query 1.0.0 Helm chart

Name: query Helm chart 1.0.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

siakhooi

Scored 14 Sept 2026

A Helm chart to Query backend databases

Version 1.0.0 9 days agoapp version 1.0.0 1Artifact Hub

query 1.0.0 deploys 1 container image: siakhooi/query. Across them, 152 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-45447 in openssl 3.5.6-r0, fixed in 3.5.7-r0.

Radar Score

1,7920035117

152 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
siakhooi/query	1.0.0	0035117	1,792

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

152 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-7168	curl@8.17.0-r1	8.20.0-r0
Low	GHSA-mq64-j8f9-9gcj	spring-webmvc@7.0.6	7.0.8
Low	GHSA-5m4m-73w9-8433	spring-data-commons@4.0.4	4.0.6
Low	ALPINE-CVE-2026-3783	curl@8.17.0-r1	8.19.0-r0
Low	ALPINE-CVE-2026-4873	curl@8.17.0-r1	8.20.0-r0
Low	GHSA-9fxm-vc8v-hj55	jackson-databind@3.1.0	3.1.4
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.21.2	2.21.4
Low	GHSA-5vpf-xvv7-c8vh	spring-data-commons@4.0.4	4.0.6
Low	ALPINE-CVE-2026-42769	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-3chg-m5w7-qfv5	spring-webmvc@7.0.6	7.0.8
Low	GHSA-5hh8-q8hv-fr38	jackson-databind@3.1.0	3.1.4
Low	GHSA-hgj6-7826-r7m5	jackson-databind@3.1.0	3.1.4
Low	GHSA-hc43-m36c-8v33	spring-data-mongodb@5.0.4	5.0.6
Low	GHSA-wxpp-56q6-5pcg	spring-expression@7.0.6	7.0.8
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@3.1.0	3.1.4
Low	ALPINE-CVE-2026-76957	expat@2.7.5-r0	2.8.4-r0
Low	GHSA-6p4f-wcwh-5vvm	spring-webmvc@7.0.6	7.0.7
Low	GHSA-wwpq-f5c3-7hvx	spring-boot@4.0.5	4.0.6
Low	ALPINE-CVE-2026-56403	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56404	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56405	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56408	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56406	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56407	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56410	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56411	expat@2.7.5-r0	2.8.2-r0
Low	GHSA-g9jj-cgmh-9f38	mariadb-java-client@3.5.8	3.5.9
Low	GHSA-2m67-wjpj-xhg9	jackson-core@3.1.0	3.1.1
Low	ALPINE-CVE-2026-45446	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-7009	curl@8.17.0-r1	8.20.0-r0
Low	GHSA-qxvw-fvwx-5cp7	mariadb-java-client@3.5.8	3.5.9
Low	ALPINE-CVE-2026-56412	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-50219	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56409	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56132	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-40930	libpng@1.6.57-r0	1.6.58-r1
Low	GHSA-957g-f97v-vppc	spring-webmvc@7.0.6	7.0.8
Low	ALPINE-CVE-2026-42768	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2025-14017	curl@8.17.0-r1	8.18.0-r0
Low	GHSA-cjpg-rgq5-fr37	spring-webmvc@7.0.6	7.0.8
Low	GHSA-mhm7-754m-9p8w	jackson-databind@2.21.2	2.21.5
Low	ALPINE-CVE-2026-42770	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-56131	expat@2.7.5-r0	2.8.2-r0
Low	GHSA-9m89-8frq-c98c	tomcat-embed-core@11.0.20	11.0.22
Low	GHSA-659m-px2c-25wj	spring-core@7.0.6	7.0.8
Low	GHSA-ggg2-9786-hwc8	spring-boot-autoconfigure@4.0.5	4.0.7
Low	GHSA-h3qp-gqrc-q736	spring-webmvc@7.0.6	7.0.8
Low	ALPINE-CVE-2026-41080	expat@2.7.5-r0	2.8.1-r0
Low	GHSA-7m2p-62gw-p8qq	spring-web@7.0.6	7.0.8
Low	GHSA-9f52-rjqv-25qv	spring-expression@7.0.6	7.0.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.0latest	9 days ago	1.0.0	0035117	1,792

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/siakhooi/query.svg)](https://charts.stackradar.io/charts/siakhooi/query)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.