StackRadar

nominatim 6.4.2 Helm chart

robjuz

Scored 20 Sept 2026

A Helm chart for Kubernetes

Version 6.4.2 5 days agoapp version 5.3.2 2Artifact Hub

nominatim 6.4.2 deploys 4 container images: curlimages/curl, library/nginx, mediagis/nominatim and bitnamilegacy/postgresql. Across them, 5,734 findings3 critical, 3 high 3 on CISA KEV. The highest contribution is UBUNTU-CVE-2026-53266 in linux 6.8.0-124.124, with no fix listed.

Radar Score

50,868335005,228

5,734 findings over 4 of 4 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
curlimages/curllatest00000
library/nginx1.31.6-alpine00000
mediagis/nominatim×25.3.2214344,98047,079
bitnamilegacy/postgresql16.4.0-debian-12-r1412602543,695

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

5,132 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowUBUNTU-CVE-2026-89856linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-89992linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-74439linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2024-44964linux@6.8.0-124.124no fix listed
LowDEBIAN-CVE-2026-11822sqlite3@3.40.1-2no fix listed
LowDEBIAN-CVE-2026-11824sqlite3@3.40.1-2no fix listed
LowUBUNTU-CVE-2025-1272linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-68179linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-72146linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-72196linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-72298linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-74259linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-89452linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-89877linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-89980linux@6.8.0-124.124no fix listed
LowBIT-postgresql-2026-6471postgresql@16.4.0-1214.24.0
LowUBUNTU-CVE-2026-6471postgresql-16@16.14-0ubuntu0.24.04.116.15-0ubuntu0.24.04.1
LowUBUNTU-CVE-2022-45885linux@6.8.0-124.124no fix listed
LowBIT-gdal-2026-8087gdal@3.9.23.13.0
LowUBUNTU-CVE-2023-0030linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-89806linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-80693linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2024-53216linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-46113linux@6.8.0-124.1246.8.0-136.136
LowUBUNTU-CVE-2026-72423linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-89782linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-31413linux@6.8.0-124.1246.8.0-136.136
LowUBUNTU-CVE-2026-90235linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2024-32612hdf5@1.10.10+repack-3.1ubuntu4no fix listed
LowUBUNTU-CVE-2024-32616hdf5@1.10.10+repack-3.1ubuntu4no fix listed
LowUBUNTU-CVE-2026-1502python3.12@3.12.3-1ubuntu0.133.12.3-1ubuntu0.15
LowUBUNTU-CVE-2026-4786python3.12@3.12.3-1ubuntu0.133.12.3-1ubuntu0.15
LowUBUNTU-CVE-2026-63906linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2025-36366linux@6.8.0-124.124no fix listed
LowDEBIAN-CVE-2025-40909perl@5.36.0-7+deb12u15.36.0-7+deb12u3
LowUBUNTU-CVE-2026-60178mysql-8.0@8.0.46-0ubuntu0.24.04.38.0.46-0ubuntu0.24.04.4
LowUBUNTU-CVE-2026-60585mysql-8.0@8.0.46-0ubuntu0.24.04.38.0.46-0ubuntu0.24.04.4
LowUBUNTU-CVE-2026-31626linux@6.8.0-124.1246.8.0-136.136
LowUBUNTU-CVE-2022-3238linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-12318nss@2:3.98-1ubuntu0.12:3.98-1ubuntu0.2
LowUBUNTU-CVE-2026-19672python3.12@3.12.3-1ubuntu0.13no fix listed
LowUBUNTU-CVE-2026-43198linux@6.8.0-124.1246.8.0-137.137
LowUBUNTU-CVE-2025-36070linux@6.8.0-124.124no fix listed
LowDEBIAN-CVE-2026-48961perl@5.36.0-7+deb12u1no fix listed
LowUBUNTU-CVE-2026-8458curl@8.5.0-2ubuntu10.98.5.0-2ubuntu10.10
LowUBUNTU-CVE-2026-63074openssl@3.0.13-0ubuntu3.113.0.13-0ubuntu3.15
LowUBUNTU-CVE-2026-63869linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2025-36098linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2024-53098linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2025-2668linux@6.8.0-124.124no fix listed

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
6.4.2latest5 days ago5.3.2335005,22850,868
6.4.116 days ago5.3.2335005,23250,902

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/robjuz/nominatim.svg)](https://charts.stackradar.io/charts/robjuz/nominatim)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 17 Sept 2026 · scanned 21 Sept 2026 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.