE-2026-48962perl@5.22.1-9ubuntu0.6no fix listed
LowUBUNTU-CVE-2025-40909perl@5.22.1-9ubuntu0.6no fix listed
LowGHSA-83g3-92jg-28cxtar@2.2.17.5.8
LowUBUNTU-CVE-2026-48961perl@5.22.1-9ubuntu0.6no fix listed
LowUBUNTU-CVE-2019-7309glibc@2.23-0ubuntu10no fix listed
LowUBUNTU-CVE-2026-6238glibc@2.23-0ubuntu10no fix listed
LowGHSA-34jh-p97f-mpxfurllib3@1.24.21.26.19
LowGHSA-4xh5-x5gv-qwphpip@19.125.3
LowGHSA-w8wr-v893-vjvptar@2.2.17.5.18
LowUBUNTU-CVE-2014-9913unzip@6.0-20ubuntu16.0-20ubuntu1.1
LowUBUNTU-CVE-2026-5435glibc@2.23-0ubuntu10no fix listed
LowGHSA-h35f-9h28-mq5csetuptools@41.0.183.0.0
LowGHSA-fqwm-6jpj-5wxctornado@4.5.36.5.5
LowUBUNTU-CVE-2026-7017perl@5.22.1-9ubuntu0.6no fix listed
LowUBUNTU-CVE-2025-0395glibc@2.23-0ubuntu102.23-0ubuntu11.3+esm8
LowUBUNTU-CVE-2023-4039gccgo-6@6.0.1-0ubuntu1no fix listed
LowUBUNTU-CVE-2023-4039gcc-5@5.4.0-6ubuntu1~16.04.11no fix listed
LowUBUNTU-CVE-2026-76642util-linux@2.27.1-6ubuntu3.6no fix listed
LowUBUNTU-CVE-2024-28085util-linux@2.27.1-6ubuntu3.6no fix listed
LowUBUNTU-CVE-2019-17594ncurses@6.0+20160213-1ubuntu16.0+20160213-1ubuntu1+esm2
LowPYSEC-2026-3721pip@19.126.2
LowDLA-2295-1curl@7.52.1-5+deb9u97.52.1-5+deb9u11

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.0latest2 years ago—134645767720,462

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/rgnu/bookinfo.svg)](https://charts.stackradar.io/charts/rgnu/bookinfo)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.