StackRadar

kafka 0.3.0 Helm chart

sb-helm-charts

Scored 14 Sept 2026

Apache Kafka streaming platform with KRaft mode and management UI

Version 0.3.0 9 months agoapp version 3.6.1 0Artifact Hub

kafka 0.3.0 deploys 2 container images: provectuslabs/kafka-ui and bitnami/kafka. Across the 1 measured, 114 findings — 0 critical, 3 high. The highest contribution is GHSA-vgq5-3255-v292 in kafka-clients 3.5.0, fixed in 3.9.1.

Radar Score

1,597033378

114 findings over 1 of 2 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
provectuslabs/kafka-uilatest0333781,597
bitnami/kafka3.6.1—unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

33 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-cx7f-g6mp-7hqmspring-webflux@6.0.11no fix listed
MediumGHSA-r7pg-v2c8-mfg3avro@1.11.11.11.4
MediumGHSA-ccgv-vj62-xf9hspring-web@6.0.116.0.17
MediumGHSA-hgjh-9rj2-g67jspring-web@6.0.116.0.18
MediumGHSA-c4q5-6c82-3qpwspring-security-web@6.1.36.1.11
MediumGHSA-735f-pc8j-v9w8protobuf-java@3.23.33.25.5
MediumALPINE-CVE-2023-3446openssl@1.1.1t-r31.1.1u-r2
MediumGHSA-4g8c-wm8x-jfhwnetty-handler@4.1.97.Final4.1.118.Final
MediumGHSA-rhrv-645h-fjfhavro@1.11.11.11.3
MediumGHSA-qcwq-55hx-v3vhsnappy-java@1.1.10.01.1.10.1
MediumGHSA-w9fj-cfpg-grvvnetty-codec-http2@4.1.97.Final4.1.132.Final
MediumALPINE-CVE-2023-5678openssl@1.1.1t-r31.1.1w-r1
MediumGHSA-2wrp-6fg6-hmc5spring-web@6.0.116.0.19
MediumGHSA-j288-q9x7-2f5vcommons-lang3@3.12.03.18.0
MediumGHSA-4jq9-2xhw-jpx7json@2023022720231013
MediumGHSA-3qp7-7mw8-wx86netty-handler@4.1.97.Final4.1.135.Final
MediumGHSA-f3jh-qvm4-mg39spring-security-core@6.1.36.1.8
MediumGHSA-rmj7-2vxq-3g9fjackson-databind@2.15.22.18.8
MediumGHSA-xjhv-p3fv-x24rreactor-netty-http@1.1.101.1.13
MediumGHSA-j3rv-43j4-c7qmjackson-databind@2.15.22.18.8
MediumGHSA-prj3-ccx8-p6x4netty-codec-http2@4.1.97.Final4.1.124.Final
MediumGHSA-55g7-9cwv-5qfvsnappy-java@1.1.10.01.1.10.4
MediumGHSA-cm33-6792-r9fmnetty-codec-dns@4.1.97.Final4.1.133.Final
MediumGHSA-f6hv-jmp6-3vwvnetty-codec-http@4.1.97.Final4.1.133.Final
MediumGHSA-f6hv-jmp6-3vwvnetty-codec-http2@4.1.97.Final4.1.133.Final
MediumGHSA-jppx-w49h-x2qqnetty-codec-http@4.1.97.Final4.1.136.Final
MediumGHSA-q24v-hpg3-v3jpreactor-netty-core@1.1.101.1.13
MediumGHSA-mf92-479x-3373spring-security-web@6.1.3no fix listed
MediumGHSA-x4gw-5cx5-pgmhnetty-handler@4.1.97.Final4.1.135.Final
MediumGHSA-pqr6-cmr2-h8hfsnappy-java@1.1.10.01.1.10.1
MediumGHSA-264p-99wq-f4j6ion-java@1.0.2no fix listed
MediumGHSA-gvpg-vgmx-xg6wnimbus-jose-jwt@9.319.37.2
MediumGHSA-2x2g-32r7-p4x8kafka-clients@3.5.03.7.1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.3.0latest9 months ago3.6.10333781,597

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/sb-helm-charts/kafka.svg)](https://charts.stackradar.io/charts/sb-helm-charts/kafka)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 7 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.