nominatim 6.4.2 Helm chart

Name: nominatim Helm chart 6.4.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

robjuz

Scored 17 Sept 2026

A Helm chart for Kubernetes

Version 6.4.2 yesterdayapp version 5.3.2 2Artifact Hub

nominatim 6.4.2 deploys 4 container images: curlimages/curl, library/nginx, mediagis/nominatim and bitnamilegacy/postgresql. Across them, 825 findings — 1 critical, 2 high. The highest contribution is BIT-postgresql-2025-1094 in postgresql 16.4.0-12, fixed in 13.19.0.

Radar Score

8,82612140682

825 findings over 4 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
curlimages/curl	latest	0000	0
library/nginx	1.31.6-alpine	0000	0
mediagis/nominatim×2	5.3.2	0074437	5,068
bitnamilegacy/postgresql	16.4.0-debian-12-r14	1266245	3,758

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

717 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2024-32607	hdf5@1.10.10+repack-3.1ubuntu4	no fix listed
Low	UBUNTU-CVE-2024-32610	hdf5@1.10.10+repack-3.1ubuntu4	no fix listed
Low	UBUNTU-CVE-2026-42014	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6
Low	DEBIAN-CVE-2026-4105	systemd@252.30-1~deb12u2	252.39-1~deb12u2
Low	UBUNTU-CVE-2026-78409	util-linux@2.39.3-9ubuntu6.5	no fix listed
Low	DEBIAN-CVE-2023-4641	shadow@1:4.13+dfsg1-1+b1	1:4.13+dfsg1-1+deb12u1
Low	DEBIAN-CVE-2024-13176	openssl@3.0.14-1~deb12u2	3.0.16-1~deb12u1
Low	UBUNTU-CVE-2026-9375	python-pip@24.0+dfsg-1ubuntu1.3	no fix listed
Low	UBUNTU-CVE-2026-9375	python-urllib3@2.0.7-1ubuntu0.7	no fix listed
Low	UBUNTU-CVE-2024-32606	hdf5@1.10.10+repack-3.1ubuntu4	no fix listed
Low	UBUNTU-CVE-2024-33875	hdf5@1.10.10+repack-3.1ubuntu4	no fix listed
Low	UBUNTU-CVE-2024-33876	hdf5@1.10.10+repack-3.1ubuntu4	no fix listed
Low	UBUNTU-CVE-2025-69648	binutils@2.42-4ubuntu2.10	no fix listed
Low	UBUNTU-CVE-2026-3441	binutils@2.42-4ubuntu2.10	no fix listed
Low	DEBIAN-CVE-2026-45446	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2
Low	BIT-gdal-2026-49014	gdal@3.9.2	3.13.1
Low	UBUNTU-CVE-2026-49014	gdal@3.8.4+dfsg-3ubuntu3	no fix listed
Low	UBUNTU-CVE-2026-4360	python3.12@3.12.3-1ubuntu0.13	3.12.3-1ubuntu0.17
Low	UBUNTU-CVE-2025-69652	binutils@2.42-4ubuntu2.10	no fix listed
Low	UBUNTU-CVE-2026-19027	hdf5@1.10.10+repack-3.1ubuntu4	no fix listed
Low	UBUNTU-CVE-2026-56405	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-56408	expat@2.6.1-2ubuntu0.4	no fix listed
Low	BIT-gdal-2026-8088	gdal@3.9.2	3.13.0
Low	UBUNTU-CVE-2026-3446	python3.12@3.12.3-1ubuntu0.13	no fix listed
Low	UBUNTU-CVE-2023-39328	openjpeg2@2.5.0-2ubuntu0.5	no fix listed
Low	UBUNTU-CVE-2025-69651	binutils@2.42-4ubuntu2.10	no fix listed
Low	UBUNTU-CVE-2026-58055	nghttp2@1.59.0-1ubuntu0.3	1.59.0-1ubuntu0.4
Low	UBUNTU-CVE-2025-66864	binutils@2.42-4ubuntu2.10	no fix listed
Low	UBUNTU-CVE-2024-29166	hdf5@1.10.10+repack-3.1ubuntu4	no fix listed
Low	UBUNTU-CVE-2026-19026	hdf5@1.10.10+repack-3.1ubuntu4	no fix listed
Low	UBUNTU-CVE-2026-19028	hdf5@1.10.10+repack-3.1ubuntu4	no fix listed
Low	UBUNTU-CVE-2026-2297	python3.12@3.12.3-1ubuntu0.13	3.12.3-1ubuntu0.15
Low	BIT-gdal-2026-8213	gdal@3.9.2	3.13.0
Low	UBUNTU-CVE-2026-8213	gdal@3.8.4+dfsg-3ubuntu3	no fix listed
Low	UBUNTU-CVE-2026-4647	binutils@2.42-4ubuntu2.10	no fix listed
Low	UBUNTU-CVE-2026-47023	mysql-8.0@8.0.46-0ubuntu0.24.04.3	8.0.46-0ubuntu0.24.04.4
Low	DEBIAN-CVE-2026-40225	systemd@252.30-1~deb12u2	252.39-1~deb12u2
Low	BIT-postgresql-2026-14672	postgresql@16.4.0-12	16.15.0
Low	UBUNTU-CVE-2026-14672	postgresql-16@16.14-0ubuntu0.24.04.1	16.15-0ubuntu0.24.04.1
Low	UBUNTU-CVE-2026-3832	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6
Low	UBUNTU-CVE-2026-19023	hdf5@1.10.10+repack-3.1ubuntu4	no fix listed
Low	UBUNTU-CVE-2026-19025	hdf5@1.10.10+repack-3.1ubuntu4	no fix listed
Low	DEBIAN-CVE-2026-27171	zlib@1:1.2.13.dfsg-1	no fix listed
Low	DEBIAN-CVE-2017-14159	openldap@2.5.13+dfsg-5	no fix listed
Low	UBUNTU-CVE-2025-69647	binutils@2.42-4ubuntu2.10	no fix listed
Low	DEBIAN-CVE-2025-29088	sqlite3@3.40.1-2	no fix listed
Low	DEBIAN-CVE-2025-1390	libcap2@1:2.66-4	1:2.66-4+deb12u1
Low	UBUNTU-CVE-2026-50813	sqlite3@3.45.1-1ubuntu2.5	3.45.1-1ubuntu2.7
Low	DEBIAN-CVE-2017-18018	coreutils@9.1-1	no fix listed
Low	UBUNTU-CVE-2026-29043	hdf5@1.10.10+repack-3.1ubuntu4	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
6.4.2latest	yesterday	5.3.2	12140682	8,826
6.4.1	13 days ago	5.3.2	12140686	8,860

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/robjuz/nominatim.svg)](https://charts.stackradar.io/charts/robjuz/nominatim)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.