StackRadar

nominatim 6.4.2 Helm chart

robjuz

Scored 23 Sept 2026

A Helm chart for Kubernetes

Version 6.4.2 8 days agoapp version 5.3.2 2Artifact Hub

nominatim 6.4.2 deploys 4 container images: curlimages/curl, library/nginx, mediagis/nominatim and bitnamilegacy/postgresql. Across them, 5,575 findings3 critical, 3 high 3 on CISA KEV. The highest contribution is UBUNTU-CVE-2026-53266 in linux 6.8.0-124.124, with no fix listed.

Radar Score

50,236335095,060

5,575 findings over 4 of 4 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
curlimages/curllatest00000
library/nginx1.31.6-alpine00000
mediagis/nominatim×25.3.2214424,81146,422
bitnamilegacy/postgresql16.4.0-debian-12-r1412672493,814

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

4,957 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowUBUNTU-CVE-2026-73281openssh@1:9.6p1-3ubuntu13.161:9.6p1-3ubuntu13.19
LowBIT-postgresql-2025-12817postgresql@16.4.0-1213.23.0
LowUBUNTU-CVE-2024-56712linux@6.8.0-124.124no fix listed
LowBIT-postgresql-2025-8713postgresql@16.4.0-1213.22.0
LowDSA-5979-2libxslt@1.1.35-11.1.35-1+deb12u3
LowUSN-8625-1openssl@3.0.13-0ubuntu3.113.0.13-0ubuntu3.12
LowUSN-8688-1pam@1.5.3-5ubuntu5.51.5.3-5ubuntu5.7
LowDEBIAN-CVE-2026-40228systemd@252.30-1~deb12u2no fix listed
LowUBUNTU-CVE-2025-13462python3.12@3.12.3-1ubuntu0.133.12.3-1ubuntu0.15
LowUBUNTU-CVE-2026-44927uriparser@0.9.7+dfsg-2build1no fix listed
LowUBUNTU-CVE-2026-44928uriparser@0.9.7+dfsg-2build1no fix listed
LowUBUNTU-CVE-2026-61081mysql-8.0@8.0.46-0ubuntu0.24.04.38.0.46-0ubuntu0.24.04.4
LowDEBIAN-CVE-2025-6170libxml2@2.9.14+dfsg-1.3~deb12u12.9.14+dfsg-1.3~deb12u3
LowUBUNTU-CVE-2025-66382expat@2.6.1-2ubuntu0.4no fix listed
LowUBUNTU-CVE-2026-91782binutils@2.42-4ubuntu2.10no fix listed
LowUBUNTU-CVE-2026-91781binutils@2.42-4ubuntu2.10no fix listed
LowDEBIAN-CVE-2026-95818glibc@2.36-9+deb12u8no fix listed
LowUBUNTU-CVE-2026-61096mysql-8.0@8.0.46-0ubuntu0.24.04.38.0.46-0ubuntu0.24.04.4
LowUBUNTU-CVE-2026-91779binutils@2.42-4ubuntu2.10no fix listed
LowUBUNTU-CVE-2026-91780binutils@2.42-4ubuntu2.10no fix listed
LowUBUNTU-CVE-2026-32778expat@2.6.1-2ubuntu0.42.6.1-2ubuntu0.5
LowDEBIAN-CVE-2026-86141libxml2@2.9.14+dfsg-1.3~deb12u1no fix listed
LowUBUNTU-CVE-2026-15310python3.12@3.12.3-1ubuntu0.13no fix listed
LowUBUNTU-CVE-2026-57062gnupg2@2.4.4-2ubuntu17.42.4.4-2ubuntu17.6
LowUBUNTU-CVE-2025-67899uriparser@0.9.7+dfsg-2build10.9.7+dfsg-2ubuntu0.1~esm2
LowGHSA-6vgw-5pg2-w6jppip@24.026.0
LowUBUNTU-CVE-2026-1703python-pip@24.0+dfsg-1ubuntu1.3no fix listed
LowUBUNTU-CVE-2026-60190mysql-8.0@8.0.46-0ubuntu0.24.04.38.0.46-0ubuntu0.24.04.4
LowUBUNTU-CVE-2026-53910diffutils@1:3.10-1build11:3.10-1ubuntu0.1
LowUBUNTU-CVE-2026-6879python3.12@3.12.3-1ubuntu0.13no fix listed
LowUBUNTU-CVE-2012-4542linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-89162pcre2@10.42-4ubuntu2.1no fix listed
LowUBUNTU-CVE-2025-66861binutils@2.42-4ubuntu2.10no fix listed
LowUBUNTU-CVE-2026-35388openssh@1:9.6p1-3ubuntu13.161:9.6p1-3ubuntu13.16+Fips1
LowUBUNTU-CVE-2026-18503python3.12@3.12.3-1ubuntu0.13no fix listed
LowUBUNTU-CVE-2025-54505linux@6.8.0-124.1246.8.0-136.136
LowUBUNTU-CVE-2026-73283openssh@1:9.6p1-3ubuntu13.161:9.6p1-3ubuntu13.19
LowUBUNTU-CVE-2026-80627linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-80647linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-80652linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-80679linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-80689linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-80660linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-80624linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-80629linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-80636linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-80650linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-80654linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-80676linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-80623linux@6.8.0-124.124no fix listed

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
6.4.2latest8 days ago5.3.2335095,06050,236
6.4.119 days ago5.3.2335095,06450,270

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/robjuz/nominatim.svg)](https://charts.stackradar.io/charts/robjuz/nominatim)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 17 Sept 2026 · scanned 23 Sept 2026 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.