backend Helm chart

Name: backend Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

signalen

Scored 14 Sept 2026

The API for the Signals application

Latest 4.24.0 1 month agoapp version 2.50.14 0Artifact Hub

backend 4.24.0 deploys 4 container images: signalen/backend, docker.elastic.co/elasticsearch/elasticsearch, bitnamilegacy/postgresql and bitnamilegacy/rabbitmq. Across the 3 measured, 1,064 findings — 1 critical, 6 high — 4 on CISA KEV. The highest contribution is BIT-postgresql-2025-1094 in postgresql 14.4.0-11, fixed in 13.19.0.

Radar Score

11,63616160895

1,064 findings over 3 of 4 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

4 images

Image	Tag	Vulnerabilities	Radar Score
signalen/backend×5	2.50.14	00112516	6,806
docker.elastic.co/elasticsearch/elasticsearch×2	7.17.3	—	unmeasured
bitnamilegacy/postgresql	14.4.0-debian-11-r23	1332214	2,868
bitnamilegacy/rabbitmq	3.10.7-debian-11-r4	0316165	1,962

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

884 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-84450	libheif@1.15.1-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-84451	libheif@1.15.1-1+deb12u1	no fix listed
Low	DLA-3972-1	tzdata@2021a-1+deb11u4	2024b-0+deb11u1
Low	DLA-4085-1	tzdata@2021a-1+deb11u4	2025a-0+deb11u1
Low	DLA-4105-1	tzdata@2021a-1+deb11u4	2025b-0+deb11u1
Low	DLA-4213-1	curl@7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u15
Low	DLA-4403-1	tzdata@2021a-1+deb11u4	2025b-0+deb11u2
Low	DLA-4485-1	ca-certificates@20210119	20230311+deb12u1~deb11u1
Low	DEBIAN-CVE-2026-40228	systemd@252.39-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2025-50422	cairo@1.16.0-7	no fix listed
Low	DEBIAN-CVE-2026-61081	mariadb@1:10.11.18-0+deb12u1	no fix listed
Low	GHSA-m8cg-xc2p-r3fc	github.com/opencontainers/runc@v1.0.1	1.1.5
Low	DEBIAN-CVE-2011-4116	perl@5.36.0-7+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-57062	gnupg2@2.2.40-1.1+deb12u2	no fix listed
Low	DEBIAN-CVE-2025-67899	uriparser@0.9.7+dfsg-2	no fix listed
Low	GHSA-6vgw-5pg2-w6jp	pip@25.0.1	26.0
Low	DEBIAN-CVE-2026-15310	python3.11@3.11.2-6+deb12u8	no fix listed
Low	DEBIAN-CVE-2026-53910	diffutils@1:3.8-4	no fix listed
Low	DEBIAN-CVE-2026-6879	python3.11@3.11.2-6+deb12u8	no fix listed
Low	DEBIAN-CVE-2013-4472	poppler@22.12.0-2+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-86137	libxml2@2.9.14+dfsg-1.3~deb12u6	no fix listed
Low	DEBIAN-CVE-2026-86141	libxml2@2.9.14+dfsg-1.3~deb12u6	no fix listed
Low	DEBIAN-CVE-2026-24515	expat@2.5.0-1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-89156	pcre2@10.42-1	10.42-1+deb12u1
Low	DEBIAN-CVE-2025-66861	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-9165	tiff@4.5.0-6+deb12u4	no fix listed
Low	DEBIAN-CVE-2026-18503	python3.11@3.11.2-6+deb12u8	no fix listed
Low	DEBIAN-CVE-2024-13978	tiff@4.5.0-6+deb12u4	no fix listed
Low	DEBIAN-CVE-2025-8534	tiff@4.5.0-6+deb12u4	no fix listed
Low	GHSA-wwv5-g3v4-889x	tornado@6.5.7	6.5.8
Low	DEBIAN-CVE-2026-6368	glibc@2.36-9+deb12u14	no fix listed
Low	DEBIAN-CVE-2026-9672	libgd2@2.3.3-9	2.3.3-9+deb12u1
None	DEBIAN-CVE-2026-19582	binutils@2.40-2	no fix listed
None	DEBIAN-CVE-2026-3479	python3.11@3.11.2-6+deb12u8	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
4.24.0latest	1 month ago	2.50.14	16160895	11,636

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/signalen/backend.svg)](https://charts.stackradar.io/charts/signalen/backend)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.