nominatim Helm chart

Name: nominatim Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

robjuz

Scored 15 Sept 2026

A Helm chart for Kubernetes

Latest 6.4.1 11 days agoapp version 5.3.2 2Artifact Hub

nominatim 6.4.1 deploys 4 container images: curlimages/curl, library/nginx, mediagis/nominatim and bitnamilegacy/postgresql. Across them, 820 findings — 1 critical, 2 high. The highest contribution is BIT-postgresql-2025-1094 in postgresql 16.4.0-12, fixed in 13.19.0.

Radar Score

8,76012139677

820 findings over 4 of 4 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
curlimages/curl	latest	0000	0
library/nginx	1.31.5-alpine	0004	34
mediagis/nominatim×2	5.3.2	0074427	4,997
bitnamilegacy/postgresql	16.4.0-debian-12-r14	1265246	3,729

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

577 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-40228	systemd@252.30-1~deb12u2	no fix listed
Low	UBUNTU-CVE-2025-13462	python3.12@3.12.3-1ubuntu0.13	3.12.3-1ubuntu0.15
Low	UBUNTU-CVE-2026-44927	uriparser@0.9.7+dfsg-2build1	no fix listed
Low	UBUNTU-CVE-2026-44928	uriparser@0.9.7+dfsg-2build1	no fix listed
Low	UBUNTU-CVE-2026-61081	mysql-8.0@8.0.46-0ubuntu0.24.04.3	8.0.46-0ubuntu0.24.04.4
Low	UBUNTU-CVE-2025-66382	expat@2.6.1-2ubuntu0.4	no fix listed
Low	DEBIAN-CVE-2025-6170	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3
Low	UBUNTU-CVE-2026-61096	mysql-8.0@8.0.46-0ubuntu0.24.04.3	8.0.46-0ubuntu0.24.04.4
Low	UBUNTU-CVE-2026-32778	expat@2.6.1-2ubuntu0.4	no fix listed
Low	UBUNTU-CVE-2026-57062	gnupg2@2.4.4-2ubuntu17.4	2.4.4-2ubuntu17.6
Low	UBUNTU-CVE-2025-67899	uriparser@0.9.7+dfsg-2build1	0.9.7+dfsg-2ubuntu0.1~esm2
Low	GHSA-6vgw-5pg2-w6jp	pip@24.0	26.0
Low	UBUNTU-CVE-2026-1703	python-pip@24.0+dfsg-1ubuntu1.3	no fix listed
Low	UBUNTU-CVE-2026-15310	python3.12@3.12.3-1ubuntu0.13	no fix listed
Low	UBUNTU-CVE-2026-60190	mysql-8.0@8.0.46-0ubuntu0.24.04.3	8.0.46-0ubuntu0.24.04.4
Low	UBUNTU-CVE-2026-53910	diffutils@1:3.10-1build1	1:3.10-1ubuntu0.1
Low	UBUNTU-CVE-2026-6879	python3.12@3.12.3-1ubuntu0.13	no fix listed
Low	UBUNTU-CVE-2026-86137	libxml2@2.9.14+dfsg-1.3ubuntu3.8	no fix listed
Low	UBUNTU-CVE-2026-86141	libxml2@2.9.14+dfsg-1.3ubuntu3.8	no fix listed
Low	UBUNTU-CVE-2026-89162	pcre2@10.42-4ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2026-89156	pcre2@10.42-4ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2025-66861	binutils@2.42-4ubuntu2.10	no fix listed
Low	UBUNTU-CVE-2026-35388	openssh@1:9.6p1-3ubuntu13.16	1:9.6p1-3ubuntu13.16+Fips1
Low	UBUNTU-CVE-2026-18503	python3.12@3.12.3-1ubuntu0.13	no fix listed
Low	UBUNTU-CVE-2026-73283	openssh@1:9.6p1-3ubuntu13.16	1:9.6p1-3ubuntu13.19
Low	DEBIAN-CVE-2026-5958	sed@4.9-1	4.9-1+deb12u1
Low	UBUNTU-CVE-2026-6368	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.9

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
6.4.1latest	11 days ago	5.3.2	12139677	8,760

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/robjuz/nominatim.svg)](https://charts.stackradar.io/charts/robjuz/nominatim)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.