StackRadar

nominatim 6.4.3 Helm chart

robjuz

Scored 18 Oct 2026

A Helm chart for Kubernetes

Version 6.4.3 2 days agoapp version 5.3.2 2Artifact Hub

nominatim 6.4.3 deploys 4 container images: curlimages/curl, library/nginx, mediagis/nominatim and bitnamilegacy/postgresql. Across them, 6,286 findings — 4 critical, 3 high — 4 on CISA KEV. The highest contribution is UBUNTU-CVE-2026-53266 in linux 6.8.0-124.124, fixed in 6.8.0-146.146.

Radar Score

56,770435605,718

6,286 findings over 4 of 4 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images
ImageTagVulnerabilitiesRadar Score
curlimages/curllatest00000
library/nginx1.31.7-alpine000336
mediagis/nominatim×25.3.2224895,45252,667
bitnamilegacy/postgresql16.4.0-debian-12-r1421712634,067

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

6,158 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowUBUNTU-CVE-2026-90379linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-43190linux@6.8.0-124.1246.8.0-134.134
LowUBUNTU-CVE-2026-43233linux@6.8.0-124.1246.8.0-134.134
LowUBUNTU-CVE-2026-64448linux@6.8.0-124.1246.8.0-147.147
LowUBUNTU-CVE-2026-98056linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-90153linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-98070linux@6.8.0-124.124no fix listed
LowBIT-postgresql-2026-6637postgresql@16.4.0-1214.23.0
LowUBUNTU-CVE-2020-10812hdf5@1.10.10+repack-3.1ubuntu4no fix listed
LowUBUNTU-CVE-2026-98239linux@6.8.0-124.124no fix listed
LowBIT-postgresql-2026-6479postgresql@16.4.0-1214.23.0
LowUBUNTU-CVE-2026-89544linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-53390linux@6.8.0-124.1246.8.0-147.147
LowUBUNTU-CVE-2026-64389linux@6.8.0-124.124no fix listed
LowDEBIAN-CVE-2025-69419openssl@3.0.14-1~deb12u23.0.18-1~deb12u2
LowUBUNTU-CVE-2026-89632linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2018-1121linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2025-69534python3.12@3.12.3-1ubuntu0.133.12.3-1ubuntu0.15
LowUBUNTU-CVE-2026-64398linux@6.8.0-124.1246.8.0-147.147
LowUBUNTU-CVE-2026-31629linux@6.8.0-124.1246.8.0-136.136
LowDEBIAN-CVE-2025-32415libxml2@2.9.14+dfsg-1.3~deb12u12.9.14+dfsg-1.3~deb12u2
LowUBUNTU-CVE-2026-31612linux@6.8.0-124.1246.8.0-136.136
LowUBUNTU-CVE-2026-43184linux@6.8.0-124.1246.8.0-134.134
LowUBUNTU-CVE-2026-52998linux@6.8.0-124.1246.8.0-136.136
LowUBUNTU-CVE-2026-64380linux@6.8.0-124.1246.8.0-147.147
LowUBUNTU-CVE-2026-74704linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-89711linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-53217linux@6.8.0-124.1246.8.0-146.146
LowUBUNTU-CVE-2026-64545linux@6.8.0-124.1246.8.0-147.147
LowUBUNTU-CVE-2026-64577linux@6.8.0-124.1246.8.0-147.147
LowUBUNTU-CVE-2026-74697linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-46133linux@6.8.0-124.1246.8.0-136.136
LowBIT-postgresql-2026-18408postgresql@16.4.0-1214.24.0
LowUBUNTU-CVE-2026-18408postgresql-16@16.14-0ubuntu0.24.04.116.15-0ubuntu0.24.04.1
LowUBUNTU-CVE-2026-89729linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-43239linux@6.8.0-124.1246.8.0-134.134
LowUBUNTU-CVE-2026-63915linux@6.8.0-124.1246.8.0-146.146
LowUBUNTU-CVE-2026-63916linux@6.8.0-124.1246.8.0-146.146
LowUBUNTU-CVE-2026-63975linux@6.8.0-124.1246.8.0-146.146
LowUBUNTU-CVE-2026-64313linux@6.8.0-124.1246.8.0-147.147
LowUBUNTU-CVE-2026-64364linux@6.8.0-124.1246.8.0-147.147
LowUBUNTU-CVE-2026-64382linux@6.8.0-124.1246.8.0-147.147
LowUBUNTU-CVE-2026-72121linux@6.8.0-124.1246.8.0-147.147
LowUBUNTU-CVE-2026-72124linux@6.8.0-124.1246.8.0-147.147
LowUBUNTU-CVE-2026-89626linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-89849linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-89483linux@6.8.0-124.124no fix listed
LowUBUNTU-CVE-2026-60315mysql-8.0@8.0.46-0ubuntu0.24.04.38.0.46-0ubuntu0.24.04.4
LowUBUNTU-CVE-2026-43112linux@6.8.0-124.1246.8.0-136.136
LowGHSA-wf93-45jw-7689pip@24.026.1.2

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
6.4.3latest2 days ago5.3.2435605,71856,770
6.4.21 month ago5.3.2435605,72256,816
6.4.11 month ago5.3.2435605,72156,789

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/robjuz/nominatim.svg)](https://charts.stackradar.io/charts/robjuz/nominatim)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 17 Oct 2026 · scanned 18 Oct 2026 · advisories as of 18 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.