nominatim 6.4.1 Helm chart

Name: nominatim Helm chart 6.4.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

robjuz

Scored 14 Sept 2026

A Helm chart for Kubernetes

Version 6.4.1 10 days agoapp version 5.3.2 2Artifact Hub

nominatim 6.4.1 deploys 4 container images: curlimages/curl, library/nginx, mediagis/nominatim and bitnamilegacy/postgresql. Across them, 812 findings — 2 critical, 1 high. The highest contribution is BIT-postgresql-2025-1094 in postgresql 16.4.0-12, fixed in 13.19.0.

Radar Score

8,69021138670

812 findings over 4 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
curlimages/curl	latest	0000	0
library/nginx	1.31.5-alpine	0004	34
mediagis/nominatim×2	5.3.2	0074418	4,943
bitnamilegacy/postgresql	16.4.0-debian-12-r14	2164248	3,713

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

709 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2024-29158	hdf5@1.10.10+repack-3.1ubuntu4	no fix listed
Low	UBUNTU-CVE-2024-29160	hdf5@1.10.10+repack-3.1ubuntu4	no fix listed
Low	UBUNTU-CVE-2024-29162	hdf5@1.10.10+repack-3.1ubuntu4	no fix listed
Low	UBUNTU-CVE-2024-29163	hdf5@1.10.10+repack-3.1ubuntu4	no fix listed
Low	UBUNTU-CVE-2026-7017	perl@5.38.2-3.2ubuntu0.2	5.38.2-3.2ubuntu0.4
Low	UBUNTU-CVE-2026-15806	python3.12@3.12.3-1ubuntu0.13	no fix listed
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.1-4	no fix listed
Low	DEBIAN-CVE-2025-0395	glibc@2.36-9+deb12u8	2.36-9+deb12u10
Low	DEBIAN-CVE-2023-4039	gcc-12@12.2.0-14	12.2.0-14+deb12u1
Low	DSA-5962-1	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u5
Low	DEBIAN-CVE-2025-4598	systemd@252.30-1~deb12u2	252.38-1~deb12u1
Low	UBUNTU-CVE-2026-26199	hdf5@1.10.10+repack-3.1ubuntu4	no fix listed
Low	UBUNTU-CVE-2026-6846	binutils@2.42-4ubuntu2.10	no fix listed
Low	PYSEC-2026-3721	pip@24.0	26.2
Low	UBUNTU-CVE-2026-13346	python-pip@24.0+dfsg-1ubuntu1.3	no fix listed
Low	UBUNTU-CVE-2026-60001	openssh@1:9.6p1-3ubuntu13.16	1:9.6p1-3ubuntu13.18
Low	UBUNTU-CVE-2025-12781	python3.12@3.12.3-1ubuntu0.13	no fix listed
Low	DSA-5979-1	libxslt@1.1.35-1	1.1.35-1+deb12u2
Low	UBUNTU-CVE-2025-15366	python3.12@3.12.3-1ubuntu0.13	no fix listed
Low	DEBIAN-CVE-2024-22365	pam@1.5.2-6+deb12u1	1.5.2-6+deb12u2
Low	DEBIAN-CVE-2026-22796	openssl@3.0.14-1~deb12u2	3.0.18-1~deb12u2
Low	UBUNTU-CVE-2026-47064	mysql-8.0@8.0.46-0ubuntu0.24.04.3	8.0.46-0ubuntu0.24.04.4
Low	DEBIAN-CVE-2022-0563	util-linux@2.38.1-5+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-4878	libcap2@1:2.66-4	1:2.66-4+deb12u3
Low	UBUNTU-CVE-2026-11979	libxml2@2.9.14+dfsg-1.3ubuntu3.8	no fix listed
Low	BIT-postgresql-2025-12818	postgresql@16.4.0-12	13.23.0
Low	UBUNTU-CVE-2026-86140	libxml2@2.9.14+dfsg-1.3ubuntu3.8	no fix listed
Low	UBUNTU-CVE-2026-19024	hdf5@1.10.10+repack-3.1ubuntu4	no fix listed
Low	UBUNTU-CVE-2025-15367	python3.12@3.12.3-1ubuntu0.13	no fix listed
Low	UBUNTU-CVE-2026-59847	libssh@0.10.6-2ubuntu0.4	0.10.6-2ubuntu0.5
Low	DEBIAN-CVE-2026-34743	xz-utils@5.4.1-0.2	5.4.1-1+deb12u1
Low	DEBIAN-CVE-2026-5704	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	GHSA-pq67-6m6q-mj2v	urllib3@2.0.7	2.5.0
Low	DEBIAN-CVE-2026-3184	util-linux@2.38.1-5+deb12u1	no fix listed
Low	UBUNTU-CVE-2026-84366	python3.12@3.12.3-1ubuntu0.13	no fix listed
Low	DEBIAN-CVE-2026-7010	perl@5.36.0-7+deb12u1	no fix listed
Low	UBUNTU-CVE-2026-19487	perl@5.38.2-3.2ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-82474	sudo@1.9.15p5-3ubuntu5.24.04.2	no fix listed
Low	UBUNTU-CVE-2025-2153	hdf5@1.10.10+repack-3.1ubuntu4	no fix listed
Low	GHSA-65pc-fj4g-8rjx	idna@3.6	3.15
Low	UBUNTU-CVE-2026-45409	python-pip@24.0+dfsg-1ubuntu1.3	no fix listed
Low	UBUNTU-CVE-2026-45409	python-idna@3.6-2ubuntu0.1	3.6-2ubuntu0.2
Low	DEBIAN-CVE-2026-89158	pcre2@10.42-1	10.42-1+deb12u1
Low	DEBIAN-CVE-2025-27587	openssl@3.0.14-1~deb12u2	no fix listed
Low	UBUNTU-CVE-2025-2308	hdf5@1.10.10+repack-3.1ubuntu4	no fix listed
Low	UBUNTU-CVE-2026-86095	netcdf@1:4.9.2-5ubuntu4	no fix listed
Low	GHSA-9wx4-h78v-vm56	requests@2.31.0	2.32.0
Low	UBUNTU-CVE-2024-35195	requests@2.31.0+dfsg-1ubuntu1.1	no fix listed
Low	UBUNTU-CVE-2024-35195	python-pip@24.0+dfsg-1ubuntu1.3	24.0+dfsg-1ubuntu1.3+esm1
Low	UBUNTU-CVE-2025-2310	hdf5@1.10.10+repack-3.1ubuntu4	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
6.4.1latest	10 days ago	5.3.2	21138670	8,690

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/robjuz/nominatim.svg)](https://charts.stackradar.io/charts/robjuz/nominatim)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.